@trusty-squire/mcp 0.9.4 → 0.9.5

package/dist/bot/agent.d.ts

@@ -242,6 +242,12 @@ export declare function isCredentialNoiseCandidate(candidate: string): boolean;
 export declare function isDocumentationUrl(url: string): boolean;
 export declare function pickVerificationLink(links: readonly string[]): string | null;
 export declare function pickVerificationLinkFromHtml(bodyHtml: string): string | null;
+export declare function extractCodeFromEmailBody(email: {
+    subject: string;
+    body_text?: string | null;
+    body_html?: string | null;
+}): string | null;
+export declare function isVerificationCodeGate(inventory: readonly InteractiveElement[], pageText: string): boolean;
 export declare function isStalledOnActions(effects: ReadonlyArray<{
     kind: string;
     pageUnchanged: boolean;
@@ -305,6 +311,7 @@ export declare class SignupAgent {
     private enterEmailVerificationCode;
     private maybeFirePostVerifyHeightenedAuth;
     private extractFromDomProximity;
+    private countPresentedCredentialLabels;
     private harvestVisibleCredentials;
     private attemptMintNewKey;
     private postVerifyLoop;

package/dist/bot/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/bot/agent.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,iBAAiB,EAEjB,WAAW,EACX,cAAc,EACd,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAUhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,OAAO,EACb,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,KAAK,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACrE,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAKpC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC,CAAC;CACJ;AAqFD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3D;AAgED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUjD;AAMD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,MAAM,EAAE,MAAM;CAI3B;AAOD,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAwFD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAgCD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAmCV;AA0BD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,kBAAkB,GAAG,IAAI,CA2C3B;AAOD,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CA0Cf;AAUD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAazD;AAmBD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACjC,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAK7B,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1C,GACL,OAAO,CAAC,MAAM,CAAC,CA8CjB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUtD;AAwDD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAYrE;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAI/B,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAI/B,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAIhD,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAOzC,aAAa,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAM5C,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAOhC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAK/B,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAQjC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAUtD,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAQ7C,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAQD,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAUpB,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AASpB,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,CAEzE;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAIhB,aAAa,CAAC,EAAE,YAAY,CAAC;IAI7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAMjC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAOhC,OAAO,CAAC,EAAE,OAAO,CAAC;IAQlB,eAAe,CAAC,EAAE,UAAU,GAAG,cAAc,CAAC;IAQ9C,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,WAAW,CAAC;QAIlB,OAAO,EAAE,cAAc,CAAC;QACxB,kBAAkB,EAAE,OAAO,CAAC;QAI5B,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAGD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgDD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAOjE;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAKD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAOnD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAKtD,QAAA,MAAM,gBAAgB,0EAOZ,CAAC;AACX,KAAK,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAwJvD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GACrC,UAAU,CAoCZ;AAYD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGvD;AAqBD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAeA;AACD,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,GAAG,MAAM,CA2GhF;AA6ED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAgCT;AAmCD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,GACb,QAAQ,GAAG,OAAO,GAAG,OAAO,CAmE9B;AAOD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA4BlE;AAUD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAC3C,OAAO,CAoBT;AAaD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAC3C,kBAAkB,GAAG,IAAI,CAsD3B;AAQD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUzE;AAOD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAC3C,kBAAkB,GAAG,IAAI,CAS3B;AAqED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,CACT,GAAG,EAAE,MAAM,KACR,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,EAC3E,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GACxB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwExB;AASD,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAItE;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe9D;AA+BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAiMV;AAiBD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1D,GAAG,OAAO,CA4BV;AAeD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,eAAe,EAAE,CASnB;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,OAAO,CAmBT;AA6BD,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,QAAQ,EAAE,eAAe,GACxB,kBAAkB,GAAG,IAAI,CAwG3B;AAcD,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,QAAQ,EAAE,eAAe,GACxB,kBAAkB,GAAG,IAAI,CAgD3B;AAID,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM1C;AAQD,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAO/B,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,OAAO,CAkBT;AAMD