@trusty-squire/mcp 1.0.0 → 1.0.1-rc.1

package/dist/bot/oauth-detect.js

@@ -0,0 +1,329 @@
+// oauth-detect.ts — browser-free inventory predicates for the OAuth-first
+// signup path: find a "Sign in with <provider>" affordance, and decide whether
+// a page is already an authenticated (post-login) surface. Carved out of
+// agent.ts (the retired universal-bot monolith); skill replay uses these to
+// route between OAuth, form-fill, and key-extraction.
+import { OAUTH_PROVIDERS } from "./oauth-providers.js";
+export function detectAlreadySignedIn(args) {
+    const { inventory, url } = args;
+    // Precondition: any visible credential input → not authenticated.
+    const hasCredentialInput = inventory.some((e) => e.tag === "input" &&
+        (e.type === "email" || e.type === "password" || e.type === "tel"));
+    if (hasCredentialInput)
+        return false;
+    // Signal 0 — a strong post-login URL path. An onboarding /
+    // getting-started / welcome route is only reachable AFTER you're
+    // authenticated (you cannot see a "you're all set, next steps" wizard
+    // without a session), so the URL alone is conclusive here — unlike the
+    // weaker dashboard paths in Signal 3, no paired creation-CTA is needed.
+    // last9 lands the bot on /v2/organizations/<slug>/getting-started with
+    // its Google session already active; its buttons ("Choose your region",
+    // "You're all set! Next steps", "Upgrade Plan") matched none of the CTA
+    // vocabularies below, so it used to bail `oauth_required` — claiming
+    // "only OAuth/SSO signup, no email/password form" while the bot was in
+    // fact fully signed in. The precondition above already ruled out a
+    // signup chooser (no credential input).
+    // ...UNLESS the page still presents a signup/OAuth chooser (a
+    // "Continue with Google" button or a bare "Sign up"/"Log in"). Some
+    // services route the login chooser through an /onboarding-style URL; if
+    // a provider button is visible, the bot must OAuth via it, not treat the
+    // page as already-authenticated. (PostHog TS-1923.)
+    const hasSignupAffordance = inventory.some((e) => {
+        const t = `${e.visibleText ?? ""} ${e.ariaLabel ?? ""}`
+            .toLowerCase()
+            .replace(/\s+/g, " ")
+            .trim();
+        return (/\b(?:continue with|sign ?up with|sign ?in with|log ?in with|with (?:google|github|gitlab|microsoft|apple))\b/.test(t) || /^(?:sign ?up|sign ?in|log ?in|create (?:an )?account)$/.test(t));
+    });
+    const visibleTextOf = (e) => `${e.visibleText ?? ""} ${e.ariaLabel ?? ""}`.trim();
+    const RESOURCE_CREATION_CTA = /^\s*(?:\+\s*)?(?:new\s+(?:project|workspace|team|app|site|deployment|api\s*key|database|cluster|instance|service|index|environment)|create(?:\s+(?:new|a|an|project|workspace|database|cluster|instance|deployment|app|service|index|environment))?|get\s+started\s+by\s+sett?ing\s+up\s+(?:a|an)?\s*.*\b(?:project|workspace|app|application|service|database|cluster|index)\b|sett?ing\s+up\s+(?:a|an)?\s*.*\b(?:project|workspace|app|application|service|database|cluster|index)\b)/i;
+    const hasResourceCreationCta = inventory.some((e) => RESOURCE_CREATION_CTA.test(visibleTextOf(e)));
+    const ONBOARDING_CHROME = /\b(?:set up your first|create your project|get started by sett?ing up|welcome to|import documents|make a search|don'?t show me again|bring me home|setup checklist|onboarding)\b/i;
+    const hasOnboardingChrome = inventory.some((e) => ONBOARDING_CHROME.test(visibleTextOf(e)));
+    if (!hasSignupAffordance && hasResourceCreationCta && hasOnboardingChrome) {
+        return true;
+    }
+    try {
+        if (!hasSignupAffordance &&
+            /\/(?:getting-started|get-started|onboarding|welcome)(?:\/|$)/i.test(new URL(url).pathname)) {
+            return true;
+        }
+    }
+    catch {
+        // malformed URL — fall through to the other signals
+    }
+    // Signal 1 — strict nav-keyword match (the canonical Sentry-class case).
+    // STRONG markers (sign out / log out) PROVE a session — you can't sign out if
+    // you're not signed in — so they fire even next to a decoration "Continue with
+    // Google" (account-linking) button. WEAK markers (dashboard / projects /
+    // settings / …) are ordinary nav labels that ALSO appear on a logged-out
+    // marketing or /login page, so they must NOT override a visible auth gate:
+    // gate them on !hasSignupAffordance. Without this split, northflank's /login
+    // (which renders "Continue with Google" alongside "Projects"/"Settings") was
+    // mis-read as signed-in → the replay skipped click_oauth_button → the fresh
+    // robot never logged in and bailed needs_login deep in the flow (MEASURED
+    // 2026-06-24).
