@jevitate/cli 0.5.0 → 0.7.0

package/dist/explore-author.js

@@ -1,8 +1,7 @@
-import { PlaywrightBrowserPort } from "@jevitate/playwright";
-import { sessionLaunchOptions } from "./browser-run-options.js";
-import { CastActor, BrowseTheWeb } from "@jevitate/screenplay";
 import { authorJourney, assertAuthorizedExploreTarget, } from "@jevitate/explore";
 import { FsJourneyStore } from "@jevitate/journey";
+import { runExploration } from "./explore-goal.js";
+import { screenshotsDirFor } from "./run-screenshots.js";
 /**
  * The programmatic surface behind `jevitate explore author-journey` — drives
  * the goal-based exploration mission and feeds its take(s) through RxD's
@@ -36,6 +35,9 @@ export async function runAuthorJourney(opts) {
         browser: opts.browser,
         ...(opts.storageState !== undefined ? { storageState: opts.storageState } : {}),
         ...(opts.safety === undefined ? {} : { safety: opts.safety }),
+        ...(opts.goalRun === undefined ? {} : { goalRun: opts.goalRun }),
+        ...(opts.outDir === undefined ? {} : { outDir: opts.outDir }),
+        ...(opts.usage === undefined ? {} : { usage: opts.usage }),
     });
     if (result.outcome === "authored") {
         // #170: a Journey authored behind a login (--storage-state) declares it, so a run without a
@@ -48,41 +50,71 @@ export async function runAuthorJourney(opts) {
     }
     return result;
 }
-/** Default authoring step: opens a real browser, builds an actor, authors. */
+/**
+ * Default authoring step (#369): every take — the discovery and each corroborating one — is a full
+ * goal run (`runExploration`, exactly what `jevitate explore --strategy goal` runs, with the same
+ * run-shaping options), in its own browser, writing its own result, transcript and Recording; its
+ * verdict (`goalOutcome`) decides whether the take reached the goal.
+ */
 async function authorViaBrowser(args) {
     if (!args.judge || !args.gen) {
         throw new Error("runAuthorJourney: judge and gen gateways are required to drive the authoring mission");
     }
     const judge = args.judge;
     const gen = args.gen;
-    const portFactory = args.browserPortFactory ?? (() => new PlaywrightBrowserPort());
-    const port = portFactory();
-    const session = await port.open({
-        ...sessionLaunchOptions(args.browser),
-        allowedOrigins: [...args.allowlist],
-        baseUrl: args.origin,
-        ...(args.storageState !== undefined ? { storageState: args.storageState } : {}),
+    const g = args.goalRun ?? {};
+    // targets.json's safety (`goalRun.target`) wins; a caller's `safety` (#249) applies without one.
+    const target = g.target ?? (args.safety === undefined ? undefined : { safety: args.safety });
+    return authorJourney({
+        goal: args.goal,
+        ...(args.successAssertion === undefined ? {} : { successAssertion: args.successAssertion }),
+        ...(args.successChecks === undefined ? {} : { successChecks: args.successChecks }),
+        allowlist: args.allowlist,
+        startUrl: args.url,
+        bounds: args.bounds,
+        takes: args.takes,
+        journeyId: args.journeyId,
+        journeyName: args.journeyName,
+        runTake: async ({ goal, successChecks }) => {
+            const r = await runExploration({
+                ...g,
+                ...(target === undefined ? {} : { target }),
+                url: args.url,
+                goal,
+                successChecks,
+                allowlist: args.allowlist,
+                judge,
+                gen,
+                ...(args.usage === undefined ? {} : { usage: args.usage }),
+                bounds: args.bounds,
+                ...(args.outDir === undefined ? {} : { outDir: args.outDir }),
+                ...(args.browserPortFactory === undefined ? {} : { browserPortFactory: args.browserPortFactory }),
+                ...(args.browser === undefined ? {} : { browser: args.browser }),
+                ...(args.storageState === undefined ? {} : { storageState: args.storageState }),
+            });
+            return goalRunTake(r, g);
+        },
     });
-    try {
-        const actor = CastActor.named("author").whoCan(new BrowseTheWeb(session, [...args.allowlist]));
-        return await authorJourney({
-            goal: args.goal,
-            ...(args.successAssertion === undefined ? {} : { successAssertion: args.successAssertion }),
-            ...(args.successChecks === undefined ? {} : { successChecks: args.successChecks }),
-            allowlist: args.allowlist,
-            startUrl: args.url,
-            bounds: args.bounds,
-            actor,
-            judgment: judge,
-            generation: gen,
-            takes: args.takes,
-            journeyId: args.journeyId,
-            journeyName: args.journeyName,
-            ...(args.safety === undefined ? {} : { safety: args.safety }),
-        });
-    }
-    finally {
-        await session.close();
-    }
+}
+/** #369: one goal run as an authoring take — its Recording and where everything it wrote is. */
+export function goalRunTake(r, g = {}) {
+    const reason = r.reason ?? r.failure?.message;
+    const recordingPath = r.recordingPaths[0];
+    const diagnostics = {
+        outcome: r.goalOutcome,
+        ...(reason === undefined ? {} : { reason }),
+        stop: r.stop,
+        runOutcome: r.runOutcome,
+        ...(r.failure === undefined ? {} : { failure: { kind: r.failure.kind, message: r.failure.message } }),
+        checks: r.checks,
