@trusty-squire/mcp 1.1.28 → 1.1.29-rc.2

package/dist/bot/operate-drive.js

@@ -9,20 +9,20 @@
 // facts bag. A search or query field may receive a phrase Jev assigns from the
 // goal's own words or the facts; nothing is composed.
 //
-// Confidence: no gates anywhere, including DONE. Validation of the answer
-// shape stays. The purchase approval is the payment gate. Safety net is
+// Confidence below DRIVE_CONFIDENCE_THRESHOLD hands control back to the
+// operator. Answer-shape validation and purchase approval stay. Safety net is
 // validate_choice, fingerprint-bound consume-once, and three consecutive
 // non-wait actions with no page change (re-snapshot once before a strike).
 import { appendFileSync } from "node:fs";
-import { JevUnavailableError, JevRequestError, askJev, } from "./jev-client.js";
-import { act, awaitVerification, generatePassword, observe, startProvisionSession, TargetStaleError, } from "./provision-session.js";
+import { JevUnavailableError, JevRequestError, JevInvalidResponseError, askJev, } from "./jev-client.js";
+import { act, awaitVerification, observe, startProvisionSession, TargetStaleError, } from "./provision-session.js";
 import { resolveInboxSearch } from "./capture/verification.js";
 import { liveProviderSessionsForSession, sessionForCall } from "./session/lifecycle.js";
 import { compactV2EpochDoc, compactV2RefAllocator, invalidateCompactV2Snapshot, observedThreeDsChallenge, rememberCompactV2SourcePage, } from "./observe/observe.js";
 import { COMPACT_V2_HANDLE_LENGTH, controlLabelV2, isCompactV2Handle, safePageSemanticsV2, safeStageV2, wireRoleToSafeRoleV2, } from "./compact-observation-v2.js";
 import { lastSelectOptions, } from "./session/model.js";
 import { captureFrameSnapshot, driveRowsFromSnapshot, frameDynamicsSignature, mergeSnapshots, snapshotSelectOptions, snapshotToObservation, } from "./drive-snapshot.js";
-import { DriveEvaluateTimeout, evaluateBound } from "./drive-evaluate.js";
+import { evaluateBound } from "./drive-evaluate.js";
 import { DriveRefBridge } from "./drive-ref-bridge.js";
 import { dispatchDriveAct } from "./act/act.js";
 import { frameOriginOf } from "./browser-use-capture.js";
@@ -31,10 +31,9 @@ import { rememberDriveIdentities, resolveIdentityScope } from "./act/identity.js
 import { approvalItemWithNote, readPageCheckoutTexts, resolveDriveApprovalAmount, } from "./checkout-total.js";
 import { attemptOperateCaptchaAutoSolve, captchaAutoSolveHasWork, injectPendingCaptchaToken, } from "./captcha-solve.js";
 import { RES_POLL_INTERVAL_MS, RES_TIMEOUT_MS, hasVisibleCheckboxCaptchaWidget, solveVisibleCaptcha, } from "./captcha.js";
-import { findCredentialTokens, isMaskedDisplay, looksLikeCredentialValue, pickRelaxedNearCopyCredential, } from "./credential-shape.js";
-import { extractApiKeyFromText } from "./credential-text.js";
-import { extractCredentials } from "./capture/capture.js";
-import { DRIVE_FIXED_GO_BACK, DRIVE_FIXED_NONE_OF_THESE, DRIVE_TRAIL_CAP, DRIVE_TRAIL_STORE_CAP, classifyDriveOutcome, composeDrivePageText, feedbackPagePath, goalDoneWhen, goalPhase, goalPhaseAndDoneWhen, isKeyGoal, stripVolatileQuery, truncateDriveTrailText, } from "./drive-feedback.js";
+import { findCredentialTokens, isMaskedDisplay } from "./credential-shape.js";
+import { extractCredentials, storableCredentials } from "./capture/capture.js";
+import { DRIVE_FIXED_GO_BACK, DRIVE_FIXED_NONE_OF_THESE, DRIVE_TRAIL_CAP, DRIVE_TRAIL_STORE_CAP, classifyDriveOutcome, composeDrivePageText, feedbackPagePath, goalDoneWhen, goalPhaseAndDoneWhen, stripVolatileQuery, truncateDriveTrailText, } from "./drive-feedback.js";
 export const DRIVE_CONFIDENCE_THRESHOLD = 0.6;
 export const DRIVE_DEFAULT_MAX_STEPS = 60;
 export const DRIVE_DEFAULT_MAX_SECONDS = 45;
@@ -132,8 +131,8 @@ export const DRIVE_RULES = [
     "If a needed control is covered, act on whatever covers it first.",
     "Prefer controls that match the current page phase implied by the URL and headings.",
     "A disabled submit means a required field is still empty until every fillable is populated. Disable is not a gate.",
-    "If the goal names an API key or token, open the control that leads there before stopping on onboarding or a dashboard.",
-    "The state names the current phase and the exact done_when condition; done_when is the only definition of complete.",
+    "Use the goal's full text to decide what result is required; no goal type is inferred for you.",
+    "The done_when condition includes every stated requirement in the goal.",
     "The trail records what each earlier action actually did. Do not repeat an action whose trail outcome is no_change, not_executed, or bounced_back.",
     "Pick NONE_OF_THESE instead of a low-confidence click when nothing on this page advances the goal.",
     "Pick GO_BACK when the trail shows this page was reached by mistake.",
@@ -405,17 +404,21 @@ export function redactSecretShapedValue(value, sessionId) {
     }
     return value;
 }
-function maskDriveOutput(session, value) {
-    const cardMasked = typeof session.browser.maskOperatorOutput === "function"
+/** Exact-value card mask only. This is all the model (Jev) input carries. */
+function maskCardValues(session, value) {
+    return typeof session.browser.maskOperatorOutput === "function"
         ? session.browser.maskOperatorOutput(value)
         : value;
-    return redactSecretShapedValue(cardMasked, session.id);
+}
+/** Trace files can outlive the session audience, so screen their contents. */
+function maskPersistedDriveTrace(session, value) {
+    return redactSecretShapedValue(maskCardValues(session, value), session.id);
 }
 function appendDriveTrace(session, entry) {
     const path = process.env.DRIVE_TRACE_PATH;
     if (path === undefined || path.length === 0)
         return;
-    appendFileSync(path, `${JSON.stringify(maskDriveOutput(session, entry))}\n`);