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CA0BT;AAKD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAO9D;AAoBD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAsB5E;AAUD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAW7D;AAWD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUzD;AAKD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,SAAS,EAAE,SAAS,eAAe,EAAE,GACpC;IAAE,QAAQ,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAAG,IAAI,CAMlE;AAkBD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,SAAS,EAAE,SAAS,eAAe,EAAE,GACpC,kBAAkB,GAAG,IAAI,CAuB3B;AAuBD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,QAAQ,EAAE,SAAS,eAAe,EAAE,GACnC,eAAe,EAAE,CAiBnB;AAQD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GACrC,cAAc,CAqFhB;AAgED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAYnF;AAYD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAmCf;AAmBD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2JxB;AAoBD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAMT;AAQD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAOT;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiIjE;AA8CD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAKrE;AAUD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOvD;AASD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAa5E;AAUD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiC5E;AAmBD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EAC1F,SAAS,SAAI,GACZ,OAAO,CAoBT;AAOD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAcnD;AAOD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASzD;AAKD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMrD;AAcD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBxD;AAWD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI1D;AAUD,qBAAa,WAAW;IAwqCpB,OAAO,CAAC,OAAO;IApqCjB,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAOlC,OAAO,CAAC,gBAAgB,CAAsC;IAa9D,OAAO,CAAC,gBAAgB,CAEE;IAM1B,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,uBAAuB;YAuBjB,cAAc;YAuJd,WAAW;YAsDX,oBAAoB;YAsoBpB,cAAc;YAyFd,yBAAyB;YAkCzB,0BAA0B;YAc1B,sBAAsB;YA8BtB,UAAU;IA4CxB,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAyB;IAIjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAgB;IAG/C,OAAO,CAAC,cAAc,CAAM;IAO5B,OAAO,CAAC,cAAc,CAAuB;IAK7C,OAAO,CAAC,wBAAwB,CAAuB;IASvD,OAAO,CAAC,wBAAwB,CAAuB;IAKvD,OAAO,CAAC,mBAAmB,CAAiC;IAC5D,OAAO,CAAC,cAAc,CAAiC;IAIvD,OAAO,CAAC,mBAAmB,CAAS;IAIpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAmB;gBAGxC,OAAO,EAAE,iBAAiB,EAClC,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,EACzB,IAAI,GAAE;QACJ,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,aAAa,CAAC,EAAE,aAAa,CAAC;QAG9B,aAAa,CAAC,EAAE,gBAAgB,CAAC;QAMjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;KAC9B;IA+BR,OAAO,CAAC,wBAAwB,CAAW;IAK3C,IAAI,QAAQ,IAAI,SAAS,MAAM,EAAE,CAEhC;YAOa,OAAO;YAkBP,YAAY;YA2DZ,UAAU;IA6ClB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;YA8CvC,SAAS;YAutBT,YAAY;IA0jC1B,OAAO,CAAC,UAAU;YAeJ,sBAAsB;YA8BtB,4BAA4B;YA+C5B,sBAAsB;YA+CtB,qBAAqB;YAerB,cAAc;IAqE5B,OAAO,CAAC,0BAA0B;IAYlC,OAAO,CAAC,oBAAoB;YAQd,wBAAwB;YA+CxB,0BAA0B;IA0CxC,OAAO,CAAC,iCAAiC;YAiF3B,uBAAuB;YAoEvB,yBAAyB;YAmDzB,iBAAiB;YAuJjB,cAAc;YAskDd,6BAA6B;YAkC7B,oBAAoB;YA6CpB,kBAAkB;YAsSlB,cAAc;YAiFd,0BAA0B;YAiB1B,mBAAmB;YAsDnB,kBAAkB;YAmIlB,uBAAuB;CA4CtC"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/bot/agent.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,iBAAiB,EAEjB,WAAW,EACX,cAAc,EACd,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAUhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,OAAO,EACb,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,KAAK,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACrE,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAKpC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC,CAAC;CACJ;AAqFD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3D;AAgED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUjD;AAMD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,MAAM,EAAE,MAAM;CAI3B;AAOD,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAwFD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAgCD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAmCV;AA0BD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,kBAAkB,GAAG,IAAI,CA2C3B;AAOD,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CA0Cf;AAUD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAazD;AAmBD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACjC,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAK7B,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1C,GACL,OAAO,CAAC,MAAM,CAAC,CA8CjB;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUtD;AAwDD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAYrE;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAI/B,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAI/B,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAIhD,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAOzC,aAAa,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAM5C,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAOhC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAK/B,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAQjC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAUtD,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAQ7C,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAQD,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAUpB,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AASpB,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,CAEzE;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAIhB,aAAa,CAAC,EAAE,YAAY,CAAC;IAI7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAMjC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAOhC,OAAO,CAAC,EAAE,OAAO,CAAC;IAQlB,eAAe,CAAC,EAAE,UAAU,GAAG,cAAc,CAAC;IAQ9C,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,WAAW,CAAC;QAIlB,OAAO,EAAE,cAAc,CAAC;QACxB,kBAAkB,EAAE,OAAO,CAAC;QAI5B,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAGD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgDD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAOjE;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAKD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAOnD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAKtD,QAAA,MAAM,gBAAgB,0EAOZ,CAAC;AACX,KAAK,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAwJvD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GACrC,UAAU,CAoCZ;AAYD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGvD;AAqBD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAeA;AACD,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,GAAG,MAAM,CA2GhF;AA6ED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAgCT;AAmCD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,GACb,QAAQ,GAAG,OAAO,GAAG,OAAO,CAmE9B;AAOD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA4BlE;AAUD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAC3C,OAAO,CAoBT;AAaD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAC3C,kBAAkB,GAAG,IAAI,CAsD3B;AAQD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUzE;AAOD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAC3C,kBAAkB,GAAG,IAAI,CAS3B;AAqED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,CACT,GAAG,EAAE,MAAM,KACR,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,EAC3E,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GACxB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwExB;AASD,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAItE;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe9D;AA+BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAiMV;AAiBD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1D,GAAG,OAAO,CA4BV;AAeD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,eAAe,EAAE,CASnB;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,OAAO,CAmBT;AA6BD,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,QAAQ,EAAE,eAAe,GACxB,kBAAkB,GAAG,IAAI,CAwG3B;AAcD,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,QAAQ,EAAE,eAAe,GACxB,kBAAkB,GAAG,IAAI,CAgD3B;AAID,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM1C;AAQD,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAO/B,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,kBAAkB,EAAE,GACvC,OAAO,CAkBT;AAMD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CA0BT;AAKD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAO9D;AAoBD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAsB5E;AAUD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAW7D;AAWD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUzD;AAKD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,SAAS,EAAE,SAAS,eAAe,EAAE,GACpC;IAAE,QAAQ,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAAG,IAAI,CAMlE;AAkBD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,SAAS,EAAE,SAAS,eAAe,EAAE,GACpC,kBAAkB,GAAG,IAAI,CAuB3B;AAuBD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,QAAQ,EAAE,SAAS,eAAe,EAAE,GACnC,eAAe,EAAE,CAiBnB;AAQD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GACrC,cAAc,CAqFhB;AAgED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAYnF;AAYD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAmCf;AAmBD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2JxB;AAoBD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAMT;AAQD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAOT;AA2CD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiIjE;AA8CD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAKrE;AAUD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOvD;AASD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAa5E;AAUD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiC5E;AAWD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,MAAM,GAAG,IAAI,CAkBhB;AAUD,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,QAAQ,EAAE,MAAM,GACf,OAAO,CAmBT;AAmBD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EAC1F,SAAS,SAAI,GACZ,OAAO,CAoBT;AAOD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAcnD;AAOD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASzD;AAKD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMrD;AAcD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBxD;AAWD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI1D;AAUD,qBAAa,WAAW;IAwrCpB,OAAO,CAAC,OAAO;IAprCjB,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAOlC,OAAO,CAAC,gBAAgB,CAAsC;IAa9D,OAAO,CAAC,gBAAgB,CAEE;IAM1B,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,uBAAuB;YAuBjB,cAAc;YAuJd,WAAW;YAsDX,oBAAoB;YAspBpB,cAAc;YAyFd,yBAAyB;YAkCzB,0BAA0B;YAc1B,sBAAsB;YA8BtB,UAAU;IA4CxB,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAyB;IAIjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAgB;IAG/C,OAAO,CAAC,cAAc,CAAM;IAO5B,OAAO,CAAC,cAAc,CAAuB;IAK7C,OAAO,CAAC,wBAAwB,CAAuB;IASvD,OAAO,CAAC,wBAAwB,CAAuB;IAKvD,OAAO,CAAC,mBAAmB,CAAiC;IAC5D,OAAO,CAAC,cAAc,CAAiC;IAIvD,OAAO,CAAC,mBAAmB,CAAS;IAIpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAmB;gBAGxC,OAAO,EAAE,iBAAiB,EAClC,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,EACzB,IAAI,GAAE;QACJ,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,aAAa,CAAC,EAAE,aAAa,CAAC;QAG9B,aAAa,CAAC,EAAE,gBAAgB,CAAC;QAMjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;KAC9B;IA+BR,OAAO,CAAC,wBAAwB,CAAW;IAK3C,IAAI,QAAQ,IAAI,SAAS,MAAM,EAAE,CAEhC;YAOa,OAAO;YAkBP,YAAY;YA2DZ,UAAU;IA6ClB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;YA8CvC,SAAS;YAuuBT,YAAY;IA+mC1B,OAAO,CAAC,UAAU;YAeJ,sBAAsB;YA8BtB,4BAA4B;YA+C5B,sBAAsB;YA+CtB,qBAAqB;YAerB,cAAc;IAqE5B,OAAO,CAAC,0BAA0B;IAYlC,OAAO,CAAC,oBAAoB;YAQd,wBAAwB;YA+CxB,0BAA0B;IA0CxC,OAAO,CAAC,iCAAiC;YAiF3B,uBAAuB;YAmCvB,8BAA8B;YAqB9B,yBAAyB;YAmDzB,iBAAiB;YAuJjB,cAAc;YAisDd,6BAA6B;YAkC7B,oBAAoB;YA6CpB,kBAAkB;YAsSlB,cAAc;YAiFd,0BAA0B;YAiB1B,mBAAmB;YAsDnB,kBAAkB;YAmIlB,uBAAuB;CA4CtC"}

package/dist/bot/agent.js

@@ -2612,6 +2612,46 @@ export function isMultiCredBundle(creds) {
     }
     return false;
 }
+// DOM-label phrase → canonical credential key. Shared by
+// extractFromDomProximity (which harvests VALUES) and
+// countPresentedCredentialLabels (which counts how many distinct
+// credentials a page PRESENTS, masked included). Kept in lockstep with
+// the Phase E LABEL_ALIASES vocabulary.