+    const STRONG_AUTH_KEYWORDS = /^\s*(?:sign out|log out)\s*$/i;
+    const WEAK_AUTH_KEYWORDS = /^\s*(?:dashboard|projects|settings|profile|my account|account settings|workspaces)\s*$/i;
+    const textOf = (e) => (e.visibleText ?? e.ariaLabel ?? "").trim();
+    if (inventory.some((e) => STRONG_AUTH_KEYWORDS.test(textOf(e)))) {
+        return true;
+    }
+    if (!hasSignupAffordance && inventory.some((e) => WEAK_AUTH_KEYWORDS.test(textOf(e)))) {
+        return true;
+    }
+    // Signal 2 — billing / trial widget. Patterns observed in the wild:
+    //   "28 days or $5.00 leftTrial" (Railway, no separator)
+    //   "Trial" (most SaaS)
+    //   "$N left" / "N days left" / "remaining"
+    const BILLING = /(?:\$\d+(?:\.\d+)?\s*(?:left|remaining)|\d+\s*days?\s*(?:left|remaining|trial)|\btrial\b)/i;
+    if (!hasSignupAffordance &&
+        inventory.some((e) => BILLING.test(visibleTextOf(e)))) {
+        return true;
+    }
+    // Signal 3 — dashboard-route URL + creation CTA visible.
+    // The URL gate is conservative: a path that READS as dashboard,
+    // not /login or /signup or /. Combined with a creation CTA
+    // ("New project", "Create workspace", "+ New") it pins the
+    // page as a post-login surface.
+    let dashboardyPath = false;
+    try {
+        const parsed = new URL(url);
+        // rc.37 — widened the dashboard-path allowlist after the rc.35
+        // sweep showed Upstash's post-OAuth landing was /redis (the
+        // product-segment route, not a generic /dashboard). Added
+        // /redis, /kafka, /vector, /cluster, /databases?, /instances?,
+        // /apps?, /deployments?, /services? — all common product-name
+        // routes that almost always indicate authenticated state.
+        // An /organizations/<…> or /orgs/<…> prefix is an authenticated-only
+        // marker: a logged-OUT visitor never has an organization-scoped route.
+        // pinecone's post-OAuth plan-chooser sits at
+        // app.pinecone.io/organizations/registration — the trailing
+        // "registration" tripped the register-exclusion below and the bot, fully
+        // signed in via the operator's existing Google-linked account, bailed
+        // no_signup_link instead of routing to key-extraction (MEASURED
+        // 2026-06-11: pinecone account was created May 25, so every later run
+        // lands here authenticated). An org-prefixed path forces dashboardy and
+        // bypasses the auth-route exclusion.
+        const hasOrgPrefix = /\/(?:organizations?|orgs?)\//i.test(parsed.pathname);
+        dashboardyPath =
+            hasOrgPrefix ||
+                (/\/(?:new|dashboard|projects?|account|settings|workspace|home|admin|redis|kafka|vector|cluster|databases?|instances?|apps?|deployments?|services?|onboarding|welcome|getting-started|get-started|setup)(?:\/|$)/i.test(parsed.pathname) && !/\/(?:signup|sign-up|register|login|sign-in|signin)/i.test(parsed.pathname));
+    }
+    catch {
+        // Malformed URL — skip URL signal.
+    }
+    if (dashboardyPath) {
+        // rc.37 — widened the creation-CTA vocabulary to include the
+        // dashboard-y "Create <product-noun>" pattern. Upstash's
+        // dashboard CTA reads "Create Database"; Convex / Neon /
+        // PlanetScale / similar all use this shape ("Create cluster",
+        // "Create instance", "Create deployment"). Without this the
+        // bot's F17 already-signed-in path fell through to form-fill
+        // and the planner clicked the CTA thinking it was a signup
+        // submit button.
+        if (inventory.some((e) => {
+            const t = e.visibleText ?? e.ariaLabel ?? "";
+            return RESOURCE_CREATION_CTA.test(t.trim());
+        })) {
+            return true;
+        }
+        // 0.8.2-rc.5 — PostHog-class onboarding wizard. When the URL is
+        // dashboard-y (path like /project/<id>/onboarding) and the page
+        // shows project-picker / account-menu / onboarding-skip
+        // affordances WITHOUT a credential input or OAuth provider button,
+        // the user is authenticated and the wizard is interstitial. The
+        // rc.3 overnight run for posthog landed exactly here and bailed
+        // `oauth_required` because the inventory had only:
+        //   - "Default project" (project picker)
+        //   - "BBento" (account avatar toggle)
+        //   - "Hand off setup" (skip-onboarding affordance)
+        //
+        // Detect this shape via a second-tier signal set. Conservative —
+        // we already gated on "no credential inputs" and "dashboardyPath",
+        // so a true signup chooser (which has neither of those AND the
+        // path is /signup or /login) cannot reach this branch.
+        const POST_AUTH_AFFORDANCE = /^\s*(?:hand\s*off\s*setup|skip\s*(?:onboarding|setup|for\s*now)|invite\s*(?:teammates|members|your\s*team)|set\s*up\s*billing|finish\s*setup|get\s*started|continue\s*to\s*(?:dashboard|app|console))\s*$/i;
+        // Workspace / project / org picker shape. We pattern-match
+        // generously because PostHog's reads "Default project" but other
+        // SaaS dashboards read "My workspace" / "Acme org" / similar. The
+        // structural cue is "button with one of the workspace-noun words"
+        // — see TS-1923 (PostHog rc.3 regression).