+        decisions: r.decisions,
+        actions: r.actions,
+        finalUrl: r.finalUrl,
+        resultPath: r.resultPath,
+        transcriptPath: r.transcriptPath,
+        recordingPaths: r.recordingPaths,
+        ...(g.screenshots === undefined || recordingPath === undefined ? {} : { screenshotsDir: screenshotsDirFor(g.screenshots, recordingPath) }),
+    };
+    return { outcome: r.goalOutcome, recording: r.recording, diagnostics };
 }
 //# sourceMappingURL=explore-author.js.map

package/dist/explore-author.js.map

@@ -1 +1 @@
-{"version":3,"file":"explore-author.js","sourceRoot":"","sources":["../src/explore-author.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAA+C,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG/D,OAAO,EACL,aAAa,EACb,6BAA6B,GAG9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAoEnD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,wEAAwE;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,4FAA4F;QAC5F,0FAA0F;QAC1F,MAAM,OAAO,GACX,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,IAAI;YAC9E,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;YACrF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,gBAAgB,CAAC,IAA0B;IACxD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAErB,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;QAC9B,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO,MAAM,aAAa,CAAC;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;YAClF,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK;YACL,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"explore-author.js","sourceRoot":"","sources":["../src/explore-author.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,aAAa,EACb,6BAA6B,GAK9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,cAAc,EAA6B,MAAM,mBAAmB,CAAC;AAE9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAkFzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,wEAAwE;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KAC3D,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,4FAA4F;QAC5F,0FAA0F;QAC1F,MAAM,OAAO,GACX,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,IAAI;YAC9E,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;YACrF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAA0B;IACxD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7B,iGAAiG;IACjG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,OAAO,aAAa,CAAC;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE;YACzC,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC;gBAC7B,GAAG,CAAC;gBACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI;gBACJ,aAAa;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK;gBACL,GAAG;gBACH,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC1D,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACjG,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aAChF,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,CAAuB,EAAE,IAAyC,EAAE;IAC9F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IAC9C,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,WAAW,GAA0B;QACzC,OAAO,EAAE,CAAC,CAAC,WAAW;QACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrG,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;KAC3I,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;AACzE,CAAC"}

package/dist/explore-cli.js

@@ -1,7 +1,7 @@
 import { existsSync } from "node:fs";
 import { envCredentialStore, MissingCredentialError } from "@jevitate/ai-core";
 import { loadLocalCredentials } from "./credentials-file.js";
-import { FixtureNotFoundError, ScopeUnderivableError, UnauthorizedExploreTargetError, resolveCoverageThresholds, parseSecretField, SecretFieldSpecError, TypeFixtureSpecError, validateDenyPatterns, } from "@jevitate/explore";
+import { FixtureNotFoundError, ScopeUnderivableError, UnauthorizedExploreTargetError, resolveCoverageThresholds, TypeFixtureSpecError, validateDenyPatterns, } from "@jevitate/explore";
 import { loadTypeFixtures } from "./type-fixture-file.js";
 import { secretCommandRunner } from "./secret-command.js";
 import { ok, fail } from "./envelope.js";
@@ -18,7 +18,7 @@ import { LITERAL_SECRET_WARNING, SecretArgError, resolveSecretArgs } from "./sec
 import { withEngine } from "./engine.js";
 import { setKillSwitchOutput } from "./kill-signal.js";
 import { EXIT_CODES } from "./exit-codes.js";
-import { intArg, positiveNumberArg, nonNegativeIntArg, positiveIntArg, ratioArg } from "./cli-args.js";
+import { positiveNumberArg, nonNegativeIntArg, positiveIntArg, ratioArg } from "./cli-args.js";
 import { formatMissionHuman, formatMultiRunHuman } from "./cli-output.js";
 import { runExploration, runCoverageMission, runAdversarialCliMission, CLI_ADVERSARIAL_STRATEGIES, runFeatureCliMission, parseSuccessSpec, resolveExploreAllowlist, } from "./explore-api.js";
 import { parseLogSourceSpecs, LogSourceSpecError } from "./log-sources.js";
@@ -45,6 +45,7 @@ import { formatCampaignHuman } from "./campaign-cli.js";
 import { forwardedArgv } from "./multi-run-cli.js";
 import { ANCHORED_STRATEGIES, JourneyPrefixArgsError, JourneyPrefixStaleError, journeyStaleResult, resolveJourneyPrefix, } from "./journey-prefix.js";
 import { clock } from "@jevitate/domain";
+import { GOAL_RUN_OPTIONS, GoalRunFlagError, conversationFromFlags, dialogsFromFlags, secretFieldsFromFlags, successWhenFromFlags, targetFlagsFromFlags, } from "./goal-run-flags.js";
 /**
  * #293: the flags a sweep sets on each of its missions itself (the rest of the command line is
  * forwarded to every mission as given).
