@trusty-squire/mcp 0.9.16 → 0.9.17-rc.2

package/dist/bot/extraction.d.ts

@@ -0,0 +1,18 @@
+export type CandidateClass = {
+    kind: "full";
+    value: string;
+} | {
+    kind: "truncated";
+    value: string;
+} | {
+    kind: "none";
+};
+export interface ExtractionState {
+    apiKey: string | null;
+    truncatedHit: string | null;
+}
+export declare function initialExtractionState(): ExtractionState;
+export declare function accumulateCandidate(state: ExtractionState, c: CandidateClass): ExtractionState;
+export declare function hasFullHit(state: ExtractionState): boolean;
+export declare function resolveExtraction(state: ExtractionState): Record<string, string>;
+//# sourceMappingURL=extraction.d.ts.map

package/dist/bot/extraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extraction.d.ts","sourceRoot":"","sources":["../../src/bot/extraction.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAKrB,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAgB,sBAAsB,IAAI,eAAe,CAExD;AAMD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,GAAG,eAAe,CAO9F;AAID,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAE1D;AAOD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIhF"}

package/dist/bot/extraction.js

@@ -0,0 +1,55 @@
+// extraction.ts — pure decision primitives of the credential-EXTRACTION phase,
+// carved out of extractCredentials (agent.ts:12623) as strangler slice 4 (the A4
+// order: nav-search → OAuth/consent → form-fill → EXTRACTION → capture-chain).
+// Browser-free + unit-tested.
+//
+// BOUNDARY (the slice-2/3 lesson — model the decision, executor owns I/O): the
+// executor runs the FIVE candidate sources (visible candidates, body text,
+// copy-button/clipboard, hidden inputs, copy-button colocation) AND the regex
+// classification of each candidate (extractApiKeyFromText + isTruncatedCapture +
+// the pass-4 UUID accept). This module decides only the cross-pass POLICY:
+//   • accumulation — the first FULL hit wins and ends the scan; a TRUNCATED hit
+//     (a masked display like "sk-or-v1-1687…" whose full secret is only on the
+//     clipboard) is remembered as a fallback, first-wins, never overriding a full.
+//   • resolution — after every pass: a full key → {api_key}; else the truncated
+//     stub → {api_key_truncated} (an honest partial beats "no key" when the bot
+//     demonstrably reached the modal); else {} (keep navigating).
+//
+// This is the highest-value, most self-contained pure piece (the truncated-vs-full
+// priority is a recurring brittleness source — the S3 masked-key trap). NOT yet
+// wired into agent.ts — changing this file cannot regress the live path.
+export function initialExtractionState() {
+    return { apiKey: null, truncatedHit: null };
+}
+// Fold one classified candidate into the state. PURE. First FULL hit wins and is
+// sticky (a later candidate cannot override it). A TRUNCATED hit is recorded only
+// when no full hit exists yet AND no truncated hit is recorded yet (first-wins),
+// mirroring extractCredentials' `truncatedHit = truncatedHit ?? hit`.
+export function accumulateCandidate(state, c) {
+    if (state.apiKey !== null)
+        return state; // already resolved to a full key
+    if (c.kind === "full")
+        return { ...state, apiKey: c.value };
+    if (c.kind === "truncated") {
+        return state.truncatedHit === null ? { ...state, truncatedHit: c.value } : state;
+    }
+    return state;
+}
+// Has a terminal full hit been found? The executor stops scanning candidates (and
+// skips the remaining passes) once this is true. Pure.
+export function hasFullHit(state) {
+    return state.apiKey !== null;
+}
+// Final resolution after the passes run. PURE. Faithful to extractCredentials'
+// tail: a full key → {api_key}; else a truncated stub → {api_key_truncated} (the
+// host agent surfaces the partial — better than "no key found" when the modal was
+// demonstrably reached); else {} (no credential — the post-verify loop keeps
+// navigating to the real keys surface).