+const DOM_LABEL_TO_KEY = {
+    "api key": "api_key",
+    "api token": "api_key",
+    "api secret": "api_secret",
+    "secret key": "secret_key",
+    "publishable key": "publishable_key",
+    "access key": "access_key_id",
+    "access key id": "access_key_id",
+    "access token": "access_token",
+    "bearer token": "access_token",
+    "personal access token": "access_token",
+    "auth token": "auth_token",
+    "client id": "client_id",
+    "client secret": "client_secret",
+    "client key": "client_id",
+    "cloud name": "cloud_name",
+    cloudname: "cloud_name",
+    "application id": "application_id",
+    "app id": "application_id",
+    "admin api key": "admin_api_key",
+    "search api key": "search_api_key",
+    "search-only api key": "search_api_key",
+    "monitoring api key": "monitoring_api_key",
+    "account sid": "account_sid",
+    "secret access key": "secret_access_key",
+    "consumer key": "consumer_key",
+    "consumer secret": "consumer_secret",
+    "access token secret": "access_token_secret",
+    "project api key": "project_api_key",
+    "personal api key": "personal_api_key",
+    "organization id": "org_id",
+    "org id": "org_id",
+    "app key": "app_key",
+    "app secret": "app_secret",
+};
 export function extractApiKeyFromText(text) {
     const prefixed = [
         /\bre_[a-zA-Z0-9_]{20,}\b/, // Resend (key body contains underscores)
@@ -2872,6 +2912,60 @@ export function pickVerificationLinkFromHtml(bodyHtml) {
     }
     return best !== null && best.score > 0 ? best.url : null;
 }
+// Last-resort verification-CODE extraction from an email body, for the
+// passwordless "we emailed you a code" flow (axiom: "Axiom sign-in
+// verification code") when the inbox parser's parsed_codes came back empty.
+// Without this the bot bailed "no usable verification link" on a code-only
+// email — treating a routine code flow as a dead end. Conservative: prefers a
+// 4-8 digit run next to a code/verify keyword, then a space/dash-grouped code,
+// then a standalone 6-digit number (the most common verification length).
+// Returns null when nothing code-shaped is found so the caller still bails
+// honestly rather than typing garbage. Exported for unit testing.
+export function extractCodeFromEmailBody(email) {
+    const text = [
+        email.subject ?? "",
+        email.body_text ?? "",
+        (email.body_html ?? "").replace(/<[^>]+>/g, " "),
+    ].join("\n");
+    // 1) A code sitting next to a verification keyword — the strongest signal.
+    const kw = text.match(/(?:verification code|sign[\s-]?in code|one[\s-]?time(?:\s+(?:code|password))?|security code|your code|confirmation code|code is|enter(?:\s+this)?\s+code)\b[^0-9]{0,40}([0-9]{4,8})\b/i);
+    if (kw?.[1] !== undefined)
+        return kw[1];
+    // 2) A grouped code ("123-456" / "1234 5678").
+    const grouped = text.match(/(?<![0-9])([0-9]{3,4}[ -][0-9]{3,4})(?![0-9])/);
+    if (grouped?.[1] !== undefined)
+        return grouped[1].replace(/[ -]/g, "");
+    // 3) A standalone 6-digit number (most verification codes).
+    const six = text.match(/(?<![0-9])([0-9]{6})(?![0-9])/);
+    if (six?.[1] !== undefined)
+        return six[1];
+    return null;
+}
+// True when the page is an email verification-CODE entry gate: a single
+// code-style input (name/id/placeholder/label ~ code/token/otp/verification),
+// NO email/password/tel field still to fill, and verify/code copy in the body.
+// axiom-class passwordless ("Send Code to Email" lands here). Distinct from the
+// no-fields verification WALL: this page HAS an input, but it's a CODE field,
+// so the form-fill planner would otherwise type an empty literal into it and
+// loop. The caller returns "submitted" to route to the inbox-poll + code-entry
+// path (the code was emailed to our alias). Exported for unit testing.
+export function isVerificationCodeGate(inventory, pageText) {
+    const inputs = inventory.filter((e) => e.tag === "input" && e.visible !== false);
+    // Any email/password/tel field still present → still a signup form, not a
+    // pure code gate.
+    if (inputs.some((e) => e.type === "email" || e.type === "password" || e.type === "tel")) {
+        return false;
+    }
+    const codeRe = /\b(?:code|token|otp|verification|verify|one[\s-]?time|2fa|mfa)\b/i;
+    const hasCodeInput = inputs.some((e) => {
+        const hay = `${e.name ?? ""} ${e.id ?? ""} ${e.placeholder ?? ""} ${e.ariaLabel ?? ""} ${e.labelText ?? ""}`;
+        return codeRe.test(hay);
+    });
+    if (!hasCodeInput)
+        return false;
+    const t = pageText.toLowerCase();
+    return /verification code|enter (?:the |your )?code|code is required|verify and continue|we (?:sent|emailed)|check your email|one[\s-]?time (?:code|password)|sign[\s-]?in code/.test(t);
+}
 // Discriminates LLMPair from LLMClient. LLMPair has `primary` (an
 // LLMClient); LLMClient has `createMessage`. They're mutually exclusive
 // shapes so a structural check is reliable.