+        const WORKSPACE_PICKER = /\b(?:workspace|workspaces|project(?:s)?|organization|organizations|team(?:s)?)\b/i;
+        const hasPostAuthAffordance = inventory.some((e) => POST_AUTH_AFFORDANCE.test((e.visibleText ?? e.ariaLabel ?? "").trim()));
+        if (hasPostAuthAffordance) {
+            // Single signal — the skip-onboarding / handoff verb is strong
+            // enough on its own. No login page ever offers "Hand off setup".
+            return true;
+        }
+        // Weaker pair: a workspace-picker shape AND the page lacks a
+        // primary call-to-action that reads as signup ("Continue with
+        // Google", "Sign up", etc.). Used as a backstop for SPA dashboards
+        // whose only visible buttons are picker toggles.
+        const hasWorkspacePicker = inventory.some((e) => WORKSPACE_PICKER.test((e.visibleText ?? e.ariaLabel ?? "").trim()));
+        const hasSignupOrOAuthAffordance = inventory.some((e) => {
+            const t = (e.visibleText ?? e.ariaLabel ?? "").trim();
+            return /\b(?:sign[\s-]*up|signup|continue\s+with|log\s+in\s+with|sign\s+in\s+with)\b/i.test(t);
+        });
+        if (hasWorkspacePicker && !hasSignupOrOAuthAffordance) {
+            return true;
+        }
+        // 0.8.3-rc.1 — onboarding-wizard step shape. When the URL clearly
+        // names an onboarding path (/onboarding, /welcome, /getting-started,
+        // /setup) AND the page has a Next/Continue/Skip/Submit button AND
+        // does NOT have any credential input (caught above) AND does NOT
+        // have a Sign-up/Continue-with affordance (i.e. it's not a CHOICE
+        // between login and signup), the page is mid-onboarding for an
+        // already-authenticated user. Mixpanel hits this when a previous
+        // run created the account but didn't finish the multi-step
+        // onboarding — the bot returns and lands directly on /onboarding.
+        let onboardingPath = false;
+        try {
+            onboardingPath =
+                /\/(?:onboarding|welcome|getting-started|get-started|setup)(?:\/|$)/i.test(new URL(url).pathname);
+        }
+        catch {
+            // Malformed URL — skip
+        }
+        if (onboardingPath && !hasSignupOrOAuthAffordance) {
+            const WIZARD_STEP_BTN = /^\s*(?:next|continue|submit|skip(?:\s+for\s+now)?|finish|done)\s*$/i;
+            const hasWizardStepButton = inventory.some((e) => {
+                const t = (e.visibleText ?? e.ariaLabel ?? "").trim();
+                return WIZARD_STEP_BTN.test(t);
+            });
+            if (hasWizardStepButton)
+                return true;
+        }
+    }
+    return false;
+}
+// rc.12 — sanity-cap the element's own visible text. A real sign-in
+// button is short ("Continue with Google" = 19 chars, "Sign in with
+// GitHub" = 19). When the element's visibleText runs longer than the
+// cap below, it is wrapping unrelated content — typically a marketing
+// card with a small provider logo nested inside. The OpenRouter case:
+// an <a> wrapping a model card whose textContent reads "anthropic/
+// claude-opus-4.7Model routing visualization…" and whose descendant
+// tree contains an <img alt="Google"> for a tiny G icon. The iconLabel
+// path then fired against the wrong element. Capping at 60 chars also
+// gates path 2 to truly icon-only elements (no own visible text) so a
+// card wrapper with one stray <img alt> can never match.
+const MAX_OAUTH_BUTTON_TEXT_CHARS = 60;
+function normalizeOAuthButtonText(text, keyword) {
+    return text.replace(new RegExp(`(${keyword})(?=[A-Z])`, "gi"), "$1 ");
+}
+// Find a "Sign in with <provider>" affordance in the page inventory —
+// the entry point for the OAuth-first path (T6/T13). Three signals, in
+// confidence order — derived from a live sweep where the text-only
+// heuristic missed real buttons:
+//   1. href — an <a> whose link routes through the provider's OAuth
+//      endpoint (/identity/login/google, /auth/github/callback, …).
+//      Unambiguous: a marketing link to policies.google.com does not.
+//   2. iconLabel — an icon-only button with no text at all, named only
+//      by a descendant <img alt="Google"> / <svg><title> (Mistral).
+//   3. text + an auth verb — "Continue with Google", "Sign up with
+//      GitHub". The auth verb is what keeps a bare "Google" nav link
+//      or "Google's Privacy Policy" out.
+// Returns null when the page has no such affordance — the planner then
+// falls back to form-fill.
+export function findOAuthButton(inventory, provider) {
+    const keyword = OAUTH_PROVIDERS[provider].buttonKeyword;
+    const keywordRe = new RegExp(`\\b${keyword}\\b`);
+    const hrefRe = new RegExp(`(?:login|signin|sign-in|auth|oauth|connect|sso)[/_-]*${keyword}` +
+        `|${keyword}[/_-]*(?:login|signin|auth|oauth|connect)`, "i");
+    for (const e of inventory) {
+        const isButtonish = e.tag === "button" ||
+            e.tag === "a" ||
+            e.role === "button" ||
+            e.type === "submit" ||
+            e.type === "button";
+        if (!isButtonish)
+            continue;
+        const visibleText = (e.visibleText ?? "").trim();
+        if (visibleText.length > MAX_OAUTH_BUTTON_TEXT_CHARS)
+            continue;
+        // 1. An <a> whose href routes through the provider's OAuth endpoint.