+export function resolveExtraction(state) {
+    if (state.apiKey !== null)
+        return { api_key: state.apiKey };
+    if (state.truncatedHit !== null)
+        return { api_key_truncated: state.truncatedHit };
+    return {};
+}
+//# sourceMappingURL=extraction.js.map

package/dist/bot/extraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extraction.js","sourceRoot":"","sources":["../../src/bot/extraction.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,8BAA8B;AAC9B,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,iFAAiF;AACjF,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,mFAAmF;AACnF,gFAAgF;AAChF,gFAAgF;AAChF,kEAAkE;AAClE,EAAE;AACF,mFAAmF;AACnF,gFAAgF;AAChF,yEAAyE;AAgBzE,MAAM,UAAU,sBAAsB;IACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,KAAsB,EAAE,CAAiB;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5D,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,OAAO,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,wCAAwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5D,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IAClF,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/bot/form-fill.d.ts

@@ -0,0 +1,144 @@
+export declare function computePageSig(url: string, selectors: readonly string[]): string;
+export declare function pageMovedSince(prevSig: string | null, currSig: string): boolean;
+export declare function isStuckRepeat(input: {
+    planClickSelectors: readonly string[];
+    planEditsAField: boolean;
+    noProgressSelectors: ReadonlySet<string>;
+}): boolean;
+export declare function nextNoProgressSet(input: {
+    planClickSelectors: readonly string[];
+    hadFieldEdit: boolean;
+}): Set<string>;
+export declare const FORM_FILL_BUDGETS: {
+    readonly MAX_ERROR_REPLANS: 2;
+    readonly MAX_PROGRESS_REPLANS: 6;
+    readonly MAX_EMPTY_PLANS: 2;
+    readonly MAX_OAUTH_SCAN_RETRIES_SHELL: 8;
+    readonly MAX_OAUTH_SCAN_RETRIES_FORM: 2;
+    readonly MAX_OAUTH_SHELL_RELOADS: 1;
+    readonly MAX_UPSTREAM_BLIP_RETRIES: 8;
+    readonly MAX_SIGN_IN_ADVANCE_CLICKS: 2;
+};
+export interface FormFillState {
+    errorReplans: number;
+    progressReplans: number;
+    emptyPlans: number;
+    upstreamBlipRetries: number;
+    oauthScanRetries: number;
+    oauthShellReloads: number;
+    signInAdvanceClicks: number;
+    lastRoundPageSig: string | null;
+    lastNoProgressClickSelectors: ReadonlySet<string>;
+    committedToEmailPath: boolean;
+}
+export declare function initialFormFillState(forceFormFill?: boolean): FormFillState;
+export type FormFillOutcome = {
+    kind: "submitted";
+} | {
+    kind: "captcha_blocked";
+    captchaKind: string;
+} | {
+    kind: "submit_failed";
+    reason: string;
+} | {
+    kind: "planning_failed";
+    reason: string;
+} | {
+    kind: "oauth_required";
+} | {
+    kind: "needs_oauth_provider_session";
+    missingProviders: readonly string[];
+    haveSessions: readonly string[];
+} | {
+    kind: "anti_bot_blocked";
+    vendor: string;
+} | {
+    kind: "oauth";
+    selector: string;
+    provider: string;
+} | {
+    kind: "already_oauth";
+};
+export interface PrePlanObservation {
+    checkpoint: "pre_plan";
+    hasFillableInput: boolean;
+    verifyWall: boolean;
+    codeGate: boolean;
+    oauthCandidatesPresent: boolean;
+    oauthButtonHit: {
+        selector: string;
+        provider: string;
+    } | null;
+    oauthScanShell: boolean;
+    alreadySignedIn: boolean;
+    signInAdvancePresent: boolean;
+    antiBotVendor: string | null;
+    oauthOnly: boolean;
+    oauthOnlyMissingProviders: readonly string[];
+    oauthOnlyHaveSessions: readonly string[];
+}
+export interface PlanErrorObservation {
+    checkpoint: "plan_error";
+    isUpstreamBlip: boolean;
+    reason: string;
+}
+export interface PostPlanObservation {
+    checkpoint: "post_plan";
+    isDashboard: boolean;
+    pageSig: string;
+    planClickSelectors: readonly string[];
+    planEditsAField: boolean;
+    verifyMiss: string | null;
+    verifyMissNotCheckbox: boolean;
+}
+export interface PostExecuteObservation {
+    checkpoint: "post_execute";
+    clickedEmailAffordance: boolean;
+    planClickSelectors: readonly string[];
+    hadFill: boolean;
+    hadFieldEdit: boolean;
+    planActionCount: number;
+}
+export interface PostSubmitObservation {
+    checkpoint: "post_submit";
+    preGateBlocked: boolean;
+    preGateKind: string;
+    submitError: string | null;
+    submitDisabled: boolean;
+    submitTimeout: boolean;
+    postGateBlocked: boolean;
+    postGateKind: string;
+    hasInbox: boolean;
+    validationFailure: boolean;
+}
+export type FormFillObservation = PrePlanObservation | PlanErrorObservation | PostPlanObservation | PostExecuteObservation | PostSubmitObservation;
+export type FormFillAction = {
+    kind: "terminal";
+    outcome: FormFillOutcome;
+} | {
+    kind: "oauth_scan_wait";
+} | {
+    kind: "oauth_shell_reload";
+} | {
+    kind: "sign_in_advance";
+} | {
+    kind: "route_to_verification";
+} | {
+    kind: "run_planner";
+} | {
+    kind: "execute_plan";
+} | {
+    kind: "submit";
+} | {
+    kind: "blip_retry";
+} | {
+    kind: "replan";
+    hintKind: FormFillHintKind;
+};
+export type FormFillHintKind = "selector_not_in_inventory" | "selectors_did_not_verify" | "drop_the_check" | "page_advanced" | "submit_disabled" | "submit_went_stale" | "post_submit_validation";
+export interface FormFillStep {
+    action: FormFillAction;
+    nextState: FormFillState;
+}
+export declare function decideFormFillStep(state: FormFillState, obs: FormFillObservation): FormFillStep;
+//# sourceMappingURL=form-fill.d.ts.map