@@ -95,79 +96,59 @@ export function registerExploreCommands(program, deps, buildProgram) {
         "Omit it for a find-out goal (e.g. \"find out how many contacts... report the answer\"): the run must then end",
         "with the model's own `report` op, and the grounded answer (#101) is the verdict — no page/network check needed.",
     ].join(" "), (v, prev) => [...prev, v], [])
-        .option("--success-when <when>", "when the --success page checks must hold: final (default; on the final page) | held (on the final page, or all together at any settled step — a one-time secret, a toast) | " +
-        "each (each went from not holding to holding at some settled step, in any order — checks on different pages; the run stops once all have). reloadThen is always final")
-        .option("--allow-vacuous-checks", "downgrade a vacuous --success check to a warning. By default a check satisfied before the run's first action — a page check that held on the seed page and never changed " +
-        "(an empty result container), a requestMade/responseStatus matched only by a page-load or polling request — FAILS: it cannot verify the goal")
-        .option("--action-deltas", "opt-in (#303; every --strategy, not --feature): record what each action changed on the page — an accessibility snapshot before and after, announcements, " +
-        "the action's requests — redacted, with a code verdict per step (no-change | relevant-change | inconclusive) used by the goal loop's no-progress check and a persistence re-check after writes (goal), and as defect evidence (adversarial, coverage); " +
-        "adds `delta` to every transcript step (and Recording step, goal) and `actionDeltas` to the result. Costs about 50-100 ms per action on a small page, 0.3-0.5 s on a large one")
+        .addOption(GOAL_RUN_OPTIONS.successWhen())
+        .addOption(GOAL_RUN_OPTIONS.allowVacuousChecks())
+        .addOption(GOAL_RUN_OPTIONS.actionDeltas())
         .option("--feature <name>", "run the capability-scoped feature-testing mission (instead of --goal/--success)")
         .option("--route <glob>", "in-scope route glob (repeatable), e.g. /thread/** — for --feature it replaces the default scope (the start URL's route and everything under it); it widens --strategy adversarial/coverage/exploratory beyond the start URL's route", (v, prev) => [...prev, v], [])
         .option("--scope <mode>", "--strategy coverage/exploratory: 'app' widens containment to the whole app (same as --route '/**'); default: the start URL's route plus --route globs")
         .option("--allow <origin>", "authorized origin (repeatable); REPLACES the default allowlist when given (the URL's own origin is used only when --allow is omitted entirely) -- include the URL's own origin explicitly if you still need it", (v, prev) => [...prev, v], [])
-        .option("--secret <value|env:VAR>", "REDACTION ONLY: a secret/PII value kept out of every model call and artifact (repeatable); env:VAR reads it from the environment (preferred: a literal is visible in the process list and shell history). It is never typed into a field — to log in, bind it with --secret-field (or start from --storage-state)", (v, prev) => [...prev, v], [])
-        .option("--secret-field <binding>", "goal/usability strategy: '<label|testId|type|id|name>=<value>=env:<VAR>' (repeatable), e.g. 'label=Password=env:APP_PASSWORD'. When the run types into a matching field, code types $VAR itself; the model sees only «secret:VAR» and the Recording {redacted:true}. " +
-        "A value delivered during the run (an emailed code): '<descriptor>=cmd:<command>' runs the command when the field is typed and types its stdout (needs --allow-secret-cmd)", (v, prev) => [...prev, v], [])
-        .option("--totp <binding>", "goal/usability strategy: '<descriptor>=env:<VAR>' with $VAR a base32 TOTP seed (repeatable), e.g. 'label=Authentication code=env:APP_TOTP_SEED'. The 6-digit code is computed locally (RFC 6238) when the field is typed; the seed never reaches a model or disk", (v, prev) => [...prev, v], [])
-        .option("--type-fixture <binding>", "goal strategy: '<label|testId|type|id|name>=<value>=<file>' (repeatable), e.g. 'label=Paste your text=./fixtures/import.txt'. When the run types into a matching field, code types the file's exact text verbatim (line breaks kept, never paraphrased or capped); the model sees only «fixture:<file name>». Recorded as typed unless it holds a --secret", (v, prev) => [...prev, v], [])