+    appendFileSync(path, `${JSON.stringify(maskPersistedDriveTrace(session, entry))}\n`);
 }
 async function nativeSelectSnapshot(session) {
     const page = session.browser.page;
@@ -679,12 +682,12 @@ export function cycleReason(url, repeated = []) {
         return `cycling through ${repeated.join(", ")}`;
     return `cycling through ${pagePathKey(url)}`;
 }
-export function isPendingPageAction(row, goal = "") {
+export function isPendingPageAction(row, _goal = "") {
     if (isRevealOrCopyRow(row) || isCreateEntryRow(row))
         return true;
     if (isSubmitLikeRow(row) && !isProgressSubmitRow(row) && !isOauthChromeRow(row))
         return true;
-    return (goal.length > 0 && rowCarriesGoalNoun(row, goal) && isClickableRow(row) && !isSectionNavRow(row));
+    return false;
 }
 export function pageHasUntriedPendingAction(rows, drive, pageUrl, goal) {
     const failed = new Set(drive.failedActionKeys ?? []);
@@ -773,39 +776,8 @@ export function inferPagePhase(url, headings = []) {
         return "login";
     return "unknown";
 }
-function goalWantsSignup(goal) {
-    if (goal === undefined || goal.length === 0)
-        return false;
-    return /sign\s*up|register|create\s+(?:an?\s+)?account/.test(goal.toLowerCase());
-}
-function goalWantsKey(goal) {
-    if (goal === undefined || goal.length === 0)
-        return false;
-    return /api\s*key|access\s*token|credential/.test(goal.toLowerCase());
-}
-function isCreateAccountRow(row) {
-    const label = readableLabel(row).toLowerCase();
-    return /create\s+(?:an?\s+)?account|sign\s*up|register/.test(label);
-}
-function isLoginRow(row) {
-    const label = readableLabel(row).toLowerCase();
-    return /log\s*in|sign\s*in/.test(label) && !isCreateAccountRow(row);
-}
-function isKeyNavRow(row) {
-    if (isListFilterRow(row))
-        return false;
-    const label = readableLabel(row).toLowerCase();
-    return /api\s*key|access\s*token|create\s+(?:a\s+)?(?:key|token)|credentials?|settings/.test(label);
-}
-function isNavChromeRow(row) {
-    if (isSubmitLikeRow(row) || isFillableRow(row) || isChoiceRow(row) || isConsentRow(row)) {
-        return false;
-    }
-    return row[1] === "l" || row[1] === "link" || row[1] === "tb" || row[1] === "tab";
-}
 export function candidateAimScore(candidate, input) {
     const row = candidate.row;
-    const phase = input.phase ?? inferPagePhase(input.pageUrl ?? "", input.headings ?? []);
     const filledIds = filledFormIds(input.rows, input.filledRefs ?? []);
     const formId = rowFormId(row);
     const occluder = rowOccluder(row);
@@ -828,76 +800,14 @@ export function candidateAimScore(candidate, input) {
     if (failed.has(actionFailureKey(row, input.pageUrl ?? "")) || failed.has(row[0])) {
         score -= 70;
     }
-    if (phase === "signup") {
-        if (isSubmitLikeRow(row) || isFillableRow(row) || isChoiceRow(row))
-            score += 40;
-        if (isOauthChromeRow(row))
-            score -= 40;
-        if (isSearchRow(row) && rowListChoice(row) === undefined)
-            score -= 30;
-        if (isLoginRow(row))
-            score -= 20;
-    }
-    else if (phase === "login") {
-        if (goalWantsSignup(input.goal) && isCreateAccountRow(row))
-            score += 80;
-        else if (isLoginRow(row) || isSubmitLikeRow(row))
-            score += 20;
-        if (isOauthChromeRow(row) && goalWantsSignup(input.goal))
-            score -= 30;
-    }
-    else if (phase === "verify") {
-        if (/verify|confirm|email|inbox|gmail|mail/.test(readableLabel(row).toLowerCase()))
-            score += 50;
-    }
-    else if (phase === "onboarding") {
-        if (isChoiceRow(row) || rowListChoice(row) !== undefined)
-            score += 40;
-        if (isSearchRow(row) && rowListChoice(row) === undefined)
-            score -= 40;
-    }
-    else if (phase === "keys" || (phase === "unknown" && goalWantsKey(input.goal))) {
-        if (isKeyNavRow(row))
-            score += 80;
-    }
-    else if (phase === "checkout") {
-        if (isButtonLikeRow(row) || isPaymentRow(row) || isCvvRow(row))
-            score += 40;
-    }
-    if (isNavChromeRow(row) && (phase === "signup" || phase === "onboarding" || phase === "login")) {
-        score -= 10;
-    }
-    if (isAlreadyHereNav(row, input.pageUrl ?? ""))
-        score -= 80;
-    if (isAppRootOrLogoRow(row, input.pageUrl ?? "") ||
-        isSamePageAnchorRow(row, input.pageUrl ?? "")) {
-        score -= 80;
-    }
-    if (isCreateEntryRow(row) && listedItemRows(input.rows, input.pageUrl ?? "").length > 0) {
-        score -= 50;
-    }
-    if (listedItemRows(input.rows, input.pageUrl ?? "").some((entry) => entry[0] === row[0])) {
-        score += 70;
-    }
-    if (isRevealOrCopyRow(row) && goalWantsKey(input.goal))
-        score += 80;
-    if (isListFilterRow(row) && goalWantsKey(input.goal))
-        score -= 50;
-    if (goalWantsKey(input.goal) &&
-        isEligibleSectionNavRow(row, input.pageUrl ?? "") &&
-        !isAlreadyHereNav(row, input.pageUrl ?? "") &&
-        !rowMatchesGoalSeek(row, input.goal ?? "")) {
-        score += listedItemRows(input.rows, input.pageUrl ?? "").length > 0 ? -20 : 40;
-    }
     return score;
 }
 export function rankDriveCandidates(candidates, input) {
-    const phase = inferPagePhase(input.pageUrl ?? "", input.headings ?? []);
     return candidates
         .map((candidate, index) => ({
         candidate,
         index,
-        score: candidateAimScore(candidate, { ...input, phase }),
+        score: candidateAimScore(candidate, input),
     }))
         .sort((left, right) => right.score - left.score || left.index - right.index)
         .map((entry) => entry.candidate);
@@ -927,16 +837,9 @@ const BUTTON_LIKE_ROLES = new Set(["b", "button"]);
 export function isButtonLikeRow(row) {
     return BUTTON_LIKE_ROLES.has(row[1]);
 }
-/** Whether an offscreen row is still worth offering.