@@ -3383,6 +3477,19 @@ export class SignupAgent {
                     return { kind: "submitted" };
                 }
             }
+            // Email verification-CODE gate (axiom-class passwordless). The no-fields
+            // wall above misses it because this page HAS an input — but it's a CODE
+            // field, not email/password, and the code was emailed to our alias.
+            // Return "submitted" so the post-submit inbox-poll + code-entry path
+            // (extractCodeFromEmailBody → enterEmailVerificationCode) handles it,
+            // instead of the planner typing an empty literal into the code field and
+            // looping. Gated on committedToEmailPath — a code gate only appears after
+            // the email was submitted.
+            if (committedToEmailPath && isVerificationCodeGate(inventory, state.html)) {
+                this.pendingVerificationAlias = this.pendingVerificationAlias ?? task.email;
+                steps.push("Form: email verification-CODE gate detected — routing to the inbox-poll + code-entry flow.");
+                return { kind: "submitted" };
+            }
             // OAuth-first (T6/T13 + auto-prefer): when the page carries a
             // "Sign in with <provider>" affordance for a provider the bot can
             // use, that button unconditionally outranks any form field — hand
@@ -4829,7 +4936,17 @@ export class SignupAgent {
                                 credentials = await this.enterEmailVerificationCode(email.parsed_codes[0] ?? "", task, password, steps);
                             }
                             else {
-                                steps.push("Email had no usable verification link.");
+                                // No link and the inbox parser found no code — last-resort
+                                // scan the email body ourselves for a verification code
+                                // (passwordless "we emailed you a code" flow, e.g. axiom).
+                                const bodyCode = extractCodeFromEmailBody(email);
+                                if (bodyCode !== null) {
+                                    steps.push(`Email had no link but carried a verification code (…${bodyCode.slice(-2)}) — entering it.`);
+                                    credentials = await this.enterEmailVerificationCode(bodyCode, task, password, steps);
+                                }
+                                else {
+                                    steps.push("Email had no usable verification link or code.");
+                                }
                             }
                         }
                         else if (email.parsed_codes.length > 0) {
@@ -4980,6 +5097,21 @@ export class SignupAgent {
             steps.push(`OAuth: Google Identity Services / FedCM widget — resolved via ${gsi.via}` +
                 (gsi.ok ? "" : " (no FedCM dialog or popup appeared — the widget may need a different trigger)"));
         }
+        // OmniAuth POST-only recovery prep. Capture the affordance's href + the
+        // page's CSRF token NOW, while we're still on the signin page — the
+        // "Authentication passthru" page a GET-click lands on is bare (no token).
+        // See the typesense root-cause (2026-06-07): Rails/OmniAuth 2.0 is
+        // POST-only; the GitHub button is a GET <a href="/users/auth/github">
+        // upgraded to POST by page JS, and the bot's GET-click hit the passthru.
+        const omniauthHref = typeof this.browser.getElementAttribute === "function"
+            ? await this.browser
+                .getElementAttribute(oauthSelector, "href")
+                .catch(() => null)
+            : null;
+        const omniauthToken = typeof this.browser.getMetaCsrfToken === "function"
+            ? await this.browser.getMetaCsrfToken().catch(() => null)
+            : null;
+        let omniauthPostTried = false;
         if (!gsiHandled) {
             await this.browser.startOAuth(oauthSelector);
         }
@@ -5026,8 +5158,37 @@ export class SignupAgent {
             }
             const authState = provider.classifyAuthState(url, body);
             steps.push(`OAuth: ${provider.label} auth state = ${authState} (url=${url.slice(0, 120)})`);
-            if (authState === "not_provider")
+            if (authState === "not_provider") {
+                // OmniAuth 2.0 POST-only recovery. The provider button can be a GET
+                // <a href="/.../auth/<provider>"> that page-JS upgrades to a POST; if
+                // the bot's click hit the default GET, Rails/OmniAuth answers
+                // "Not found. Authentication passthru." and OAuth never started — the
+                // bot then misreads it as "signed in" and bails. Detect that bare
+                // passthru page and re-initiate via POST with the signin page's CSRF
+                // token (proven to 302 to the provider). MEASURED 2026-06-07: typesense.