-        .option("--fixture <path>", "local file the upload op attaches to a file input (goal and usability strategies); must exist")
+        .addOption(GOAL_RUN_OPTIONS.secret())
+        .addOption(GOAL_RUN_OPTIONS.secretField())
+        .addOption(GOAL_RUN_OPTIONS.totp())
+        .addOption(GOAL_RUN_OPTIONS.typeFixture())
+        .addOption(GOAL_RUN_OPTIONS.fixture())
         .option("--storage-state <file>", "Playwright storageState JSON to start the session authenticated (deterministic login pre-step); must exist")
         .option("--actor <name=storageState>", "multi-actor mission (#147, goal only; repeatable): the FIRST actor is the primary (the only one the model drives, " +
         "from its own storageState); every other actor is an observer in its OWN fresh context that only runs the " +
         "--invariants' cross-actor checks (capture + probe as:/deniedAs) — never clicks or types. Replaces --storage-state", (v, prev) => [...prev, v], [])
-        .option("--save-storage-state <file>", "write the context's storageState (cookies + origin storage) here when the run ends; mode 0600, contents never logged. " +
-        "Useful with a rotating refresh token: --storage-state's file goes stale after one authenticated run refreshes it, " +
-        "so point --save-storage-state at the SAME file (or a new one) to keep it usable for the next run. " +
-        "Written on every exit path -- a crash or a SIGTERM/SIGINT kill included (#159), not only a clean end -- but " +
-        "never over a good file with a session that already looks lost/logged-out; the last known-good state is used " +
-        "instead, or nothing is written if none was ever captured.")
+        .addOption(GOAL_RUN_OPTIONS.saveStorageState())
         .option("--max-actions <n>", "hard cap on executed actions", positiveIntArg)
         .option("--max-decisions <n>", "hard cap on model decisions", positiveIntArg)
         .option("--stall-timeout <seconds>", "--strategy coverage/exploratory and --feature: end the run inconclusive (stalled) when no step completes within this many seconds (default 120)", positiveNumberArg)
-        .option("--reply-wait-ms <ms>", "conversational pages: how long to keep waiting for a reply while the page shows no sign of working on one " +
-        "(goal and usability; default 60000). While a request the message started is in flight, a busy indicator shows, " +
-        "or the reply is still growing, the wait continues up to --reply-ceiling-ms", positiveIntArg)
-        .option("--reply-quiet-ms <ms>", "conversational pages: how long a reply must hold still (no new text, no busy sign) before it is read as complete " +
-        "(goal and usability; default 1000). Raise it for an assistant that answers in several parts (a sentence, then a card a moment later)", positiveIntArg)
-        .option("--reply-ceiling-ms <ms>", "conversational pages: hard ceiling on one reply wait, however busy the page stays (default 180000; never below --reply-wait-ms)", positiveIntArg)
-        .option("--reply-max-chars <n>", "conversational pages: cap on each generated chat message (goal and usability; default 300)", intArg({ min: 20, max: 2000 }))
-        .option("--job-wait-ms <ms>", "goal and usability: while the page shows an in-progress status (\"Simulating…\", aria-busy, a job \"is running\"), " +
-        "waits keep waiting with backoff — and a model 'blocked' is deferred — up to this budget (default: --reply-ceiling-ms, 180000); " +
-        "it also bounds a busy indicator the app visibly keeps working behind (live progress, a job poll) before it is a hang, " +
-        "and a wait the page documents (\"usually takes a minute\") can raise it", positiveIntArg)
-        .option("--deny <pattern>", "a control no mission may click (repeatable): an accessible-name regex (/Archive/i or Archive) or a descriptor role=button;name=Archive. " +
-        "Session-ending (Sign out), destructive (Delete, Revoke, Rotate) and paid (Buy, Run simulation, Generate, Send invite) controls are refused by default", (v, prev) => [...prev, v], [])
-        .option("--paid <pattern>", "an app control that costs money or credits (repeatable; same syntax as --deny), e.g. /^(Analyze|Draft|Improve)\\b/i: treated like the built-in paid " +