package/dist/bot/form-fill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-fill.d.ts","sourceRoot":"","sources":["../../src/bot/form-fill.ts"],"names":[],"mappings":"AAaA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEhF;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE/E;AAQD,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC1C,GAAG,OAAO,CAKV;AAMD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,GAAG,CAAC,MAAM,CAAC,CAEd;AAgCD,eAAO,MAAM,iBAAiB;;;;;;;;;CASpB,CAAC;AAMX,MAAM,WAAW,aAAa;IAE5B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAE5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,4BAA4B,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAGlD,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAID,wBAAgB,oBAAoB,CAAC,aAAa,UAAQ,GAAG,aAAa,CAazE;AAID,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IACE,IAAI,EAAE,8BAA8B,CAAC;IACrC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GACD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAM9B,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,UAAU,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAE1B,UAAU,EAAE,OAAO,CAAC;IAEpB,QAAQ,EAAE,OAAO,CAAC;IAElB,sBAAsB,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9D,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,oBAAoB,EAAE,OAAO,CAAC;IAE9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IAKnB,yBAAyB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAGD,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,YAAY,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAKD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,cAAc,CAAC;IAC3B,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB;AAGD,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,aAAa,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAC3B,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,CAAC;AAG1B,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAE9C;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAE3B;IAAE,IAAI,EAAE,uBAAuB,CAAA;CAAE,GAEjC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAGlB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GAEtB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAInD,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,0BAA0B,GAC1B,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,aAAa,CAAC;CAC1B;AAMD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,mBAAmB,GACvB,YAAY,CA0Pd"}

package/dist/bot/form-fill.js

@@ -0,0 +1,320 @@
+// form-fill.ts — pure decision primitives of the signup FORM-FILL phase, carved
+// out of planExecuteWithRetry (strangler slice 3 — see DESIGN-form-fill-engine.md).
+// Browser-free + unit-tested. This commit is the no-progress / stuck-loop
+// detector (F14 + the page-fingerprint progress check) — the highest-value,
+// most self-contained piece and a recurring brittleness source (kinde/Railway
+// false-bails). The full decideFormFillStep reducer is the next increment.
+//
+// Not yet wired into agent.ts — changing this file cannot regress the live path.
+// The page "moved" between two form-fill rounds iff the URL changed OR the set of
+// interactive selectors changed (a field gained/lost, a validation message
+// toggled an element, a wizard step advanced). The fingerprint is url + the
+// sorted selector set; ANY change means the previous round made real progress.
+export function computePageSig(url, selectors) {
+    return `${url}§${[...selectors].sort().join("|")}`;
+}
+export function pageMovedSince(prevSig, currSig) {
+    return prevSig !== null && currSig !== prevSig;
+}
+// F14 stuck-loop test: a plan that clicks ONLY selectors already proven dead last
+// round (no page progress) — and edits no field — is a planner loop; bail rather
+// than re-click forever. Does NOT fire when the plan adds a NEW selector
+// (legitimate exploration) or edits a field this round (a fill/check alongside a
+// repeated click is real progress — kinde's "tick the required box + re-click
+// Next" advances the form even though the Next selector repeats). Pure.
+export function isStuckRepeat(input) {
+    if (input.planEditsAField)
+        return false;
+    if (input.planClickSelectors.length === 0)
+        return false;
+    if (input.noProgressSelectors.size === 0)
+        return false;
+    return input.planClickSelectors.every((s) => input.noProgressSelectors.has(s));
+}
+// The dead-selector memory update after a NO-PROGRESS round (the page only
+// revealed/advanced, no fillable form yet): a field edit this round means real
+// progress → clear the set; otherwise record THIS round's click selectors so the
+// next round's isStuckRepeat can catch a loop. Pure (returns a fresh set).
+export function nextNoProgressSet(input) {
+    return input.hadFieldEdit ? new Set() : new Set(input.planClickSelectors);
+}
+// ───────────────────────────────────────────────────────────────────────────
+// decideFormFillStep — the PURE decision reducer for the form-fill phase, carved
+// out of planExecuteWithRetry (agent.ts:4648–5392). Eng-reviewed (Claude + Codex,
+// 2026-06-15, report in DESIGN-form-fill-engine.md). The review's headline:
+// unlike the OAuth slice, a form-fill ROUND is NOT one observation→decision; it
+// is a SEQUENCE of FOUR I/O-gated checkpoints where later I/O depends on earlier
+// decisions (the LLM planner doesn't run if the OAuth-first scan short-circuits).
+// So this is a PHASE-DISCRIMINATED reducer: the executor calls it at each
+// checkpoint with that checkpoint's I/O-gathered facts, runs the returned
+// action's I/O, then re-enters at the next phase.
+//
+//     decideFormFillStep(state, observation) → { action, nextState }
+//
+// BOUNDARY (the review's Q2): the reducer DECIDES; the executor owns ALL I/O and
+// the *content* of any replan hint (e.g. the submit_disabled snapshot that lists
+// concrete unchecked-checkbox candidates is a fresh buildInventory read — the
+// reducer only emits the hint INTENT). The reducer never touches a browser.
+//
+// Faithfulness anchors (review's commit-2 checklist):
+//   • the 4 checkpoints as obs.checkpoint (C3 post_plan is the only pure one).