+                const onOmniAuthPassthru = /authentication passthru|not found/i.test(body) &&
+                    /\/auth\/[a-z0-9_-]+\/?$/i.test(url);
+                if (onOmniAuthPassthru &&
+                    !omniauthPostTried &&
+                    omniauthToken !== null &&
+                    omniauthHref !== null) {
+                    omniauthPostTried = true;
+                    const action = new URL(omniauthHref, url).toString();
+                    steps.push(`OAuth: ${provider.label} endpoint is POST-only (OmniAuth GET passthru) — ` +
+                        `re-initiating via POST with the page CSRF token`);
+                    try {
+                        await this.browser.submitPostForm(action, {
+                            authenticity_token: omniauthToken,
+                        });
+                        await this.browser.wait(3);
+                        continue; // re-read state — should now be on the provider's page
+                    }
+                    catch (err) {
+                        steps.push(`OAuth: OmniAuth POST recovery failed (${err instanceof Error ? err.message : String(err)})`);
+                    }
+                }
                 break; // flow left the provider — back on the service
+            }
             if (authState === "challenge") {
                 // rc.26 — always capture forensic state at the moment the
                 // challenge is detected. Before this, snapshots fired only at
@@ -6175,41 +6336,7 @@ ${formatInventory(input.inventory)}`,
     async extractFromDomProximity() {
         // Vocabulary matches the LABEL_ALIASES used by Phase E so the
         // canonical keys stay consistent across paths.
-        const LABEL_TO_KEY = {
-            "api key": "api_key",
-            "api token": "api_key",
-            "api secret": "api_secret",
-            "secret key": "secret_key",
-            "publishable key": "publishable_key",
-            "access key": "access_key_id",
-            "access key id": "access_key_id",
-            "access token": "access_token",
-            "bearer token": "access_token",
-            "personal access token": "access_token",
-            "auth token": "auth_token",
-            "client id": "client_id",
-            "client secret": "client_secret",
-            "client key": "client_id",
-            "cloud name": "cloud_name",
-            "cloudname": "cloud_name",
-            "application id": "application_id",
-            "app id": "application_id",
-            "admin api key": "admin_api_key",
-            "search api key": "search_api_key",
-            "search-only api key": "search_api_key",
-            "monitoring api key": "monitoring_api_key",
-            "account sid": "account_sid",
-            "secret access key": "secret_access_key",
-            "consumer key": "consumer_key",
-            "consumer secret": "consumer_secret",
-            "access token secret": "access_token_secret",
-            "project api key": "project_api_key",
-            "personal api key": "personal_api_key",
-            "organization id": "org_id",
-            "org id": "org_id",
-            "app key": "app_key",
-            "app secret": "app_secret",
-        };
+        const LABEL_TO_KEY = DOM_LABEL_TO_KEY;
         let labeled = [];
         try {
             labeled = await this.browser.extractLabeledCredentialCandidates();
@@ -6236,6 +6363,30 @@ ${formatInventory(input.inventory)}`,
         }
         return out;
     }
+    // Count the DISTINCT credentials the current page PRESENTS — masked
+    // ones included. This detects a multi-cred page BEFORE every value is
+    // captured, so the post-verify loop can stay open to harvest the 2nd/
+    // 3rd key instead of exiting the moment the first surfaces ("stops at
+    // one"). Uses the DOM-proximity harvester's labels (which fire even on
+    // masked/bullet'd values) mapped to canonical keys; values are NOT read
+    // here, only the label set. Best-effort → 0 on any browser error.
+    async countPresentedCredentialLabels() {
+        try {
+            const cands = await this.browser.extractLabeledCredentialCandidates();
+            const canon = new Set();
+            for (const c of cands) {
+                if (c.label === null)
+                    continue;
+                const key = DOM_LABEL_TO_KEY[c.label];
+                if (key !== undefined)
+                    canon.add(key);
+            }
+            return canon.size;
+        }
+        catch {
+            return 0;
+        }
+    }
     // Run every visible-credential extraction tier the post-verify loop
     // uses (legacy regex/clipboard/hidden-input + DOM-proximity labeled),
     // merging first-wins into a single bundle. Used by attemptMintNewKey
@@ -6527,6 +6678,16 @@ ${formatInventory(input.inventory)}`,
         // and inject a forced "no-progress" hint on the second repeat.
         let prevSignature = null;
         let prevInventorySize = -1;
+        // Selectors the planner has CLICKED while the inventory count has held
+        // steady. A multi-step onboarding wizard (axiom: role → company-size →
+        // plan) advances by clicking distinct radio-style cards that flip an
+        // aria-checked but add/remove no elements, so inventory.length never
+        // moves — and the kind-level stuck detector below would false-positive
+        // on the 2nd DISTINCT selection. We exempt a brand-new selector (wizard
+        // progress) and only call it stuck once a selector REPEATS (the Railway
+        // Create→Focus→Create cycle). Reset whenever the inventory count changes
+        // (genuine page mutation → fresh wizard step / new page).