-        "vocabulary — the budget guard sees it, hang replays never repeat it, and a goal that asks for it may still click it", (v, prev) => [...prev, v], [])
-        .option("--allow-destructive", "let missions click session-ending, destructive and paid controls (a --deny pattern still holds). A goal run already may click one its goal asks for")
-        .option("--dialogs <policy>", "native window.confirm/prompt dialogs: dismiss (default) or accept. accept still dismisses one whose message names a session-ending, " +
-        "destructive or paid action the run may not take (without --allow-destructive or a goal asking for it); every dialog is logged")
+        .addOption(GOAL_RUN_OPTIONS.replyWaitMs())
+        .addOption(GOAL_RUN_OPTIONS.replyQuietMs())
+        .addOption(GOAL_RUN_OPTIONS.replyCeilingMs())
+        .addOption(GOAL_RUN_OPTIONS.replyMaxChars())
+        .addOption(GOAL_RUN_OPTIONS.jobWaitMs())
+        .addOption(GOAL_RUN_OPTIONS.deny())
+        .addOption(GOAL_RUN_OPTIONS.paid())
+        .addOption(GOAL_RUN_OPTIONS.allowDestructive())
+        .addOption(GOAL_RUN_OPTIONS.dialogs())
         .option("--allow-writes", "let a find-out goal (no --success check, ended by report) change the app. By default it is read-only: controls that start a write flow " +
         "(checkout, upgrade, create, save, submit…) are refused and the write requests an action fires are blocked, unless the goal itself asks for a change")
         .option("--allow-write <glob>", "a write-request path a read-only find-out goal never blocks (repeatable; ** spans segments; a glob starting with https:// matches " +
         "origin + path, e.g. https://abc.supabase.co/rest/v1/**), beyond the built-in auth-refresh ones " +
         "(**/refresh*, **/token*, **/oauth/**, **/auth/**/refresh*). The app's background writes outside an action always pass", (v, prev) => [...prev, v], [])
-        .option("--read-rpc <glob>", "a POST request that only READS (repeatable): an RPC-method glob (Estimate*, pkg.Service/Preview*) or a path glob (/api/search*). " +
-        "gRPC-web/Connect Get*/List*/Search*/Find*/Watch*/Stream*/Count*/Describe*/Read* methods are reads already. Reads are never guarded or reported as duplicate writes", (v, prev) => [...prev, v], [])
+        .addOption(GOAL_RUN_OPTIONS.readRpc())
         .option("--real", "use live Jev + OpenRouter gateways (requires keys)", false)
         .option("--fake-ai", "use deterministic fake gateways (pipeline smoke only)", false)
         .option("--out <dir>", "directory to write the emitted Recording")
         .option("--file-issues", "file findings as issues (needs a repo: --issue-repo or ~/.jevitate/filing.json); default: drafts only")
         .option("--issue-repo <owner/name>", "the system-under-test repo findings for THIS target are filed to")
-        .option("--hang-replays <n>", "fresh-context replays that confirm a hang (default 2; 0 = don't replay, the hang is reported unconfirmed)", nonNegativeIntArg)
+        .addOption(GOAL_RUN_OPTIONS.hangReplays())
         .option("--hang-replay-writes", "let hang replays re-send a paid/destructive write the run sent (default: such a hang is reported inconclusive, never replayed)")
-        .option("--settle-ignore <pattern>", "a request URL pattern the target marks as background (never pending work; repeatable, * wildcard)", (v, prev) => [...prev, v], [])
-        .option("--long-poll-ms <n>", "a request pending this long on an interactive page is a long-poll (default 5000)", nonNegativeIntArg)
-        .option("--api-prefix <path>", "a path prefix whose requests are the app's API in the timing summary (repeatable), e.g. /api/", (v, prev) => [...prev, v], [])
-        .option("--ignore-no-progress <pattern>", "a route / action label / busy indicator where ui-no-progress is expected (repeatable, * wildcard)", (v, prev) => [...prev, v], [])
+        .addOption(GOAL_RUN_OPTIONS.settleIgnore())
+        .addOption(GOAL_RUN_OPTIONS.longPollMs())
+        .addOption(GOAL_RUN_OPTIONS.apiPrefix())
+        .addOption(GOAL_RUN_OPTIONS.ignoreNoProgress())
         .option("--jevitate-repo <owner/name>", "where jevitate engine findings are filed (default matt-cochran/jevitate)")