- *
- * Shopify parks "Pay now" below the fold (LIVE #6, top≈1458 in a 720px
- * viewport) and the act path scrolls, so a checkout's buttons stay reachable.
- * The page, not the label, is the test: a label allowlist would drop a
- * localized "Payer maintenant". Off a checkout no offscreen button is offered,
- * so a product page's own "Buy now" stays unclickable.
- */
-export function offscreenRowStaysOffered(row, pageUrl) {
-    return isButtonLikeRow(row) && isCheckoutUrl(pageUrl);
+/** The act path scrolls an offscreen target into view before acting. */
+export function offscreenRowStaysOffered(_row, _pageUrl) {
+    return true;
 }
 /** Whether the drive already asked to pay since the card went in.
  *
@@ -983,7 +886,7 @@ export function pageHasListedWork(rows, typeTextCount, selectCount) {
  * call (a card-fill goal never submits at all).
  */
 function isPaymentSubstituteRow(row) {
-    return isClickableRow(row) && !isFillableRow(row) && !isOffscreenRow(row);
+    return isClickableRow(row) && !isFillableRow(row);
 }
 export function paymentSubmitControlMissing(input) {
     if (!input.includePayment ||
@@ -1016,9 +919,6 @@ function urlPathname(url) {
 export function isCheckoutUrl(url) {
     return /(?:^|\/)(?:checkouts?|payment)(?:\/|$)/.test(urlPathname(url));
 }
-export function goalSeeksKey(goal) {
-    return /api\s*key|access\s*token|credential/.test(goal.toLowerCase());
-}
 export function isListFilterRow(row) {
     const label = readableLabel(row).toLowerCase();
     const chooser = row[1] === "c" ||
@@ -1082,21 +982,6 @@ export function isOffProductNavRow(row, pageUrl) {
         return /\/(?:docs?|documentation|reference|help|blog|guides?)(?:\/|$)/.test(href);
     }
 }
-export function isGoalDestinationRow(row) {
-    if (isListFilterRow(row) ||
-        isContextPickerRow(row) ||
-        isFillableRow(row) ||
-        isConsentRow(row) ||
-        isCodeSampleRow(row)) {
-        return false;
-    }
-    return (row[1] === "l" ||
-        row[1] === "link" ||
-        row[1] === "b" ||
-        row[1] === "button" ||
-        row[1] === "tb" ||
-        row[1] === "tab");
-}
 const SECTION_NAV_SKIP = /home|docs|documentation|logout|sign\s*out|help|pricing|blog|status|privacy|terms/;
 const SECTION_NAV_NOTICE = /more information|reactivat|provide more|complete your|verify your identity/;
 const PAGE_LEVEL_ANSWER = /more information|reactivat|provide more|account (?:is |has been )?(?:suspend|restrict|locked|disabled|on hold)|needs (?:more )?(?:information|attention)|complete (?:your )?(?:profile|verification|account)/i;
@@ -1276,33 +1161,17 @@ export function rowShowsSecretEvidence(row) {
 export function pageShowsRevealedKey(rows, _pageText = "") {
     return rows.some((row) => rowShowsSecretEvidence(row));
 }
-export function driveKeyGoalComplete(evidence) {
-    // Existing keys may stay masked on a list after a newly created key is
-    // shown once. A full captured secret satisfies this goal independently of
-    // those unread older entries.
-    return Object.entries(evidence.credentials).some(([field, value]) => looksLikeCredentialValue(value) ||
-        extractApiKeyFromText(value) === value ||
-        (field === "api_key" && pickRelaxedNearCopyCredential([value]) === value));
-}
-export async function driveKeyEvidence(sessionId) {
-    try {
-        const extracted = await extractCredentials(sessionId);
-        return {
-            credentials: extracted.credentials,
-            maskedRemaining: extracted.masked_remaining ?? [],
-        };
-    }
-    catch {
-        // The completion check must never crash the loop; an unavailable page is
-        // simply "no credential yet", and the loop carries on.
-        return { credentials: {}, maskedRemaining: [] };
-    }
-}
-/** "still masked: a, b" for a stuck reason, or undefined when nothing was. */
-export function maskedRemainingReason(evidence) {
-    return evidence.maskedRemaining.length > 0
-        ? `still masked: ${evidence.maskedRemaining.join(", ")}`
-        : undefined;
+function pageShowsCredentialValue(rows) {
+    if (pageShowsRevealedKey(rows))
+        return true;
+    // A labeled value can be a key even when it has no recognizable prefix or
+    // length. Shape is never the criterion for capturing or storing it.