+//   • the OAuth-first nested scan's actions + budget resets (oauthScanRetries→0
+//     on shell-reload AND advance-click).
+//   • committedToEmailPath one-way control-state (suppresses C1's OAuth-first scan).
+//   • the FOUR-debt counter taxonomy (errorReplans vs progressReplans vs
+//     upstreamBlipRetries vs emptyPlans) — each ticked in its own branch.
+//   • the 2 non-local terminal flips (managed-Turnstile+inbox→submitted;
+//     validation w/ progress budget exhausted→submitted).
+// The per-signup budget ceilings (agent.ts:4583–4616). Exported so the executor
+// and the golden-transition tests share one source of truth.
+export const FORM_FILL_BUDGETS = {
+    MAX_ERROR_REPLANS: 2,
+    MAX_PROGRESS_REPLANS: 6,
+    MAX_EMPTY_PLANS: 2, // bail at the 2nd *consecutive* empty plan
+    MAX_OAUTH_SCAN_RETRIES_SHELL: 8,
+    MAX_OAUTH_SCAN_RETRIES_FORM: 2,
+    MAX_OAUTH_SHELL_RELOADS: 1,
+    MAX_UPSTREAM_BLIP_RETRIES: 8,
+    MAX_SIGN_IN_ADVANCE_CLICKS: 2,
+};
+// The fresh FormFillState at loop entry. `forceFormFill` seeds committedToEmailPath
+// (the re-route after a no-account Google bounce — agent.ts:4645).
+export function initialFormFillState(forceFormFill = false) {
+    return {
+        errorReplans: 0,
+        progressReplans: 0,
+        emptyPlans: 0,
+        upstreamBlipRetries: 0,
+        oauthScanRetries: 0,
+        oauthShellReloads: 0,
+        signInAdvanceClicks: 0,
+        lastRoundPageSig: null,
+        lastNoProgressClickSelectors: new Set(),
+        committedToEmailPath: forceFormFill,
+    };
+}
+const B = FORM_FILL_BUDGETS;
+// Decide the next form-fill step. PURE. Dispatches on the checkpoint and mirrors
+// the live loop's branch ORDER exactly (line refs against agent.ts).
+export function decideFormFillStep(state, obs) {
+    const keep = (action) => ({ action, nextState: state });
+    const next = (action, patch) => ({
+        action,
+        nextState: { ...state, ...patch },
+    });
+    const terminal = (outcome) => keep({ kind: "terminal", outcome });
+    switch (obs.checkpoint) {
+        // ── C1 pre_plan (agent.ts:4666–4976) ──────────────────────────────────
+        case "pre_plan": {
+            // Verify-email WALL: no fillable input + "check your email" copy →
+            // inbox-poll path (the executor clicks Resend, then returns submitted).
+            // [agent.ts:4717]
+            if (obs.verifyWall)
+                return keep({ kind: "route_to_verification" });
+            // Email verification-CODE gate (only after the email was submitted). [4757]
+            if (state.committedToEmailPath && obs.codeGate) {
+                return terminal({ kind: "submitted" });
+            }
+            // OAuth-first scan — suppressed once committed to the email path. [4778]
+            if (obs.oauthCandidatesPresent && !state.committedToEmailPath) {
+                if (obs.oauthButtonHit !== null) {
+                    return terminal({
+                        kind: "oauth",
+                        selector: obs.oauthButtonHit.selector,
+                        provider: obs.oauthButtonHit.provider,
+                    });
+                }
+                // no provider button yet — patient async-render retries. [4827]
+                const maxScan = obs.oauthScanShell
+                    ? B.MAX_OAUTH_SCAN_RETRIES_SHELL
+                    : B.MAX_OAUTH_SCAN_RETRIES_FORM;
+                if (state.oauthScanRetries < maxScan) {
+                    return next({ kind: "oauth_scan_wait" }, { oauthScanRetries: state.oauthScanRetries + 1 });
+                }
+                // exhausted retries, still a shell → reload once to unstick. [4841]
+                if (obs.oauthScanShell && state.oauthShellReloads < B.MAX_OAUTH_SHELL_RELOADS) {
+                    return next({ kind: "oauth_shell_reload" }, { oauthShellReloads: state.oauthShellReloads + 1, oauthScanRetries: 0 });
+                }
+                // already-authenticated dashboard (no form) → post-verify nav. [4863]
+                if (obs.alreadySignedIn)
+                    return terminal({ kind: "already_oauth" });
+                // a generic "Sign In to Continue" gate hides the provider buttons. [4879]
+                if (state.signInAdvanceClicks < B.MAX_SIGN_IN_ADVANCE_CLICKS && obs.signInAdvancePresent) {
+                    return next({ kind: "sign_in_advance" }, { signInAdvanceClicks: state.signInAdvanceClicks + 1, oauthScanRetries: 0 });
+                }
+                // no usable provider affordance — fall through to form-fill. [4903]
+            }
+            // Anti-bot interstitial that wouldn't clear (tiny inventory). [4932]
+            if (obs.antiBotVendor !== null) {
+                return terminal({ kind: "anti_bot_blocked", vendor: obs.antiBotVendor });
+            }
+            // OAuth-only chooser: nothing fillable, no email-signup option. [4945]
+            if (obs.oauthOnly) {
+                const recoverable = obs.oauthOnlyMissingProviders.length > 0 && obs.oauthOnlyHaveSessions.length > 0;
+                return terminal(recoverable
+                    ? {
+                        kind: "needs_oauth_provider_session",
+                        missingProviders: obs.oauthOnlyMissingProviders,
+                        haveSessions: obs.oauthOnlyHaveSessions,
+                    }
+                    : { kind: "oauth_required" });
+            }
+            // Nothing short-circuited → ask the planner. [4978]
+            return keep({ kind: "run_planner" });
+        }
+        // ── C2 plan_error (agent.ts:4988–5028) ────────────────────────────────
+        case "plan_error": {
+            // Transient upstream blip (50x / network): brief backoff + retry, capped,
+            // and deliberately NOT charged to errorReplans (it's weather, not logic).