+        const href = (e.href ?? "").toLowerCase();
+        if (href.length > 0 && hrefRe.test(href))
+            return e;
+        // 2. Icon-only (logo) button — named only by a descendant img/svg.
+        //    Truly-empty visibleText is the clean case. But a logo button whose
+        //    <svg> carries a <title>GitHub</title> LEAKS that title into
+        //    textContent (northflank renders "GitHubGitHub" — doubled, which
+        //    also defeats the \bgithub\b match in path 3), so it isn't strictly
+        //    empty. Treat it as icon-only too WHEN its visible text is nothing
+        //    but the provider name (any number of times): strip every keyword
+        //    occurrence and require no residue. A nav link like "GitHub's
+        //    Privacy Policy" leaves residue and is correctly rejected. The
+        //    iconLabel must still independently name the provider, so a stray
+        //    one-word label can't false-positive.
+        const kw = keyword.toLowerCase();
+        const residue = visibleText
+            .toLowerCase()
+            .split(kw)
+            .join("")
+            .replace(/[\s·|/–-]+/g, "");
+        const isLogoOnly = visibleText.length === 0 || residue.length === 0;
+        if (isLogoOnly && keywordRe.test((e.iconLabel ?? "").toLowerCase())) {
+            return e;
+        }
+        // 3. Visible text / accessible label naming the provider + an
+        //    auth verb. The auth verb requirement rejects nav and policy
+        //    links that merely mention the provider.
+        const text = normalizeOAuthButtonText(`${visibleText} ${e.ariaLabel ?? ""} ${e.labelText ?? ""}`, keyword)
+            .toLowerCase()
+            .replace(/\s+/g, " ")
+            .trim();
+        if (!keywordRe.test(text))
+            continue;
+        // "with <provider>" is the OAuth-button idiom and is accepted
+        // directly — it survives an SVG accessible name glued to the verb.
+        // elevenlabs renders its button text as "GoogleSign up with Google",
+        // which fuses "sign" into "googlesign" so the bare \bsign\b check
+        // misses, but "with google" still matches. (A blanket camelCase split
+        // can't be used to un-glue it — it would mangle the provider name
+        // itself, e.g. "GitHub" → "Git Hub".)
+        const withProviderRe = new RegExp(`\\bwith ${keyword}\\b`);
+        if (/\b(sign|signup|signin|continue|log ?in|connect|auth)\b/.test(text) ||
+            withProviderRe.test(text)) {
+            return e;
+        }
+        // rc.39 — minimal-label OAuth buttons. Some auth UIs render the
+        // provider as a bare keyword button: just "GitHub" or just "Google"
+        // (Turso, several Stytch / Clerk / Auth0 templates). When the
+        // VISIBLE text is essentially nothing but the provider keyword,
+        // accept it — no auth-verb required. The keyword regex already
+        // ensured the provider name is present; the length cap MAX_OAUTH_
+        // BUTTON_TEXT_CHARS (60) ensures it's still buttonish, not a
+        // paragraph that happens to mention the provider.
+        //
+        // 0.8.3-rc.1 — reject minimal-label matches whose href points at
+        // a NON-AUTH path on the provider's domain (most often a project
+        // repo URL like github.com/plausible/analytics in a homepage
+        // footer). Without this gate, plausible's footer "GitHub" link
+        // matched, the bot clicked it, ended up on the analytics repo's
+        // page, and misclassified the README content as a security
+        // challenge — burning the entire OAuth budget on a false alarm.
+        const stripped = visibleText.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+        if (stripped === keyword || stripped === `with ${keyword}`) {
+            // When the element is an <a> with a provider-domain href, require
+            // it to look like an auth route. Repo / docs / marketing links
+            // on the provider's site never start an OAuth flow.
+            if (href.length > 0) {
+                const providerDomain = provider === "github" ? "github.com" : "google.com";
+                if (href.includes(providerDomain)) {
+                    // Accept only if href matches the auth pattern OR points
+                    // at a login/signup/sessions/oauth path.