+    return rows.some((row) => {
+        if (!/^(?:api[- ]?key|access token|token|secret)$/i.test(readableLabel(row)))
+            return false;
+        const value = /(?:^|\|)n=([^|]+)/.exec(row[2] ?? "")?.[1];
+        return value !== undefined && value.length > 0 && !isMaskedDisplay(value);
+    });
 }
 export function isKeyCreateRow(row) {
     if (isFillableRow(row) || isConsentRow(row) || isOauthChromeRow(row))
@@ -1314,12 +1183,20 @@ export function isKeyCreateRow(row) {
     const thing = /(?:^|[\s\-_])(?:api[\s\-_]*)?(?:key|token|secret|credential)s?(?:[\s\-_]|$)/.test(label);
     return (create && thing) || (isCreateEntryRow(row) && thing);
 }
-/** An existing credential may be read, but the drive never mutates it. */
-function isExistingCredentialMutationRow(row) {
-    return /\b(?:regenerat\w*|rotat\w*|reset|revoke|delet\w*|remove)\b/i.test(readableLabel(row));
+/** Hand an existing credential mutation to the operator before dispatch. */
+export function isExistingCredentialMutationRow(row, pageUrl, rows = [], selectedOption = "", headings = []) {
+    const label = `${readableLabel(row)} ${selectedOption}`;
+    if (!/\b(?:regenerat\w*|rotat\w*|reset|revoke|delet\w*|remove)\b/i.test(label)) {
+        return false;
+    }
+    const credentialNoun = /\b(?:(?:api[- ]?)?keys?|tokens?|secrets?|credentials?)\b/i;
+    return credentialNoun.test(label) ||
+        /(?:^|\/)(?:api[-_]?keys?|keys?|tokens?|credentials?)(?:\/|$)/.test(urlPathname(pageUrl)) ||
+        headings.some((heading) => credentialNoun.test(heading)) ||
+        rows.some((entry) => /^(?:h[1-6]|heading)$/.test(entry[1]) && credentialNoun.test(readableLabel(entry)));
 }
-function isKeyCreateOpener(row, goal) {
-    return isKeyGoal(goal) && isKeyCreateRow(row) && rowFormId(row) === undefined;
+function isKeyCreateOpener(row) {
+    return isKeyCreateRow(row) && rowFormId(row) === undefined;
 }
 /** Map the act layer's own refusal reason to the trail's short vocabulary:
  * covered, stale, refused, dialog. */
@@ -1424,41 +1301,21 @@ export function attachRevealedSecretMarker(observation, rows) {
         return { observation, rows: [...rows], attached: false };
     }
     const length = lengths.length > 0 ? Math.max(...lengths) : 16;
-    const redact = (text) => redactSecretShapedTokens(text).text;
-    const nextRows = rows.map((row) => {
-        const role = redact(row[1]);
-        const facts = row[2] === undefined ? undefined : redact(row[2]);
-        if (role === row[1] && facts === row[2])
-            return row;
-        return (facts === undefined ? [row[0], role] : [row[0], role, facts]);
-    });
+    // The marker tells the model a key is on the page; the page content itself
+    // reaches it unaltered.
+    const nextRows = [...rows];
     if (!nextRows.some((row) => row[0] === REVEALED_SECRET_REF)) {
         nextRows.push(revealedSecretMarkerRow(length, tokens.size));
     }
     const headings = [
-        ...(observation.semantic?.headings ?? []).map(redact),
+        ...(observation.semantic?.headings ?? []),
         revealedSecretMarkerRow(length, tokens.size)[2],
     ];
     return {
         observation: {
             ...observation,
-            ...(observation.dom === undefined ? {} : { dom: redact(observation.dom) }),
             safe_table: nextRows,
-            semantic: {
-                ...observation.semantic,
-                ...(observation.semantic?.title === undefined
-                    ? {}
-                    : { title: redact(observation.semantic.title) }),
-                headings,
-                ...(observation.semantic?.blockers === undefined
-                    ? {}
-                    : {
-                        blockers: observation.semantic.blockers.map((blocker) => ({
-                            ...blocker,
-                            text: redact(blocker.text),
-                        })),
-                    }),
-            },
+            semantic: { ...observation.semantic, headings },
         },
         rows: nextRows,
         attached: true,
@@ -1479,58 +1336,9 @@ export function isEntityNameRow(row) {
 export function isLogoutRow(row) {
     return /log\s*out|sign\s*out|signout|logout/.test(readableLabel(row).toLowerCase());
 }
-export function alreadySignedInReason() {
-    return "already signed in as another account";
-}
-const EMAIL_IN_TEXT = /[a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,}/gi;
-export function emailsInText(text) {
-    const seen = new Set();
-    const out = [];
-    for (const match of text.matchAll(EMAIL_IN_TEXT)) {
-        const email = match[0].toLowerCase();
-        if (seen.has(email))
-            continue;
-        seen.add(email);
-        out.push(email);
-    }
-    return out;
-}
-/** Goal asks to use an already-signed-in third-party identity. */
-export function goalSeeksThirdPartySignin(goal) {
-    if (goalExcludesOauth(goal))
-        return false;
-    return /continue with (?:google|github)|sign(?:\s*up|\s*in) with (?:google|github)|third[- ]party sign-?in|account already signed in/.test(goal.toLowerCase());
-}
 export function shouldInspectSubmitResponse(action, row) {
     return action.kind === "click" && row !== undefined && isSubmitLikeRow(row);
 }
-/**
- * A check-your-email / verify page — visible copy and OTP fields only.
- * The word "verif" in a URL or link label is not this: product sections
- * about identity verifications are ordinary signed-in pages.