+        let clickSelectorsSinceInventoryChange = new Set();
         // rc.39 — wait-loop tracker. Turso's GitHub OAuth handshake
         // succeeds, then the SSO-callback page stays empty (0 elements)
         // while a Cloudflare verification widget runs that never clears
@@ -6573,6 +6734,13 @@ ${formatInventory(input.inventory)}`,
         let stuckFiresAtUrl = 0;
         let lastStuckFireUrl = null;
         const triedFallbackUrls = new Set();
+        // Premature-done guard budget. When the planner gives up (`done`)
+        // with zero credentials captured, we navigate to an unvisited
+        // canonical keys URL and re-plan — bounded so a service that
+        // genuinely has no self-serve key doesn't burn the whole run budget
+        // walking every fallback path.
+        let prematureDoneFallbacks = 0;
+        const MAX_PREMATURE_DONE_FALLBACKS = 3;
         // Dead-URL memory. The planner guesses credential-page URLs
         // (e.g. /user/personal_access_tokens/new) that 404; without memory it
         // re-guesses the same dead URL round after round — xata and fly each
@@ -6617,6 +6785,15 @@ ${formatInventory(input.inventory)}`,
         // surveyed the labeled credentials surface.
         const seedHadCredential = credentials.api_key !== undefined || credentials.username !== undefined;
         let plannerExtractEmitted = false;
+        // 2026-06-07 — "stops at one" fix. The legacy loop-exit treated a run
+        // as single-cred based on what was ALREADY captured (isMultiCredBundle),
+        // so a page with 3 credentials whose 1st surfaced first — siblings still
+        // masked or missed on the first harvest pass — exited before the rest
+        // were caught. Set once the page is observed to PRESENT >=2 distinct
+        // credentials (masked included); the loop-exit then holds open (bounded
+        // by roundsSinceLastNewCredential) so the reveal pass + DOM harvest get
+        // more rounds to capture the siblings.
+        let pageOffersMultiCred = false;
         // Gate URLs we've already polled the operator's gmail for, so a
         // multi-round wait on the same email-OTP page doesn't re-poll.
         const otpPolledUrls = new Set();
@@ -6641,7 +6818,7 @@ ${formatInventory(input.inventory)}`,
             // when the api_key came from the pre-loop seed and the
             // planner hasn't yet emitted an explicit extract step. In
             // that case we let the planner run until extract fires.
-            const inMultiCredMode = isMultiCredBundle(credentials);
+            const inMultiCredMode = isMultiCredBundle(credentials) || pageOffersMultiCred;
             const haveOnlySeedCredentials = seedHadCredential && !plannerExtractEmitted;
             if (!inMultiCredMode &&
                 (credentials.api_key !== undefined || credentials.username !== undefined) &&
@@ -6680,6 +6857,24 @@ ${formatInventory(input.inventory)}`,
             // widened (the "API Keys"/"Settings" links must survive ranking).
             // Reading state can still race a navigation — a transient throw
             // burns the round rather than crashing the whole run.
+            // Dismiss any cookie/consent banner BEFORE reading the page or
+            // planning a click. A consent overlay (Google "Accept all", GDPR
+            // banners) intercepts pointer events, so the planner's clicks land
+            // on the banner instead of the dashboard and the loop stalls / loops /
+            // times out. MEASURED 2026-06-07: meilisearch reached /settings/keys
+            // but sat behind an Accept-All overlay and ran out the 600s clock.
+            // The form-fill loop already dismisses banners every round; the
+            // post-verify loop never did. Best-effort — a dismiss failure must
+            // not burn the round.
+            try {
+                const dismissed = await this.browser.dismissConsentBanner();
+                if (dismissed !== null) {
+                    args.steps.push(`Post-verify round ${round}: dismissed consent banner ("${dismissed}")`);
+                }
+            }
+            catch {
+                // best-effort
+            }
             let state;
             let inventory;
             try {
@@ -7046,6 +7241,13 @@ ${formatInventory(input.inventory)}`,
             // the same selector AND the inventory size matches the prior
             // round's — strong evidence the previous step did nothing.
             const repeatableKinds = new Set(["click", "fill", "select", "check", "scroll"]);
+            // An inventory-count change means the page genuinely mutated — a fresh
+            // wizard step or a new page. Reset the per-stable-run click-selector
+            // memory so distinct clicks on the NEW state aren't judged against the
+            // old one.
+            if (inventory.length !== prevInventorySize) {
+                clickSelectorsSinceInventoryChange = new Set();
+            }
             if (repeatableKinds.has(nextStep.kind)) {
                 const sel = "selector" in nextStep ? (nextStep.selector ?? "<none>") : "<none>";
                 const signature = `${nextStep.kind}|${sel}`;
@@ -7056,10 +7258,21 @@ ${formatInventory(input.inventory)}`,
                 // (planner cycles through Create, Focus-input, Create again,
                 // …). When that happens, force a non-click action.
                 const sameSelector = signature === prevSignature && inventory.length === prevInventorySize;
+                // A brand-new click selector (never clicked since the inventory last
+                // changed) is wizard PROGRESS, not a cycle — selecting role, then
+                // company-size, then a plan flips aria-checked without moving the
+                // element count (axiom). Only treat repeated clicks as stuck: the
+                // selector has already been clicked in this stable-inventory run.