         .option("--min-control-coverage <ratio>", "adversarial: share of the target's controls (0..1) a run must exercise before 'found nothing' is clean (default 0.25); below it the run is inconclusive", ratioArg)
         .option("--no-require-form-submit", "adversarial: do not require a submitted form for a clean result (default: required when the target has a form)")
         .option("--invariants <file>", "app-declared invariants JSON (repeatable; goal, coverage, exploratory, adversarial, --feature): checked around every action, a violation is a defect (exit 1). Validated before any browser opens; probes are GET/HEAD on an --allow origin only", (v, prev) => [...prev, v], [])
         .option("--log-source <spec>", "backend log source (repeatable; every strategy, incl. usability): file:<path> (tailed from its current end) | docker:<container> (docker logs -f --since 0s) | cmd:<command> (needs --allow-log-cmd). Read-only, operator-declared, never the model's choice. Error/warning lines are correlated to the step they landed during and attached to its transcript evidence, redacted", (v, prev) => [...prev, v], [])
-        .option("--allow-secret-cmd", "opt-in: a --secret-field <descriptor>=cmd:<command> may run its command (in a shell, at type time, 60s timeout) and type its output (operator-declared only; refused otherwise)", false)
-        .option("--secret-cmd-attempts <n>", "#359: how many times one cmd: secret field's command may run in this run (default 3); past it, typing that field fails without running the command again (read-the-code commands usually have side effects)", positiveIntArg)
+        .addOption(GOAL_RUN_OPTIONS.allowSecretCmd())
+        .addOption(GOAL_RUN_OPTIONS.secretCmdAttempts())
         .option("--allow-log-cmd", "opt-in: a --log-source cmd:<command> may run as a subprocess (operator-declared only; refused otherwise)", false)
         .option("--log-defect <level|/regex/>", "backend log lines matching this (repeatable) become a server-log defect: a level (error|warn|info|debug, matched as level>=this) or a /regex/flags/ over the raw line. Its fingerprint is the normalized message (ids/numbers/uuids/timestamps stripped) plus the correlated route; verify-fix re-checks it by re-tailing the same --log-source(s)", (v, prev) => [...prev, v], [])
         .option("--log-quiet-ok <spec>", "declares a --log-source spec (exact match, repeatable) as legitimately quiet: zero lines from it does not make the --log-defect oracle unhealthy (#169). Without it, a declared source that opened but delivered not one line makes an otherwise-clean run inconclusive, same as one that failed to open", (v, prev) => [...prev, v], [])
@@ -220,8 +201,14 @@ export function registerExploreCommands(program, deps, buildProgram) {
             return;
         }
         // #334: a mistyped --dialogs never silently means "dismiss".
-        if (o.dialogs !== undefined && o.dialogs !== "dismiss" && o.dialogs !== "accept") {
-            emitExplore(fail("E_EXPLORE_ARGS", `--dialogs must be dismiss or accept, got ${JSON.stringify(o.dialogs)}`));
+        let dialogs;
+        try {
+            dialogs = dialogsFromFlags(o);
+        }
+        catch (err) {
+            if (!(err instanceof GoalRunFlagError))
+                throw err;
+            emitExplore(fail(err.code, err.message));
             return;
         }
         // #195: a session file never lands in the repo's .jevitate/ (refused before any run, multi-runs included).
@@ -241,6 +228,8 @@ export function registerExploreCommands(program, deps, buildProgram) {
         // refused, exit 64) before anything else — the start URL every later check uses is where the
         // Journey's prefix lands.
         let journeyPrefix;
+        /** #399: how the prefix was resolved — re-resolved once `${setup.x}` in a --param is bound (goal + --fixtures). */
+        let prefixRequest;
         const anchoredFlags = [o.fromJourney, o.atStep, o.journeysDir, o.env, o.baseUrl].some((v) => v !== undefined);
         if (anchoredFlags || Object.keys(o.param).length > 0) {
             const refuse = (message) => emitExplore(fail("E_EXPLORE_ARGS", message));
@@ -266,6 +255,10 @@ export function registerExploreCommands(program, deps, buildProgram) {
             // #312: one anchored step with a state restore (--fixtures/--before/--after) on a non-goal
             // strategy runs the same way — as a one-stop campaign, whose runner restores around the run.