+            if (obs.isUpstreamBlip) {
+                const nextBlips = state.upstreamBlipRetries + 1;
+                if (nextBlips > B.MAX_UPSTREAM_BLIP_RETRIES) {
+                    return terminal({
+                        kind: "planning_failed",
+                        reason: `llm_proxy_unavailable: planner request failed ${nextBlips}x on upstream proxy errors (${obs.reason}) — sustained LLM-proxy/upstream outage, not a page problem`,
+                    });
+                }
+                return next({ kind: "blip_retry" }, { upstreamBlipRetries: nextBlips });
+            }
+            // Invalid planner OUTPUT (parse fail / hallucinated selector): error replan.
+            const nextErr = state.errorReplans + 1;
+            if (nextErr > B.MAX_ERROR_REPLANS) {
+                return terminal({
+                    kind: "planning_failed",
+                    reason: `planner output never validated: ${obs.reason}`,
+                });
+            }
+            return next({ kind: "replan", hintKind: "selector_not_in_inventory" }, { errorReplans: nextErr });
+        }
+        // ── C3 post_plan (agent.ts:5034–5118) — the only PURE checkpoint ───────
+        case "post_plan": {
+            // A logged-in product/billing page misread as a signup form. [5043]
+            if (obs.isDashboard)
+                return terminal({ kind: "already_oauth" });
+            // page-fingerprint progress: clear the no-progress memory if the page
+            // moved since last round. [5050]
+            const moved = pageMovedSince(state.lastRoundPageSig, obs.pageSig);
+            const deadSelectors = moved ? new Set() : state.lastNoProgressClickSelectors;
+            const memoryPatch = {
+                lastRoundPageSig: obs.pageSig,
+                lastNoProgressClickSelectors: deadSelectors,
+            };
+            // F14 stuck-detection (uses the just-cleared memory). [5086]
+            if (isStuckRepeat({
+                planClickSelectors: obs.planClickSelectors,
+                planEditsAField: obs.planEditsAField,
+                noProgressSelectors: deadSelectors,
+            })) {
+                return next({
+                    kind: "terminal",
+                    outcome: {
+                        kind: "planning_failed",
+                        reason: `stuck — planner re-picked the same click selector(s) after no-progress: ${obs.planClickSelectors.join(", ")}`,
+                    },
+                }, memoryPatch);
+            }
+            // verifyPlan: a planned selector didn't resolve on the live page. [5102]
+            if (obs.verifyMiss !== null) {
+                const nextErr = state.errorReplans + 1;
+                if (nextErr > B.MAX_ERROR_REPLANS) {
+                    return next({
+                        kind: "terminal",
+                        outcome: { kind: "planning_failed", reason: `planned selectors kept missing: ${obs.verifyMiss}` },
+                    }, memoryPatch);
+                }
+                return next({ kind: "replan", hintKind: obs.verifyMissNotCheckbox ? "drop_the_check" : "selectors_did_not_verify" }, { ...memoryPatch, errorReplans: nextErr });
+            }
+            // picks verify → execute. [5120]
+            return next({ kind: "execute_plan" }, memoryPatch);
+        }
+        // ── C4 post_execute (agent.ts:5122–5206) ──────────────────────────────
+        case "post_execute": {
+            // commit to the email path the moment an email-affordance was clicked. [5132]
+            const commitPatch = obs.clickedEmailAffordance
+                ? { committedToEmailPath: true }
+                : {};
+            // a plan with no fill either advanced the page (replan) or is a dead end. [5163]
+            if (!obs.hadFill) {
+                let emptyPlans = state.emptyPlans;
+                if (obs.planActionCount === 0) {
+                    emptyPlans += 1;
+                    if (emptyPlans >= B.MAX_EMPTY_PLANS) {
+                        return next({
+                            kind: "terminal",
+                            outcome: {
+                                kind: "planning_failed",
+                                reason: "no fillable form on the page — the planner found no input fields or actionable elements",
+                            },
+                        }, { ...commitPatch, emptyPlans });
+                    }
+                }
+                else {
+                    emptyPlans = 0;
+                }
+                const nextProgress = state.progressReplans + 1;
+                if (nextProgress > B.MAX_PROGRESS_REPLANS) {
+                    return next({ kind: "terminal", outcome: { kind: "planning_failed", reason: "never reached a fillable form" } }, { ...commitPatch, emptyPlans });
+                }
+                // F14 — record dead click selectors (cleared if a field edit happened). [5190]
+                const dead = nextNoProgressSet({
+                    planClickSelectors: obs.planClickSelectors,
+                    hadFieldEdit: obs.hadFieldEdit,
+                });
+                return next({ kind: "replan", hintKind: "page_advanced" }, {
+                    ...commitPatch,
+                    emptyPlans,
+                    progressReplans: nextProgress,
+                    lastNoProgressClickSelectors: dead,
+                });
+            }
