| service-key | Project-scoped Agentiqa CLI service key (sk_...). Required. Mint one from the Agentiqa web app or desktop app (Project Settings -> CLI Service Keys -> Create Key) or via /api/cli-quickstart-key. Pass it from a repository secret; never inline. | yes | — |
| api-url | Override the Agentiqa control-plane API URL (AGENTIQA_API_URL). Leave empty to use production (https://agentiqa.com). Set to https://s.agentiqa.com to target staging. | no | "" |
| runtime | Advanced. Where the execution engine runs; defaults to `cloud` — the browser runs on Agentiqa's infrastructure with the managed LLM and no Chromium on the runner. Leave unset for the standard hosted flow. | no | cloud |
| engine-url | Optional hosted-engine URL override; only meaningful with `runtime: cloud`. Leave empty for the default Agentiqa cloud engine (https://engine.agentiqa.com). Set https://s-engine.agentiqa.com for staging, or the URL of your own hosted engine. | no | "" |
| gemini-api-key | Advanced. Ignored for cloud runs, which use Agentiqa's managed LLM. When set, pass it from a repository secret. | no | "" |
| plan-id | Run a single test plan by id (tplan_...). Overrides label-ids when set. | no | "" |
| label-ids | Comma-separated label ids; runs all plans tagged with any of them. Ignored when plan-id is set. | no | "" |
| mode | Execution order for the selected plans: sequential | parallel. | no | sequential |
| cli-version | Version of the Agentiqa CLI to run: an npm dist-tag (latest, staging) or an exact semver (e.g. 1.4.2). Default latest. | no | latest |
| artifacts-dir | Directory (relative to the workspace) for run artifacts and the JSON result envelope. | no | agentiqa-artifacts |
| fail-on | Exit-code gating policy. One of:
never - never fail the job on the run outcome (report-only; read outputs downstream).
plan-failure - (default) fail when a plan failed (exit 1) OR on a config/usage error
(exit 2 — permanent, must fail loudly). Only retryable infra errors
(exit 3) are swallowed, surfacing as outcome=infra-error for a
digest/reporter to handle. Exit 3 also covers a NO-VERDICT batch —
one whose only non-passing plans could not reach a verdict (a
persistent engine disconnect, or the blocked cascade of one) — so a
transient WS drop no longer reads as a red plan-failure. Read the
`outcome` step output to gate more strictly (fail-on: any).
any - fail on any nonzero exit. Use for release gates. | no | plan-failure |
| node-version | Node.js version to set up on the runner (18+). | no | 22 |
| upload-artifacts | Upload the artifacts directory (screenshots/video/result JSON) as a build artifact. | no | true |
| artifact-name | Name for the uploaded artifact. Defaults to agentiqa-artifacts-<run_id>-<attempt> when empty. | no | "" |
| share-links | Mint an opt-in PUBLIC, revocable share link for each cloud run (passes --share to the CLI) so reviewers can open a run from the step summary without an Agentiqa login. The Run column links the share URL when present. Default false (privacy-conservative). Cloud runtime only. | no | false |
| retention-days | Retention period (in days) for the uploaded artifact. Only applies when upload-artifacts is true. Defaults to 14; the repo/org artifact-retention cap still bounds it. | no | 14 |