+                const clickSelectorIsRepeat = nextStep.kind === "click" &&
+                    clickSelectorsSinceInventoryChange.has(sel);
                 const stuckOnKind = nextStep.kind === "click" &&
                     prevSignature !== null &&
                     prevSignature.startsWith("click|") &&
-                    inventory.length === prevInventorySize;
+                    inventory.length === prevInventorySize &&
+                    clickSelectorIsRepeat;
+                if (nextStep.kind === "click") {
+                    clickSelectorsSinceInventoryChange.add(sel);
+                }
                 if (sameSelector || stuckOnKind) {
                     const emptyInputs = inventory
                         .filter((e) => (e.tag === "input" || e.tag === "textarea") &&
@@ -7138,8 +7351,16 @@ ${formatInventory(input.inventory)}`,
                     // Mistral's TOS, GitHub-app sign-up, many onboarding forms
                     // gate submit on a checkbox that isn't yet ticked.
                     const uncheckedBoxes = inventory
-                        .filter((e) => e.tag === "input" &&
-                        e.type === "checkbox" &&
+                        .filter((e) => 
+                    // Native <input type=checkbox> OR a custom ARIA checkbox
+                    // (<button role="checkbox">, <div role="checkbox">). The
+                    // input-only filter missed meilisearch's required agreement,
+                    // which renders as <button role="checkbox"> — so the planner
+                    // was never told to tick it and "Next" stayed disabled. The
+                    // check() executor already handles role=checkbox (it clicks +
+                    // verifies aria-checked).
+                    ((e.tag === "input" && e.type === "checkbox") ||
+                        e.role === "checkbox") &&
                         // We can't read the actual `checked` from the inventory
                         // shape, but interactedThisRun is set after a successful
                         // `check` step. Show checkboxes the bot hasn't touched.
@@ -7323,6 +7544,34 @@ ${formatInventory(input.inventory)}`,
                     // read see the post-challenge dashboard.
                     continue;
                 }
+                // Premature-done guard. The planner sometimes concludes "nothing
+                // to extract" on an authenticated dashboard whose API keys live on
+                // a settings/API-keys page it never visited — render's case: an
+                // empty SERVICES list ("no services created yet") is NOT the same
+                // as "no API keys", which sit under Account Settings. Before
+                // accepting `done` with zero credentials captured, navigate to an
+                // unvisited canonical keys URL (same fallback list the stuck-loop
+                // escalation uses). Bounded by triedFallbackUrls — once every
+                // candidate is exhausted, `done` is honored.
+                const capturedCredCount = Object.keys(credentials).filter((k) => !NON_CREDENTIAL_KEYS.has(k)).length;
+                if (capturedCredCount === 0 && prematureDoneFallbacks < MAX_PREMATURE_DONE_FALLBACKS) {
+                    const fallback = pickStuckLoopFallbackUrl(state.url, triedFallbackUrls, args.service);
+                    if (fallback !== null) {
+                        prematureDoneFallbacks += 1;
+                        triedFallbackUrls.add(fallback);
+                        args.steps.push(`Post-verify: planner emitted done with no credential captured — ` +
+                            `navigating to an unvisited API-keys URL before giving up: ${fallback}`);
+                        try {
+                            await this.browser.goto(fallback);
+                            await this.browser.waitForInteractiveDom(5, 15_000);
+                        }
+                        catch (err) {
+                            args.steps.push(`Post-verify: premature-done fallback navigate failed (${err instanceof Error ? err.message : String(err)}) — continuing.`);
+                        }
+                        hint = undefined;
+                        continue;
+                    }
+                }
                 this.lastPostVerifyDoneReason = nextStep.reason;
                 break;
             }
@@ -7452,6 +7701,18 @@ ${formatInventory(input.inventory)}`,
                         // best-effort; never abort an extract pass on DOM-proximity
                         // failure (page mid-navigation etc).
                     }
+                    // "Stops at one" guard: does THIS page present >=2 distinct
+                    // credentials (masked included)? If so, hold the loop open past
+                    // the first key so the reveal pass + DOM harvest get more rounds
+                    // to capture the siblings — even when only one value is in hand
+                    // right now. Bounded downstream by roundsSinceLastNewCredential.
+                    if (!pageOffersMultiCred) {
+                        const presented = await this.countPresentedCredentialLabels();
+                        if (presented >= 2) {
+                            pageOffersMultiCred = true;
+                            args.steps.push(`Post-verify ${round + 1}/${args.maxRounds}: page presents ${presented} distinct credentials — holding the loop open to harvest all (not just the first).`);
+                        }
+                    }
                     // Anything found across all tiers? hasMultiCredCredentials
                     // also catches non-api_key labels (cloud_name, application_id).
                     if (hasAnyExtractedCredential(credentials)) {