+                    const looksLikeAuthPath = hrefRe.test(href) ||
+                        /github\.com\/(?:login|signin|sign-in|sessions|oauth\/authorize|apps\/[^/]+\/installations\/new|users\/sign_in)/i.test(href) ||
+                        /accounts\.google\.com\/(?:o\/oauth2|signin)/i.test(href);
+                    if (!looksLikeAuthPath)
+                        continue;
+                }
+            }
+            return e;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=oauth-detect.js.map

package/dist/bot/oauth-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-detect.js","sourceRoot":"","sources":["../../src/bot/oauth-detect.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,+EAA+E;AAC/E,yEAAyE;AACzE,4EAA4E;AAC5E,sDAAsD;AAGtD,OAAO,EAAE,eAAe,EAAwB,MAAM,sBAAsB,CAAC;AAE7E,MAAM,UAAU,qBAAqB,CAAC,IAGrC;IACC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEhC,kEAAkE;IAClE,MAAM,kBAAkB,GAAG,SAAS,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,GAAG,KAAK,OAAO;QACjB,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CACpE,CAAC;IACF,IAAI,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAErC,2DAA2D;IAC3D,iEAAiE;IACjE,sEAAsE;IACtE,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,mEAAmE;IACnE,wCAAwC;IACxC,8DAA8D;IAC9D,oEAAoE;IACpE,wEAAwE;IACxE,yEAAyE;IACzE,oDAAoD;IACpD,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE;aACpD,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE,CAAC;QACV,OAAO,CACL,8GAA8G,CAAC,IAAI,CACjH,CAAC,CACF,IAAI,wDAAwD,CAAC,IAAI,CAAC,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAGH,MAAM,aAAa,GAAG,CAAC,CAAqB,EAAU,EAAE,CACtD,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAEvD,MAAM,qBAAqB,GACzB,0dAA0d,CAAC;IAC7d,MAAM,sBAAsB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAClD,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAC7C,CAAC;IACF,MAAM,iBAAiB,GACrB,mLAAmL,CAAC;IACtL,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,mBAAmB,IAAI,sBAAsB,IAAI,mBAAmB,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,IACE,CAAC,mBAAmB;YACpB,+DAA+D,CAAC,IAAI,CAClE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CACtB,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,+EAA+E;IAC/E,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,eAAe;IACf,MAAM,oBAAoB,GAAG,+BAA+B,CAAC;IAC7D,MAAM,kBAAkB,GACtB,yFAAyF,CAAC;IAC5F,MAAM,MAAM,GAAG,CAAC,CAAqB,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IACpE,yDAAyD;IACzD,wBAAwB;IACxB,4CAA4C;IAC5C,MAAM,OAAO,GACX,4FAA4F,CAAC;IAC/F,IACE,CAAC,mBAAmB;QACpB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,gEAAgE;IAChE,2DAA2D;IAC3D,2DAA2D;IAC3D,gCAAgC;IAChC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,+DAA+D;QAC/D,4DAA4D;QAC5D,0DAA0D;QAC1D,+DAA+D;QAC/D,8DAA8D;QAC9D,0DAA0D;QAC1D,qEAAqE;QACrE,uEAAuE;QACvE,6CAA6C;QAC7C,4DAA4D;QAC5D,yEAAyE;QACzE,sEAAsE;QACtE,gEAAgE;QAChE,sEAAsE;QACtE,wEAAwE;QACxE,qCAAqC;QACrC,MAAM,YAAY,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3E,cAAc;YACZ,YAAY;gBACZ,CAAC,iNAAiN,CAAC,IAAI,CACrN,MAAM,CAAC,QAAQ,CAChB,IAAI,CAAC,qDAAqD,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,6DAA6D;QAC7D,yDAAyD;QACzD,yDAAyD;QACzD,8DAA8D;QAC9D,4DAA4D;QAC5D,6DAA6D;QAC7D,2DAA2D;QAC3D,iBAAiB;QACjB,IACE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACnB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;YAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gEAAgE;QAChE,gEAAgE;QAChE,wDAAwD;QACxD,mEAAmE;QACnE,gEAAgE;QAChE,gEAAgE;QAChE,mDAAmD;QACnD,yCAAyC;QACzC,uCAAuC;QACvC,oDAAoD;QACpD,EAAE;QACF,iEAAiE;QACjE,mEAAmE;QACnE,+DAA+D;QAC/D,uDAAuD;QACvD,MAAM,oBAAoB,GACxB,4MAA4M,CAAC;QAC/M,2DAA2D;QAC3D,iEAAiE;QACjE,kEAAkE;QAClE,kEAAkE;QAClE,2CAA2C;QAC3C,MAAM,gBAAgB,GACpB,mFAAmF,CAAC;QACtF,MAAM,qBAAqB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CACvE,CAAC;QACF,IAAI,qBAAqB,EAAE,CAAC;YAC1B,+DAA+D;YAC/D,iEAAiE;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,6DAA6D;QAC7D,8DAA8D;QAC9D,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CACnE,CAAC;QACF,MAAM,0BAA0B,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO,+EAA+E,CAAC,IAAI,CACzF,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,kBAAkB,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kEAAkE;QAClE,qEAAqE;QACrE,kEAAkE;QAClE,iEAAiE;QACjE,kEAAkE;QAClE,+DAA+D;QAC/D,iEAAiE;QACjE,2DAA2D;QAC3D,kEAAkE;QAClE,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,cAAc;gBACZ,qEAAqE,CAAC,IAAI,CACxE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CACtB,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,IAAI,cAAc,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAClD,MAAM,eAAe,GACnB,qEAAqE,CAAC;YACxE,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,IAAI,mBAAmB;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,oEAAoE;AACpE,qEAAqE;AACrE,sEAAsE;AACtE,sEAAsE;AACtE,mEAAmE;AACnE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,yDAAyD;AACzD,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,SAAS,wBAAwB,CAAC,IAAY,EAAE,OAAe;IAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,OAAO,YAAY,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,sEAAsE;AACtE,uEAAuE;AACvE,mEAAmE;AACnE,iCAAiC;AACjC,oEAAoE;AACpE,oEAAoE;AACpE,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,mEAAmE;AACnE,qEAAqE;AACrE,yCAAyC;AACzC,uEAAuE;AACvE,2BAA2B;AAC3B,MAAM,UAAU,eAAe,CAC7B,SAAwC,EACxC,QAAyB;IAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,wDAAwD,OAAO,EAAE;QAC/D,IAAI,OAAO,2CAA2C,EACxD,GAAG,CACJ,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,WAAW,GACf,CAAC,CAAC,GAAG,KAAK,QAAQ;YAClB,CAAC,CAAC,GAAG,KAAK,GAAG;YACb,CAAC,CAAC,IAAI,KAAK,QAAQ;YACnB,CAAC,CAAC,IAAI,KAAK,QAAQ;YACnB,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;QACtB,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,WAAW,CAAC,MAAM,GAAG,2BAA2B;YAAE,SAAS;QAC/D,qEAAqE;QACrE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QACnD,mEAAmE;QACnE,wEAAwE;QACxE,iEAAiE;QACjE,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,WAAW;aACxB,WAAW,EAAE;aACb,KAAK,CAAC,EAAE,CAAC;aACT,IAAI,CAAC,EAAE,CAAC;aACR,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QACpE,IAAI,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,8DAA8D;QAC9D,iEAAiE;QACjE,6CAA6C;QAC7C,MAAM,IAAI,GAAG,wBAAwB,CACnC,GAAG,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