- */
-export function pageLooksLikeEmailVerification(rows, _pageUrl = "", pageText = "") {
-    if (rows.some((row) => isOtpRow(row) && isFillableRow(row)))
-        return true;
-    return emailVerificationCopy(`${pageText} ${headingCopy(rows)}`);
-}
-/** Page copy names an email the goal did not. Unknown or matching identity is not this. */
-export function pageShowsForeignIdentity(rows, pageText, goal) {
-    const wanted = emailsInText(goal);
-    if (wanted.length === 0)
-        return false;
-    const wantedSet = new Set(wanted);
-    const pageEmails = emailsInText(`${pageText} ${rows.map((row) => readableLabel(row)).join(" ")}`);
-    return pageEmails.some((email) => !wantedSet.has(email));
-}
-export function isPreexistingSessionPage(input) {
-    if (goalSeeksThirdPartySignin(input.goal))
-        return false;
-    if (pageShowsForeignIdentity(input.rows, input.pageText, input.goal))
-        return true;
-    return (input.submittedThisDrive !== true &&
-        pageLooksLikeEmailVerification(input.rows, input.pageUrl, input.pageText));
-}
 export function invalidFieldReason(rows) {
     const invalid = rows.find((row) => isInvalidRow(row));
     if (invalid === undefined)
@@ -1642,55 +1450,7 @@ function shouldRecordVisit(row, pageUrl) {
     const kind = row[1];
     return kind === "l" || kind === "link" || kind === "tb" || kind === "tab";
 }
-function decisionIsActionable(decision) {
-    return decision.kind === "act";
-}
-export function rowCarriesGoalNoun(row, goal) {
-    if (!goalSeeksKey(goal) || isConsentRow(row) || isContextPickerRow(row))
-        return false;
-    const label = readableLabel(row).toLowerCase();
-    return /api\s*key|access\s*token|create\s+(?:a\s+)?(?:key|token)|credentials?|\b(?:api[-_]?keys?|tokens?)\b/.test(label);
-}
-export function rowMatchesGoalSeek(row, goal) {
-    if (rowCarriesGoalNoun(row, goal))
-        return true;
-    if (!goalSeeksKey(goal) || isConsentRow(row) || isContextPickerRow(row))
-        return false;
-    return /\bsettings\b/.test(readableLabel(row).toLowerCase());
-}
-export function pageIsPostAuthSetup(url) {
-    return /(?:^|\/)(?:welcome|onboarding|getting[-_]?started|confirm|dashboard|console|home|teams|app)(?:\/|$)/.test(urlPathname(url));
-}
-export function pageLooksLikeKeyDestination(url) {
-    return /(?:^|\/)(?:api[-_]?keys?|tokens?|credentials?|settings)(?:\/|$)/.test(urlPathname(url));
-}
-export function clickGoalSeekScore(row, goal, pageUrl) {
-    if (!goalSeeksKey(goal))
-        return 0;
-    const onSetup = pageIsPostAuthSetup(pageUrl);
-    const onKeys = pageLooksLikeKeyDestination(pageUrl);
-    if (!onSetup && !onKeys)
-        return 0;
-    if (isContextPickerRow(row) ||
-        isAlreadyHereNav(row, pageUrl) ||
-        isOffProductNavRow(row, pageUrl)) {
-        return 0;
-    }
-    if (isRevealOrCopyRow(row))
-        return 3;
-    if (isDeeperDestination(rowHref(row), pageUrl) || isListedEntityRow(row))
-        return 2;
-    if (rowMatchesGoalSeek(row, goal) && isGoalDestinationRow(row))
-        return 2;
-    if (rowMatchesGoalSeek(row, goal))
-        return 1;
-    if (onSetup && isSubmitLikeRow(row) && !isDisabledRow(row))
-        return 1;
-    return 0;
-}
-export function isCandidateRow(row, includePayment, pageUrl = "") {
-    if (isOffscreenRow(row) && !offscreenRowStaysOffered(row, pageUrl))
-        return false;
+export function isCandidateRow(row, includePayment, _pageUrl = "") {
     if (isDisabledRow(row) && !isSubmitLikeRow(row))
         return false;
     if (!includePayment && (isPaymentRow(row) || isCvvRow(row)))
@@ -1851,34 +1611,13 @@ export function isOauthChromeRow(row) {
     return /\b(?:microsoft|hasura|sso|oauth)\b/.test(label) ||
         /\/broker\/[^/]+\/login\b/i.test(row[2] ?? "");
 }
-/** Goal text that rules out third-party sign-in as the path to take. */
-export function goalExcludesOauth(goal) {
-    const text = goal.toLowerCase();
-    if (/\b(?:without|not|don't|dont|exclude|avoid|no)\b[\s\S]{0,48}\b(?:google|github|sso|oauth|third[- ]party)\b/.test(text)) {
-        return true;
-    }
-    if (/\b(?:google|github|sso|oauth|third[- ]party)\b[\s\S]{0,48}\b(?:excluded|forbidden|disabled)\b/.test(text)) {
-        return true;
-    }
-    return (/\b(?:email|password)\b/.test(text) &&
-        /\b(?:only|instead|without|not|exclude|avoid)\b/.test(text));
-}
-/** Sign-up chrome is only third-party links — no email, password, or native submit. */
-export function pageOffersOnlyThirdPartySignup(rows) {
-    if (!rows.some((row) => isOauthChromeRow(row)))
-        return false;
-    return formSurfaceRows(rows).length === 0;
-}
-export function noOtherSignupPathReason() {
-    return "The page offers no other sign-up path besides third-party sign-in links.";
-}
 export function isChoiceRow(row) {
     const role = row[1];
     return role === "c" || role === "checkbox" || role === "combobox" || isPickerRow(row);
 }
 export function formSurfaceRows(rows) {
     return rows.filter((row) => {
-        if (isOauthChromeRow(row) || isOffscreenRow(row))
+        if (isOauthChromeRow(row))
             return false;
         return isFillableRow(row) || isSubmitLikeRow(row) || isChoiceRow(row);
     });
@@ -2246,26 +1985,15 @@ export function applyReleasedCardFacts(facts, card) {
     }
     return next;
 }
-export function ensureGeneratedFacts(rows, facts, context = {}) {
+export function ensureGeneratedFacts(_rows, facts, _context = {}) {
     const next = { ...facts };
     const first = next.first_name?.trim() ?? "";
     const last = next.last_name?.trim() ?? "";
     if (next.name === undefined && first.length > 0 && last.length > 0) {
         next.name = `${first} ${last}`;
     }
-    const phase = inferPagePhase(context.pageUrl ?? "", context.headings);
-    const hasLoginAction = rows.some((row) => isButtonLikeRow(row) && isLoginRow(row));
-    const hasLoginHeading = context.headings?.some((heading) => /\b(?:log|sign)\s*in\b/i.test(heading)) === true;
-    const hasSignupAction = rows.some((row) => isButtonLikeRow(row) && isCreateAccountRow(row));
-    const hasConfirmPassword = rows.some((row) => isFillableRow(row) && isPasswordRow(row) &&
-        /(?:^|[_ ])(?:confirm|confirmation|repeat|reenter|verify)(?:[_ ]|$)/.test(`${normalizeKey(fieldNameForRow(row))} ${normalizeKey(readableLabel(row))}`));
-    if (phase !== "login" && (phase === "signup" || (!hasLoginAction && !hasLoginHeading)) &&
-        (phase === "signup" || hasSignupAction || hasConfirmPassword || goalWantsSignup(context.goal))) {
-        if (next.password === undefined && rows.some((row) => isFillableRow(row) && !isActedRow(row) && !isPaymentRow(row) && !isCvvRow(row) &&
-            isPasswordRow(row) && matchingFactKeys(next, row).length === 0)) {
-            next.password = generatePassword();
-        }
-    }
+    // Password creation belongs to operate_login's sealed signup path. A required
+    // password without a fact reaches the drive's needs_value handoff.