             const restoredSingle = !isSweepMode(o.atStep) && strategy !== "goal" && (o.fixtures !== undefined || o.before !== undefined || o.after !== undefined);
+            if ((isSweepMode(o.atStep) || restoredSingle) && Object.values(o.param).some((v) => v.includes("${setup."))) {
+                refuse("a --param holding ${setup.x} is bound from --fixtures only by a single --strategy goal run; pass the value itself here");
+                return;
+            }
             if (isSweepMode(o.atStep) || restoredSingle) {
                 if (o.real !== true && o.fakeAi !== true) {
                     emitExplore(fail("E_AI_SETUP_REQUIRED", "a sweep's missions are model-driven: pass --real or --fake-ai"));
@@ -330,7 +323,7 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 // The environment's own session applies when --storage-state names none (as `journey run`).
                 if (o.storageState === undefined && environment?.storageState !== undefined)
                     o.storageState = environment.storageState;
-                journeyPrefix = await resolveJourneyPrefix({
+                prefixRequest = {
                     dir: resolveJourneysDir(deps, o.journeysDir),
                     id: o.fromJourney,
                     atStep: o.atStep,
@@ -339,7 +332,8 @@ export function registerExploreCommands(program, deps, buildProgram) {
                     ...(o.storageState === undefined ? {} : { storageState: o.storageState }),
                     dbPath: resolveDbPath(deps),
                     environmentFlags: { ...(o.env === undefined ? {} : { env: o.env }), ...(o.baseUrl === undefined ? {} : { baseUrl: o.baseUrl }) },
-                });
+                };
+                journeyPrefix = await resolveJourneyPrefix(prefixRequest);
             }
             catch (err) {
                 if (isEnvironmentError(err) || err instanceof JourneyPrefixArgsError)
@@ -446,23 +440,14 @@ export function registerExploreCommands(program, deps, buildProgram) {
         // #120: a killed run prints what this command would have printed — the envelope with --json,
         // else the human summary (#210) — before it exits.
         setKillSwitchOutput(o.json === true ? "envelope" : "human");
-        const conversation = {
-            ...(o.replyWaitMs === undefined ? {} : { replyWaitMs: Number(o.replyWaitMs) }),
-            ...(o.replyQuietMs === undefined ? {} : { replyQuietMs: Number(o.replyQuietMs) }),
-            ...(o.replyCeilingMs === undefined ? {} : { replyCeilingMs: Number(o.replyCeilingMs) }),
-            ...(o.replyMaxChars === undefined ? {} : { replyMaxChars: Number(o.replyMaxChars) }),
-            ...(o.jobWaitMs === undefined ? {} : { jobWaitMs: Number(o.jobWaitMs) }),
-        };
-        if ((conversation.replyWaitMs !== undefined && !(Number.isInteger(conversation.replyWaitMs) && conversation.replyWaitMs > 0)) ||
-            (conversation.replyCeilingMs !== undefined &&
-                !(Number.isInteger(conversation.replyCeilingMs) && conversation.replyCeilingMs > 0)) ||
-            (conversation.replyMaxChars !== undefined &&
-                !(Number.isInteger(conversation.replyMaxChars) && conversation.replyMaxChars >= 20 && conversation.replyMaxChars <= 2000))) {
-            emitExplore(fail("E_EXPLORE_ARGS", "--reply-wait-ms and --reply-ceiling-ms must be positive integers; --reply-max-chars an integer in 20..2000"));
-            return;
+        let conversation;
+        try {
+            conversation = conversationFromFlags(o);
         }
-        if (conversation.jobWaitMs !== undefined && !(Number.isInteger(conversation.jobWaitMs) && conversation.jobWaitMs > 0)) {
-            emitExplore(fail("E_EXPLORE_ARGS", "--job-wait-ms must be a positive integer"));
+        catch (err) {
+            if (!(err instanceof GoalRunFlagError))
+                throw err;
+            emitExplore(fail(err.code, err.message));
             return;
         }
         // #154: refused BEFORE any browser opens — `nonNegativeIntArg` already rejects a bad value at
@@ -510,20 +495,7 @@ export function registerExploreCommands(program, deps, buildProgram) {
         let target;
         if (o.url !== undefined) {
             try {
-                target = resolveTargetConfig(loadTargetsFile(deps.explore?.targetsConfigPath), new URL(setupRefFreeUrl(o.url)).origin, {
-                    settleIgnore: o.settleIgnore,
-                    ignoreNoProgress: o.ignoreNoProgress,
-                    apiPrefixes: o.apiPrefix,
-                    deny: o.deny,
-                    paid: o.paid,
-                    readRpc: o.readRpc,
-                    ...(o.allowDestructive === true ? { allowDestructive: true } : {}),
-                    ...(o.dialogs === undefined ? {} : { dialogs: o.dialogs }),
-                    ...(o.allowWrites === true ? { allowWrites: true } : {}),
-                    allowWrite: o.allowWrite,