,EAC1D,OAAO,CACR;aACE,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,8DAA8D;QAC9D,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,sEAAsE;QACtE,kEAAkE;QAClE,sCAAsC;QACtC,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,WAAW,OAAO,KAAK,CAAC,CAAC;QAC3D,IACE,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC;YACnE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,gEAAgE;QAChE,oEAAoE;QACpE,8DAA8D;QAC9D,gEAAgE;QAChE,+DAA+D;QAC/D,kEAAkE;QAClE,6DAA6D;QAC7D,kDAAkD;QAClD,EAAE;QACF,iEAAiE;QACjE,iEAAiE;QACjE,6DAA6D;QAC7D,+DAA+D;QAC/D,gEAAgE;QAChE,2DAA2D;QAC3D,gEAAgE;QAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,OAAO,EAAE,EAAE,CAAC;YAC3D,kEAAkE;YAClE,+DAA+D;YAC/D,oDAAoD;YACpD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,cAAc,GAClB,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;gBACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBAClC,yDAAyD;oBACzD,yCAAyC;oBACzC,MAAM,iBAAiB,GACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;wBACjB,iHAAiH,CAAC,IAAI,CACpH,IAAI,CACL;wBACD,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC5D,IAAI,CAAC,iBAAiB;wBAAE,SAAS;gBACnC,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/bot/onboarding-capture.d.ts

@@ -1,5 +1,5 @@
 import type { InteractiveElement } from "./browser.js";
-import type { PostVerifyStep, SignupResult } from "./agent.js";
+import type { PostVerifyStep, SignupResult } from "./provision-types.js";
 import { type FailureStage } from "./failure-stage.js";
 import { type SemanticFailureBucket, type SemanticFaultClass, type SemanticTransitionRecord } from "./semantic-transition.js";
 export declare const CAPTURE_FORMAT_VERSION: 1;

package/dist/bot/onboarding-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-capture.d.ts","sourceRoot":"","sources":["../../src/bot/onboarding-capture.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAKlC,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAwBjD,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIjE;AAWD,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAiBxD;AA+BD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhE;AAMD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAID,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAGzC,QAAQ,EAAE,cAAc,CAAC;IAKzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,wBAAwB,CAAC;CACrC;AAID,MAAM,WAAW,kBAAkB;IACjC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,QAAQ,EAAE,cAAc,CAAC;IAKzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,IAAI,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AA2BD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAUjD;AAkBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAsD1E;AAMD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,wBAAwB,GACjC,IAAI,CAgCN;AAkBD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IAEZ,kBAAkB,EAAE,OAAO,CAAC;IAG5B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAGrC,aAAa,EAAE,YAAY,CAAC;IAI5B,uBAAuB,CAAC,EAAE,qBAAqB,CAAC;IAChD,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAE1C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IAGf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAoBD,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEnE;AAGD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,OAAO,EAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,gBAAgB,CA8BlB;AAMD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAqB7E;AAWD,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAAE,GAC1C;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,eAAe,GACf,WAAW,GACX,aAAa,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,iBAAiB,CA8FnB"}
+{"version":3,"file":"onboarding-capture.d.ts","sourceRoot":"","sources":["../../src/bot/onboarding-capture.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAKlC,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAwBjD,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIjE;AAWD,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAiBxD;AA+BD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhE;AAMD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAID,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAGzC,QAAQ,EAAE,cAAc,CAAC;IAKzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,wBAAwB,CAAC;CACrC;AAID,MAAM,WAAW,kBAAkB;IACjC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,QAAQ,EAAE,cAAc,CAAC;IAKzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,IAAI,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AA2BD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAUjD;AAkBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAsD1E;AAMD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,wBAAwB,GACjC,IAAI,CAgCN;AAkBD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IAEZ,kBAAkB,EAAE,OAAO,CAAC;IAG5B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAGrC,aAAa,EAAE,YAAY,CAAC;IAI5B,uBAAuB,CAAC,EAAE,qBAAqB,CAAC;IAChD,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAE1C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IAGf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAoBD,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEnE;AAGD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,OAAO,EAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,gBAAgB,CA8BlB;AAMD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAqB7E;AAWD,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAAE,GAC1C;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,eAAe,GACf,WAAW,GACX,aAAa,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,iBAAiB,CA8FnB"}

package/dist/bot/operator-recipe.d.ts

@@ -9,20 +9,20 @@ declare const TraceActionSchema: z.ZodObject<{
     direction: z.ZodOptional<z.ZodEnum<["down", "up", "bottom", "top"]>>;
     key: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
-    kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+    kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
     host?: string | undefined;
+    value?: string | undefined;
     key?: string | undefined;
     slot?: string | undefined;
-    value?: string | undefined;
     text_match?: string | undefined;
     url_template?: string | undefined;
     direction?: "top" | "bottom" | "down" | "up" | undefined;
 }, {