     return next;
 }
 export function slugifyCriteriaKey(seed) {
@@ -2538,19 +2266,16 @@ export function clickableCandidates(rows, includePayment, skippedRefs = [], page
         description: actionDescription(candidate.row, rows, "CLICK"),
     }));
 }
-export function fillableCandidates(rows, facts, includePayment, filledRefs = [], pageUrl = "") {
+export function fillableCandidates(rows, facts, includePayment, filledRefs = [], _pageUrl = "") {
     const filled = new Set(filledRefs);
     const used = new Set();
     const candidates = [];
-    const allowOffscreen = pageUrl.length === 0 || isCheckoutUrl(pageUrl);
     for (const row of rows) {
         if (!isFillableRow(row) || isDisabledRow(row) || isActedRow(row))
             continue;
         // An invalid field is not done even if we already typed it.
         if (filled.has(row[0]) && !isInvalidRow(row))
             continue;
-        if (isOffscreenRow(row) && !allowOffscreen)
-            continue;
         if (!includePayment && (isPaymentRow(row) || isCvvRow(row)))
             continue;
         if (isPaymentRow(row) || isCvvRow(row))
@@ -2584,14 +2309,11 @@ export function typeableCandidates(rows, facts, includePayment, filledRefs = [],
     const used = new Set(typed.map((candidate) => candidate.slug));
     const extra = [];
     const filled = new Set(filledRefs);
-    const allowOffscreen = pageUrl.length === 0 || isCheckoutUrl(pageUrl);
     for (const row of rows) {
         if (!isFillableRow(row) || isSelectRow(row) || isDisabledRow(row) || isActedRow(row))
             continue;
         if (filled.has(row[0]) || seen.has(row[0]))
             continue;
-        if (isOffscreenRow(row) && !allowOffscreen)
-            continue;
         if (isPaymentRow(row) || isCvvRow(row))
             continue;
         // A checkout site-search box is not a fill. Offering it after the card
@@ -2616,11 +2338,10 @@ export function typeableCandidates(rows, facts, includePayment, filledRefs = [],
     }
     return [...typed, ...extra];
 }
-export function selectCandidates(rows, facts, includePayment, filledRefs = [], pageUrl = "") {
+export function selectCandidates(rows, facts, includePayment, filledRefs = [], _pageUrl = "") {
     const filled = new Set(filledRefs);
     const used = new Set();
     const candidates = [];
-    const allowOffscreen = pageUrl.length === 0 || isCheckoutUrl(pageUrl);
     for (const row of rows) {
         if (!isFillableRow(row) || !isSelectRow(row) || isDisabledRow(row) || isActedRow(row))
             continue;
@@ -2628,8 +2349,6 @@ export function selectCandidates(rows, facts, includePayment, filledRefs = [], p
             continue;
         if (rowAlreadyShowsFact(row, facts, matchingFactKeys(facts, row)))
             continue;
-        if (isOffscreenRow(row) && !allowOffscreen)
-            continue;
         if (isPaymentRow(row) || isCvvRow(row))
             continue;
         const role = ROLE_LETTERS[row[1]] ?? row[1];
@@ -2659,7 +2378,7 @@ export function selectTargets(candidates, facts, pageOptions = new Map(), maskTe
             if (texts.has(text))
                 return;
             texts.add(text);
-            const label = redactSecretShapedTokens(maskText(text)).text;
+            const label = maskText(text);
             const optionSlug = uniqueCriteriaSlug(label, used);
             used.add(optionSlug);
             targets.push({
@@ -2818,7 +2537,7 @@ export function requiredFactTypeAction(rows, facts, filledRefs = [], pageUrl = "
     }
     return undefined;
 }
-export function requiredFactComboboxAction(rows, facts, filledRefs = [], pageUrl = "", _goal) {
+export function requiredFactComboboxAction(rows, facts, filledRefs = [], _pageUrl = "", _goal) {
     const filled = new Set(filledRefs);
     for (const row of rows) {
         if (row[1] !== "combobox" || isDisabledRow(row) || isActedRow(row) || filled.has(row[0])) {
@@ -2844,14 +2563,11 @@ export function requiredFactComboboxAction(rows, facts, filledRefs = [], pageUrl
     }
     return undefined;
 }
-export function requiredFillableMissingFact(rows, facts, filledRefs = [], pageUrl = "", goal = "") {
+export function requiredFillableMissingFact(rows, facts, filledRefs = [], _pageUrl = "", goal = "") {
     const filled = new Set(filledRefs);
-    const allowOffscreen = pageUrl.length === 0 || isCheckoutUrl(pageUrl);
     for (const row of rows) {
         if (!isFillableRow(row) || isDisabledRow(row) || isActedRow(row) || filled.has(row[0]))
             continue;
-        if (isOffscreenRow(row) && !allowOffscreen)
-            continue;
         if (isPaymentRow(row) || isCvvRow(row) || isOtpRow(row) || allowsGoalValueAssignment(row))
             continue;
         if (isFormValueField(row, rows, goal) &&
@@ -2886,10 +2602,8 @@ export function compactRowsText(url, stage, rows) {
     return `${header}\n${JSON.stringify(rows)}`;
 }
 export function nextActionInstructions(goal) {
-    const phase = goalPhase(goal);
     const doneWhen = goalDoneWhen(goal);
     return (`You are driving a browser to: ${goal}. ` +
-        (phase === undefined ? "" : `Current phase: ${phase}. `) +
         `The goal is complete only when ${doneWhen}. ` +
         "Pick the single next operation that advances it. " +
         "Pick DONE only when that done_when condition is on the page now. " +
@@ -3032,39 +2746,25 @@ export function elementState(candidate, extras = {}) {
 export function buildJevState(goal, factKeys, history, url, title, candidates, pageText = "", feedback = {}) {
     const recent = history.slice(-DRIVE_HISTORY_CAP);
     const pageUrl = feedback.pageUrl ?? url;
-    const layerOpen = pageOcclusionLayer(candidates.map((candidate) => candidate.row)) !== undefined;
     const tried = new Set(feedback.triedHere ?? []);
     const seenElementIds = new Set();
     const elements = candidates
-        .slice(0, DRIVE_MAX_CANDIDATES)
-        // Rows outside the main region only matter when a dialog or overlay is
-        // open. Hidden content is a distractor, not a lead.