+            // a fill IS present = forward progress → clear the stuck tracker, go submit. [5206]
+            return next({ kind: "submit" }, { ...commitPatch, lastNoProgressClickSelectors: new Set() });
+        }
+        // ── C4 post_submit (agent.ts:5222–5391) ───────────────────────────────
+        case "post_submit": {
+            // pre-submit captcha gate. [5223]
+            if (obs.preGateBlocked) {
+                return terminal({ kind: "captcha_blocked", captchaKind: obs.preGateKind });
+            }
+            // submit click failures. [5229]
+            if (obs.submitError !== null) {
+                if (obs.submitDisabled) {
+                    const nextProgress = state.progressReplans + 1;
+                    if (nextProgress > B.MAX_PROGRESS_REPLANS) {
+                        return terminal({ kind: "submit_failed", reason: obs.submitError });
+                    }
+                    return next({ kind: "replan", hintKind: "submit_disabled" }, { progressReplans: nextProgress });
+                }
+                if (obs.submitTimeout) {
+                    const nextProgress = state.progressReplans + 1;
+                    if (nextProgress > B.MAX_PROGRESS_REPLANS) {
+                        return terminal({ kind: "submit_failed", reason: obs.submitError });
+                    }
+                    return next({ kind: "replan", hintKind: "submit_went_stale" }, { progressReplans: nextProgress });
+                }
+                return terminal({ kind: "submit_failed", reason: obs.submitError });
+            }
+            // post-submit captcha gate. [5331]
+            if (obs.postGateBlocked) {
+                // managed/invisible Turnstile resolves server-side; with an inbox to
+                // arbitrate, proceed — a code arriving proves the submit went through.
+                if (obs.postGateKind === "turnstile" && obs.hasInbox) {
+                    return terminal({ kind: "submitted" });
+                }
+                return terminal({ kind: "captcha_blocked", captchaKind: obs.postGateKind });
+            }
+            // post-submit validation errors → the page advanced; re-plan. [5373]
+            if (obs.validationFailure) {
+                const nextProgress = state.progressReplans + 1;
+                // out of replan headroom → proceed; extraction is the real arbiter. [5374]
+                if (nextProgress > B.MAX_PROGRESS_REPLANS) {
+                    return terminal({ kind: "submitted" });
+                }
+                return next({ kind: "replan", hintKind: "post_submit_validation" }, { progressReplans: nextProgress });
+            }
+            // clean submit. [5391]
+            return terminal({ kind: "submitted" });
+        }
+    }
+}
+//# sourceMappingURL=form-fill.js.map

package/dist/bot/form-fill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-fill.js","sourceRoot":"","sources":["../../src/bot/form-fill.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,oFAAoF;AACpF,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,iFAAiF;AAEjF,kFAAkF;AAClF,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,SAA4B;IACtE,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAsB,EAAE,OAAe;IACpE,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,OAAO,CAAC;AACjD,CAAC;AAED,kFAAkF;AAClF,iFAAiF;AACjF,yEAAyE;AACzE,iFAAiF;AACjF,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,KAI7B;IACC,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,iFAAiF;AACjF,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,KAGjC;IACC,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAC5E,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,kFAAkF;AAClF,4EAA4E;AAC5E,gFAAgF;AAChF,iFAAiF;AACjF,kFAAkF;AAClF,0EAA0E;AAC1E,0EAA0E;AAC1E,kDAAkD;AAClD,EAAE;AACF,qEAAqE;AACrE,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,sDAAsD;AACtD,+EAA+E;AAC/E,gFAAgF;AAChF,0CAA0C;AAC1C,qFAAqF;AACrF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,0DAA0D;AAE1D,gFAAgF;AAChF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,iBAAiB,EAAE,CAAC;IACpB,oBAAoB,EAAE,CAAC;IACvB,eAAe,EAAE,CAAC,EAAE,2CAA2C;IAC/D,4BAA4B,EAAE,CAAC;IAC/B,2BAA2B,EAAE,CAAC;IAC9B,uBAAuB,EAAE,CAAC;IAC1B,yBAAyB,EAAE,CAAC;IAC5B,0BAA0B,EAAE,CAAC;CACrB,CAAC;AAuBX,oFAAoF;AACpF,mEAAmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,aAAa,GAAG,KAAK;IACxD,OAAO;QACL,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,UAAU,EAAE,CAAC;QACb,mBAAmB,EAAE,CAAC;QACtB,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,CAAC;QACpB,mBAAmB,EAAE,CAAC;QACtB,gBAAgB,EAAE,IAAI;QACtB,4BAA4B,EAAE,IAAI,GAAG,EAAE;QACvC,oBAAoB,EAAE,aAAa;KACpC,CAAC;AACJ,CAAC;AAsID,MAAM,CAAC,GAAG,iBAAiB,CAAC;AAE5B,iFAAiF;AACjF,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,GAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAgB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAE,KAA6B,EAAgB,EAAE,CAAC,CAAC;QACrF,MAAM;QACN,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE;KAClC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,OAAwB,EAAgB,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAEjG,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC;QACvB,yEAAyE;QACzE,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,mEAAmE;YACnE,wEAAwE;YACxE,kBAAkB;YAClB,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACnE,4EAA4E;YAC5E,IAAI,KAAK,CAAC,oBAAoB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC/C,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