-    kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+    kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
     host?: string | undefined;
+    value?: string | undefined;
     key?: string | undefined;
     slot?: string | undefined;
-    value?: string | undefined;
     text_match?: string | undefined;
     url_template?: string | undefined;
     direction?: "top" | "bottom" | "down" | "up" | undefined;
@@ -40,31 +40,31 @@ declare const TraceEntrySchema: z.ZodObject<{
         direction: z.ZodOptional<z.ZodEnum<["down", "up", "bottom", "top"]>>;
         key: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+        kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
         host?: string | undefined;
+        value?: string | undefined;
         key?: string | undefined;
         slot?: string | undefined;
-        value?: string | undefined;
         text_match?: string | undefined;
         url_template?: string | undefined;
         direction?: "top" | "bottom" | "down" | "up" | undefined;
     }, {
-        kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+        kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
         host?: string | undefined;
+        value?: string | undefined;
         key?: string | undefined;
         slot?: string | undefined;
-        value?: string | undefined;
         text_match?: string | undefined;
         url_template?: string | undefined;
         direction?: "top" | "bottom" | "down" | "up" | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
     action: {
-        kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+        kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
         host?: string | undefined;
+        value?: string | undefined;
         key?: string | undefined;
         slot?: string | undefined;
-        value?: string | undefined;
         text_match?: string | undefined;
         url_template?: string | undefined;
         direction?: "top" | "bottom" | "down" | "up" | undefined;
@@ -72,11 +72,11 @@ declare const TraceEntrySchema: z.ZodObject<{
     intent?: string | undefined;
 }, {
     action: {
-        kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+        kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
         host?: string | undefined;
+        value?: string | undefined;
         key?: string | undefined;
         slot?: string | undefined;
-        value?: string | undefined;
         text_match?: string | undefined;
         url_template?: string | undefined;
         direction?: "top" | "bottom" | "down" | "up" | undefined;
@@ -190,31 +190,31 @@ export declare const OperatorRecipeSchema: z.ZodObject<{
             direction: z.ZodOptional<z.ZodEnum<["down", "up", "bottom", "top"]>>;
             key: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
-            kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+            kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
             host?: string | undefined;
+            value?: string | undefined;
             key?: string | undefined;
             slot?: string | undefined;
-            value?: string | undefined;
             text_match?: string | undefined;
             url_template?: string | undefined;
             direction?: "top" | "bottom" | "down" | "up" | undefined;
         }, {
-            kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+            kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
             host?: string | undefined;
+            value?: string | undefined;
             key?: string | undefined;
             slot?: string | undefined;
-            value?: string | undefined;
             text_match?: string | undefined;
             url_template?: string | undefined;
             direction?: "top" | "bottom" | "down" | "up" | undefined;
         }>;
     }, "strict", z.ZodTypeAny, {
         action: {
-            kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+            kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
             host?: string | undefined;
+            value?: string | undefined;
             key?: string | undefined;
             slot?: string | undefined;
-            value?: string | undefined;
             text_match?: string | undefined;
             url_template?: string | undefined;
             direction?: "top" | "bottom" | "down" | "up" | undefined;
@@ -222,11 +222,11 @@ export declare const OperatorRecipeSchema: z.ZodObject<{
         intent?: string | undefined;
     }, {
         action: {
-            kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+            kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
             host?: string | undefined;
+            value?: string | undefined;
             key?: string | undefined;
             slot?: string | undefined;
-            value?: string | undefined;
             text_match?: string | undefined;
             url_template?: string | undefined;
             direction?: "top" | "bottom" | "down" | "up" | undefined;
@@ -301,11 +301,11 @@ export declare const OperatorRecipeSchema: z.ZodObject<{
     name: string;
     trace: {
         action: {
-            kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+            kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
             host?: string | undefined;
+            value?: string | undefined;
             key?: string | undefined;
             slot?: string | undefined;
-            value?: string | undefined;
             text_match?: string | undefined;
             url_template?: string | undefined;
             direction?: "top" | "bottom" | "down" | "up" | undefined;
@@ -337,11 +337,11 @@ export declare const OperatorRecipeSchema: z.ZodObject<{
     name: string;
     trace: {
         action: {
-            kind: "goto" | "click" | "type" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
+            kind: "type" | "goto" | "click" | "extract" | "scroll" | "js_click" | "press" | "oauth_click" | "oauth_settle" | "allow_host" | "type_secret";
             host?: string | undefined;
+            value?: string | undefined;
             key?: string | undefined;