-                    ...(o.hangReplayWrites === true ? { hangReplayWrites: true } : {}),
-                    ...(o.longPollMs === undefined ? {} : { longPollMs: Number(o.longPollMs) }),
-                });
+                target = resolveTargetConfig(loadTargetsFile(deps.explore?.targetsConfigPath), new URL(setupRefFreeUrl(o.url)).origin, targetFlagsFromFlags(o, dialogs));
             }
             catch (err) {
                 if (err instanceof TargetConfigError) {
@@ -688,13 +660,10 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 return;
             }
             try {
-                secretFields = [
-                    ...o.secretField.map((s) => parseSecretField(s, "value", process.env, { allowCmd: o.allowSecretCmd === true })),
-                    ...o.totp.map((s) => parseSecretField(s, "totp", process.env)),
-                ];
+                secretFields = secretFieldsFromFlags(o);
             }
             catch (err) {
-                if (!(err instanceof SecretFieldSpecError))
+                if (!(err instanceof GoalRunFlagError))
                     throw err;
                 emitExplore(fail(err.code, err.message));
                 return;
@@ -1100,11 +1069,16 @@ export function registerExploreCommands(program, deps, buildProgram) {
             emitExplore(fail("E_EXPLORE_ASSERTION", String(err instanceof Error ? err.message : err)));
             return;
         }
-        if (o.successWhen !== undefined && o.successWhen !== "held" && o.successWhen !== "final" && o.successWhen !== "each") {
-            emitExplore(fail("E_EXPLORE_ARGS", `--success-when must be "final", "held" or "each", got ${JSON.stringify(o.successWhen)}`));
+        let successWhen;
+        try {
+            successWhen = successWhenFromFlags(o);
+        }
+        catch (err) {
+            if (!(err instanceof GoalRunFlagError))
+                throw err;
+            emitExplore(fail(err.code, err.message));
             return;
         }
-        const successWhen = o.successWhen === "held" || o.successWhen === "final" || o.successWhen === "each" ? o.successWhen : undefined;
         const allowlist = resolveExploreAllowlist(setupRefFreeUrl(o.url), o.allow);
         // Fixtures (#140/#144): the spec and every ${setup.x} reference are validated here, before any
         // browser or request; the setup itself runs just before the mission (below).
@@ -1120,7 +1094,7 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 ...(target?.fixtures === undefined ? {} : { targetFixtures: target.fixtures }),
                 ...(target?.personas === undefined ? {} : { personas: target.personas }),
             });
-            checkSetupRefs({ "--url": o.url, "--goal": o.goal, "--success": o.success, ...invariantSetupTexts(invariants) }, fx);
+            checkSetupRefs({ "--url": o.url, "--goal": o.goal, "--success": o.success, ...invariantSetupTexts(invariants), ...(journeyPrefix === undefined ? {} : { "--param": Object.values(o.param) }) }, fx);
         }
         catch (err) {
             if (!(err instanceof FixtureSpecError || err instanceof UnboundSetupRefError))
@@ -1163,6 +1137,13 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 // #187: ${setup.x} in the invariants (probe paths, deniedAs.open, capture routes), origin-fixed.
                 if (invariants !== undefined)
                     runInvariants = { ...withInvariants, invariants: substituteSpecSetupRefs(invariants, b, url) };
+                // #399: `--param name=${setup.x}` for the Journey prefix is bound to the fixture's output, and the
+                // prefix re-resolved so its secret params (and so every redaction) hold the bound value.
+                if (journeyPrefix !== undefined && prefixRequest !== undefined && Object.values(o.param).some((v) => v.includes("${setup."))) {
+                    const params = Object.fromEntries(Object.entries(o.param).map(([k, v]) => [k, substituteSetupRefs(v, b, { where: `--param ${k}` })]));
+                    journeyPrefix = await resolveJourneyPrefix({ ...prefixRequest, params });
+                    o.secret = [...new Set([...o.secret, ...journeyPrefix.secrets])];
+                }
             }
             catch (err) {
                 if (!(err instanceof FixtureSetupError || err instanceof UnboundSetupRefError)) {
@@ -1209,7 +1190,7 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 ...runInvariants,
                 ...triagedServerLog(serverLog, judge, o.real === true),
                 ...(fx === undefined ? {} : { fixtures: fx }),
-                ...withPrefix,
+                ...(journeyPrefix === undefined ? {} : { journeyPrefix }), // #399: re-resolved when a --param was bound
             });
             // 0 succeeded · 1 assertion not met · 2 the run broke (inconclusive/crashed).
             emitExplore(ok(await withEvidence(result)), result.exitCode);