,yEAAyE;YACzE,IAAI,GAAG,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;gBAC9D,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;oBAChC,OAAO,QAAQ,CAAC;wBACd,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ;wBACrC,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ;qBACtC,CAAC,CAAC;gBACL,CAAC;gBACD,gEAAgE;gBAChE,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc;oBAChC,CAAC,CAAC,CAAC,CAAC,4BAA4B;oBAChC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC;gBAClC,IAAI,KAAK,CAAC,gBAAgB,GAAG,OAAO,EAAE,CAAC;oBACrC,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7F,CAAC;gBACD,oEAAoE;gBACpE,IAAI,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,uBAAuB,EAAE,CAAC;oBAC9E,OAAO,IAAI,CACT,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAC9B,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CACxE,CAAC;gBACJ,CAAC;gBACD,sEAAsE;gBACtE,IAAI,GAAG,CAAC,eAAe;oBAAE,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;gBACpE,0EAA0E;gBAC1E,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,0BAA0B,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;oBACzF,OAAO,IAAI,CACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAC3B,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAC5E,CAAC;gBACJ,CAAC;gBACD,oEAAoE;YACtE,CAAC;YACD,qEAAqE;YACrE,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,uEAAuE;YACvE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,WAAW,GACf,GAAG,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC;gBACnF,OAAO,QAAQ,CACb,WAAW;oBACT,CAAC,CAAC;wBACE,IAAI,EAAE,8BAA8B;wBACpC,gBAAgB,EAAE,GAAG,CAAC,yBAAyB;wBAC/C,YAAY,EAAE,GAAG,CAAC,qBAAqB;qBACxC;oBACH,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,oDAAoD;YACpD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,yEAAyE;QACzE,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,0EAA0E;YAC1E,0EAA0E;YAC1E,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC;gBAChD,IAAI,SAAS,GAAG,CAAC,CAAC,yBAAyB,EAAE,CAAC;oBAC5C,OAAO,QAAQ,CAAC;wBACd,IAAI,EAAE,iBAAiB;wBACvB,MAAM,EAAE,iDAAiD,SAAS,+BAA+B,GAAG,CAAC,MAAM,6DAA6D;qBACzK,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,6EAA6E;YAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;YACvC,IAAI,OAAO,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC;gBAClC,OAAO,QAAQ,CAAC;oBACd,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,mCAAmC,GAAG,CAAC,MAAM,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,0EAA0E;QAC1E,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,oEAAoE;YACpE,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YAChE,sEAAsE;YACtE,iCAAiC;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;YACrF,MAAM,WAAW,GAA2B;gBAC1C,gBAAgB,EAAE,GAAG,CAAC,OAAO;gBAC7B,4BAA4B,EAAE,aAAa;aAC5C,CAAC;YACF,6DAA6D;YAC7D,IACE,aAAa,CAAC;gBACZ,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,mBAAmB,EAAE,aAAa;aACnC,CAAC,EACF,CAAC;gBACD,OAAO,IAAI,CACT;oBACE,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE;wBACP,IAAI,EAAE,iBAAiB;wBACvB,MAAM,EAAE,2EAA2E,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACvH;iBACF,EACD,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,yEAAyE;YACzE,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;gBACvC,IAAI,OAAO,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC;oBAClC,OAAO,IAAI,CACT;wBACE,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,GAAG,CAAC,UAAU,EAAE,EAAE;qBAClG,EACD,WAAW,CACZ,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CACT,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,0BAA0B,EAAE,EACvG,EAAE,GAAG,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,CAC1C,CAAC;YACJ,CAAC;YACD,iCAAiC;YACjC,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;QAED,yEAAyE;QACzE,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,8EAA8E;YAC9E,MAAM,WAAW,GAA2B,GAAG,CAAC,sBAAsB;gBACpE,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE;gBAChC,CAAC,CAAC,EAAE,CAAC;YACP,iFAAiF;YACjF,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBAClC,IAAI,GAAG,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;oBAC9B,UAAU,IAAI,CAAC,CAAC;oBAChB,IAAI,UAAU,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;wBACpC,OAAO,IAAI,CACT;4BACE,IAAI,EAAE,UAAU;4BAChB,OAAO,EAAE;gCACP,IAAI,EAAE,iBAAiB;gCACvB,MAAM,EAAE,yFAAyF;6BAClG;yBACF,EACD,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,CAC/B,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,CAAC,CAAC;gBACjB,CAAC;gBACD,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;gBAC/C,IAAI,YAAY,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,IAAI,CACT,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE,EACnG,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,CAC/B,CAAC;gBACJ,CAAC;gBACD,+EAA+E;gBAC/E,MAAM,IAAI,GAAG,iBAAiB,CAAC;oBAC7B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;oBAC1C,YAAY,EAAE,GAAG,CAAC,YAAY;iBAC/B,CAAC,CAAC;gBACH,OAAO,IAAI,CACT,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,EAC7C;oBACE,GAAG,WAAW;oBACd,UAAU;oBACV,eAAe,EAAE,YAAY;oBAC7B,4BAA4B,EAAE,IAAI;iBACnC,CACF,CAAC;YACJ,CAAC;YACD,oFAAoF;YACpF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,4BAA4B,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,yEAAyE;QACzE,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,kCAAkC;YAClC,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,gCAAgC;YAChC,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC7B,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;oBACvB,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;oBAC/C,IAAI,YAAY,