             slot?: string | undefined;
-            value?: string | undefined;
             text_match?: string | undefined;
             url_template?: string | undefined;
             direction?: "top" | "bottom" | "down" | "up" | undefined;

package/dist/bot/promote-to-skill.d.ts

@@ -1,6 +1,6 @@
 import { type Skill, type SkillStep, type SkillStepProvenance } from "@trusty-squire/skill-schema";
 import type { InteractiveElement } from "./browser.js";
-import type { PostVerifyStep } from "./agent.js";
+import type { PostVerifyStep } from "./provision-types.js";
 import { type OnboardingCaseFile } from "./onboarding-capture.js";
 export interface PromoteInput {
     /** Directory containing the `<service>-<run_id>-r*.json` capture files. */

package/dist/bot/promote-to-skill.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promote-to-skill.d.ts","sourceRoot":"","sources":["../../src/bot/promote-to-skill.ts"],"names":[],"mappings":"AAqCA,OAAO,EAIL,KAAK,KAAK,EAEV,KAAK,SAAS,EACd,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAKjC,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,gBAAgB,GAAG,QAAQ,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC5B,gBAAgB,CAAC;AAErB;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,oBAAoB,GAAG,WAAW,GAAG,mBAAmB,CAAC;IAChE,UAAU,EACN,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,eAAe,GACf,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,sBAAsB,GACtB,mBAAmB,GACnB,uBAAuB,GACvB,2BAA2B,GAC3B,kCAAkC,GAClC,gBAAgB,GAQhB,+BAA+B,GAC/B,8BAA8B,GAI9B,yBAAyB,GAIzB,qBAAqB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;CACjD;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAG,CAAU,CAAC;AAI9C,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAiSjE;AAgMD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAQjF;AAmcD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,IAAI,MAAM,CAUrE;AAKD,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,kBAAkB,GACrB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAU7D;AAOD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO7D;AAwBD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAS1D;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAqB7D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAczD;AAuBD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,kBAAkB,EAAE,GACpC,MAAM,CAmBR;AAMD,wBAAgB,YAAY,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAsBlE;AA+dD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,EACtD,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,mBAAmB,GAC9B,SAAS,EAAE,GAAG,IAAI,CAkCpB;AAgGD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAMvE;AA2wBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,MAAM,CAexE"}
+{"version":3,"file":"promote-to-skill.d.ts","sourceRoot":"","sources":["../../src/bot/promote-to-skill.ts"],"names":[],"mappings":"AAqCA,OAAO,EAIL,KAAK,KAAK,EAEV,KAAK,SAAS,EACd,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAKjC,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,gBAAgB,GAAG,QAAQ,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC5B,gBAAgB,CAAC;AAErB;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,oBAAoB,GAAG,WAAW,GAAG,mBAAmB,CAAC;IAChE,UAAU,EACN,iBAAiB,GACjB,eAAe,GACf,oBAAoB,GACpB,eAAe,GACf,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,sBAAsB,GACtB,mBAAmB,GACnB,uBAAuB,GACvB,2BAA2B,GAC3B,kCAAkC,GAClC,gBAAgB,GAQhB,+BAA+B,GAC/B,8BAA8B,GAI9B,yBAAyB,GAIzB,qBAAqB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;CACjD;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAG,CAAU,CAAC;AAI9C,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAiSjE;AAgMD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAQjF;AAqcD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,IAAI,MAAM,CAUrE;AAKD,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,kBAAkB,GACrB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAU7D;AAOD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO7D;AAwBD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAS1D;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAqB7D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAczD;AAuBD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,kBAAkB,EAAE,GACpC,MAAM,CAmBR;AAMD,wBAAgB,YAAY,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAsBlE;AA+dD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,EACtD,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,mBAAmB,GAC9B,SAAS,EAAE,GAAG,IAAI,CAkCpB;AAgGD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAMvE;AA2wBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,MAAM,CAexE"}

package/dist/bot/promote-to-skill.js

@@ -764,11 +764,13 @@ function translateStep(observed, inventory, provenance, roundIndex, roundHtml) {
             // ("API key name", "production-api-key") closes that gap.
             const literal = observed.value;
             const looksGenerated = /^[a-z]{3,15}-[a-z0-9]{4,12}$/.test(literal);
-            // An email value is the run's signup alias — templatize it to
-            // ${EMAIL_ALIAS} so replay fills a FRESH alias (and so the await_-
-            // email_code dispatch + poll target the same inbox). Baking the
-            // literal would replay the original run's email and, for OTP flows,
-            // dispatch the code to an inbox the replay doesn't own.
+            // An email value is the run's signup email — templatize it to the email
+            // slot token so the literal never bakes into a shared skill (privacy: in
+            // the operator model this is the USER's real address) and so each run
+            // fills a fresh value. The token keeps its legacy ${EMAIL_ALIAS} name for
+            // corpus compatibility (validateReplayGraph + published skills key off it);
+            // post-scope-#1 it denotes "the email to fill" (operator-resolved), not a
+            // Squire alias, and there is no autonomous await_email_code poll anymore.
             const looksLikeEmail = /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(literal.trim());
             const matchedInput = inventory.find((e) => e.selector === observed.selector);
             const inputLooksLikeTokenName = matchedInput !== undefined && looksLikeTokenNameInput(matchedInput);