-        .filter((candidate) => {
-        const region = driveElementLayer(candidate.row, pageUrl);
-        return layerOpen || (region !== "dialog" && region !== "overlay");
-    })
         .map((candidate) => {
         const leads = driveElementLeads(candidate.row, pageUrl);
-        seenElementIds.add(candidate.slug);
+        seenElementIds.add(candidate.ref);
         return elementState(candidate, {
             tried: tried.has(stableControlKey(candidate.row, pageUrl)),
             ...(leads === undefined ? {} : { leads }),
             layer: driveElementLayer(candidate.row, pageUrl),
         });
     });
-    // A control the loop already acted on is annotated `tried`, never silently
-    // pruned: the decider should see why the option is weak. The question
-    // criteria still withhold it, so it cannot be chosen again.
+    // Include every observed row. A row absent from the action choices still
+    // gives the decider page context, including disabled and previously tried
+    // controls, documentation links, and fields below the fold.
     for (const row of feedback.rows ?? []) {
-        if (!tried.has(stableControlKey(row, pageUrl)))
-            continue;
         const region = driveElementLayer(row, pageUrl);
-        if (!layerOpen && (region === "dialog" || region === "overlay"))
-            continue;
         if (seenElementIds.has(row[0]))
             continue;
-        if (elements.length >= DRIVE_MAX_CANDIDATES)
-            break;
         const leads = driveElementLeads(row, pageUrl);
         seenElementIds.add(row[0]);
         elements.push(elementState({
@@ -3074,7 +2774,7 @@ export function buildJevState(goal, factKeys, history, url, title, candidates, p
             description: readableLabel(row),
             row,
         }, {
-            tried: true,
+            tried: tried.has(stableControlKey(row, pageUrl)),
             ...(leads === undefined ? {} : { leads }),
             layer: region,
         }));
@@ -3104,7 +2804,7 @@ export function operationCriteria(operations) {
     const criteria = {};
     for (const operation of operations) {
         if (operation === "CLICK")
-            criteria.CLICK = "click a visible control";
+            criteria.CLICK = "click a control on the page";
         else if (operation === "TYPE_TEXT")
             criteria.TYPE_TEXT = "type a provided fact into a field";
         else if (operation === "SELECT")
@@ -3155,43 +2855,17 @@ export function selectOptionsFromElements(elements) {
     return out;
 }
 export function driveTargetSets(rows, facts, includePayment, filledRefs = [], pageUrl = "", pageOptions = new Map(), maskText = (text) => text, skippedClickRefs = [], aim = {}) {
-    const remaining = { n: DRIVE_MAX_CANDIDATES };
+    // Bound each action family independently so a long form cannot consume the
+    // entire candidate budget and make another action kind disappear.