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;wBAC1C,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;oBACtE,CAAC;oBACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClG,CAAC;gBACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;oBACtB,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;oBAC/C,IAAI,YAAY,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;wBAC1C,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;oBACtE,CAAC;oBACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;gBACpG,CAAC;gBACD,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,mCAAmC;YACnC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;gBACxB,qEAAqE;gBACrE,uEAAuE;gBACvE,IAAI,GAAG,CAAC,YAAY,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACrD,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACzC,CAAC;gBACD,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,qEAAqE;YACrE,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;gBAC/C,2EAA2E;gBAC3E,IAAI,YAAY,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACzC,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,wBAAwB,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,uBAAuB;YACvB,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/bot/google-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-login.d.ts","sourceRoot":"","sources":["../../src/bot/google-login.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAkG5D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqBD,wBAAsB,4BAA4B,CAChD,UAAU,GAAE,MAA2B,GACtC,OAAO,CAAC,eAAe,EAAE,CAAC,CAmB5B;AAUD,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,aAAa,GACb,WAAW,GACX,YAAY,CAAC;AAEjB,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAwCtF;AA+BD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CA2BlE;AAMD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEjE;AAaD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB/D;AAUD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBpE;AAGD,wBAAgB,UAAU,IAAI,OAAO,CAapC;AAWD,wBAAgB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAe9C;AAaD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjD;AAiJD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IAGjB,aAAa,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAG7D,WAAW,EAAE,MAAM,CAAC;IAIpB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAO1D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAKvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,GAAG,qBAAqB,GAAG,SAAS,CAAA;CAAE,CAAC,CAsBtE;AAuRD,wBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAC9C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IAQpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,WAAW,CAAC,CAsDvB;AASD,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,UAAU,EAAE,MAAM,CAAC;IAOnB,gBAAgB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IAIxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoDxE"}
+{"version":3,"file":"google-login.d.ts","sourceRoot":"","sources":["../../src/bot/google-login.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAsG5D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqBD,wBAAsB,4BAA4B,CAChD,UAAU,GAAE,MAA2B,GACtC,OAAO,CAAC,eAAe,EAAE,CAAC,CAmB5B;AAUD,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,aAAa,GACb,WAAW,GACX,YAAY,CAAC;AAEjB,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAwCtF;AA+BD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CA2BlE;AAMD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEjE;AAaD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB/D;AAUD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBpE;AAGD,wBAAgB,UAAU,IAAI,OAAO,CAapC;AAWD,wBAAgB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAe9C;AAaD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjD;AAiJD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IAGjB,aAAa,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAG7D,WAAW,EAAE,MAAM,CAAC;IAIpB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAO1D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAKvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,GAAG,qBAAqB,GAAG,SAAS,CAAA;CAAE,CAAC,CAsBtE;AAuRD,wBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAC9C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IAQpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,WAAW,CAAC,CAsDvB;AASD,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,UAAU,EAAE,MAAM,CAAC;IAOnB,gBAAgB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IAIxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoDxE"}

package/dist/bot/google-login.js

@@ -95,8 +95,12 @@ const LOGIN_TARGETS = {
 // phone via noVNC (the spike's 1920x1080 was the UX mistake). 720x1280
 // is the smallest size that doesn't look pixel-y on a 1080p+ phone
 // screen, and stays bandwidth-friendly compared to 1080x1920.
-const HEADLESS_W = 720;
-const HEADLESS_H = 1280;
+// Overridable via BOT_NOVNC_W/H — a desktop-width display (e.g. 1440x900) is
+// needed when the remote page is a responsive app whose desktop-only controls
+// (hover-revealed row menus in the Workspace Admin console) collapse at phone
+// width. Defaults stay phone-shaped for the common login-from-phone case.
+const HEADLESS_W = Number(process.env.BOT_NOVNC_W) || 720;
+const HEADLESS_H = Number(process.env.BOT_NOVNC_H) || 1280;
 // The Debian/Ubuntu `novnc` package installs its web assets here — the
 // `core/` RFB library our branded page reuses (see runHeadlessChrome).
 const NOVNC_INSTALL_DIR = "/usr/share/novnc";