+    const candidateBudget = () => ({ n: DRIVE_MAX_CANDIDATES });
     const skipped = new Set(skippedClickRefs);
-    const offeredProviders = new Set(rows.map(oauthProviderForRow).filter((provider) => provider !== undefined));
-    const liveProviders = new Set([...offeredProviders].filter((provider) => aim.liveProviders?.includes(provider)));
-    const hideFilters = goalSeeksKey(aim.goal ?? "");
-    const hasInAppWork = rows.some((row) => isGoalDestinationRow(row) &&
-        !isOffProductNavRow(row, pageUrl) &&
-        !isAppRootOrLogoRow(row, pageUrl) &&
-        !isContextPickerRow(row));
-    const visited = aim.visitedSectionKeys ?? [];
-    const untriedEntries = hideFilters ? untriedListedItemRows(rows, visited, pageUrl) : [];
     const layer = pageOcclusionLayer(rows);
     const failed = new Set(aim.failedKeys ?? []);
     const keepRow = (row) => {
-        const provider = oauthProviderForRow(row);
-        if (offeredProviders.size > 1 && liveProviders.size > 0 && isOauthChromeRow(row) &&
-            (provider === undefined || !liveProviders.has(provider)))
-            return false;
-        if (isCodeSampleRow(row))
-            return false;
-        if (isKeyGoal(aim.goal ?? "") && isExistingCredentialMutationRow(row))
-            return false;
         if (failed.has(actionFailureKey(row, pageUrl)) || failed.has(row[0]))
             return false;
         if (layer !== undefined && !isLayerCandidateRow(row, rows, layer))
             return false;
-        if (hideFilters && isContextPickerRow(row))
-            return false;
-        if (hasInAppWork && isOffProductNavRow(row, pageUrl))
-            return false;
-        if (isAppRootOrLogoRow(row, pageUrl) || isSamePageAnchorRow(row, pageUrl))
-            return false;
-        if (visited.includes(sectionIdentity(row, pageUrl)))
-            return false;
-        if (hideFilters && untriedEntries.length > 0 && isSiblingSectionNavRow(row, pageUrl, rows)) {
-            return false;
-        }
         return true;
     };
     const aimInput = {
@@ -3202,17 +2876,10 @@ export function driveTargetSets(rows, facts, includePayment, filledRefs = [], pa
         failedKeys: aim.failedKeys ?? [],
         ...(aim.goal === undefined ? {} : { goal: aim.goal }),
     };
-    const typeText = takeCapped(rankDriveCandidates(typeableCandidates(rows, facts, includePayment, filledRefs, pageUrl, aim.goal).filter((candidate) => !skipped.has(candidate.ref) && keepRow(candidate.row)), aimInput), remaining);
-    const select = takeCapped(rankDriveCandidates(selectTargets(selectCandidates(rows, facts, includePayment, filledRefs, pageUrl).filter((candidate) => !skipped.has(candidate.ref) && keepRow(candidate.row)), facts, pageOptions, maskText), aimInput), remaining);
-    const click = takeCapped(rankDriveCandidates(clickableCandidates(rows, includePayment, skippedClickRefs, pageUrl, filledRefs).filter((candidate) => keepRow(candidate.row)), aimInput)
-        .map((candidate, index) => ({
-        candidate,
-        index,
-        score: clickGoalSeekScore(candidate.row, aim.goal ?? "", pageUrl),
-    }))
-        .sort((left, right) => right.score - left.score || left.index - right.index)
-        .map((entry) => entry.candidate), remaining);
-    const scroll = takeCapped(rankDriveCandidates(scrollTargets(rows), aimInput), remaining);
+    const typeText = takeCapped(rankDriveCandidates(typeableCandidates(rows, facts, includePayment, filledRefs, pageUrl, aim.goal).filter((candidate) => !skipped.has(candidate.ref) && keepRow(candidate.row)), aimInput), candidateBudget());
+    const select = takeCapped(rankDriveCandidates(selectTargets(selectCandidates(rows, facts, includePayment, filledRefs, pageUrl).filter((candidate) => !skipped.has(candidate.ref) && keepRow(candidate.row)), facts, pageOptions, maskText), aimInput), candidateBudget());
+    const click = takeCapped(rankDriveCandidates(clickableCandidates(rows, includePayment, skippedClickRefs, pageUrl, filledRefs).filter((candidate) => keepRow(candidate.row)), aimInput), candidateBudget());
+    const scroll = takeCapped(rankDriveCandidates(scrollTargets(rows), aimInput), candidateBudget());
     const operations = [];
     if (click.length > 0)
         operations.push("CLICK");
@@ -3222,31 +2889,12 @@ export function driveTargetSets(rows, facts, includePayment, filledRefs = [], pa
         operations.push("SELECT");
     if (scroll.length > 0)
         operations.push("SCROLL");
-    // Listed work only counts while some of it is actually offered: when every
-    // candidate is suppressed, withholding WAIT and BLOCKED too would leave DONE
-    // as the only admissible answer and force a false "complete".
-    const goalWork = (pageIsPostAuthSetup(pageUrl) || pageLooksLikeKeyDestination(pageUrl)) &&
-        rows.some((row) => !isDisabledRow(row) &&
-            !isOffscreenRow(row) &&
-            rowMatchesGoalSeek(row, aim.goal ?? "") &&
-            click.some((candidate) => candidate.ref === row[0]));
-    const listedWork = operations.length > 0 && (pageHasListedWork(rows, typeText.length, select.length) || goalWork);
-    const pageText = (aim.headings ?? []).join(" ");
-    const inboxReady = !skipped.has("INBOX") &&
-        aim.submittedThisDrive === true &&
-        (pageSuggestsInboxWait(rows, pageUrl, pageText) ||
-            (goalSeeksVerification(aim.goal ?? "") && !listedWork));
-    if (inboxReady)
+    if (!skipped.has("INBOX"))
         operations.push("INBOX");
-    // WAIT is withheld only where the repeat-cap recorded it as dead — a
-    // model-chosen wait that left a page with rows unchanged. An empty snapshot
-    // never records one, so a payment settling behind a blank processor screen
-    // keeps its wait for as long as the budgets allow.
-    if (!listedWork && !inboxReady && !skipped.has("WAIT"))
+    if (!skipped.has("WAIT"))
         operations.push("WAIT");
     operations.push("DONE");
-    if (!listedWork && !inboxReady)
-        operations.push("BLOCKED");
+    operations.push("BLOCKED");
     return { operations, TYPE_TEXT: typeText, SELECT: select, CLICK: click, SCROLL: scroll };
 }
 function criteriaFromCandidates(candidates, operation) {
@@ -3270,7 +2918,6 @@ export function emailCodeCandidates(rows, filledRefs = []) {
         .filter((row) => isFillableRow(row) &&
         !isSelectRow(row) &&
         !isDisabledRow(row) &&
-        !isOffscreenRow(row) &&
         !isActedRow(row) &&
         !filled.has(row[0]) &&
         rowValueMissing(row) &&
@@ -3471,10 +3118,7 @@ export function pageSuggestsInboxWait(rows, _pageUrl = "", pageText = "") {
     const hay = `${pageText} ${headingCopy(rows)} ${rows.map((row) => readableLabel(row)).join(" ")}`.toLowerCase();
     return emailVerificationCopy(hay) || /open gmail|#search\//.test(hay);
 }
-export function goalSeeksVerification(goal) {
-    return /verif(?:y|ication)|confirm(?:ation)?(?:\s+your)?\s+e-?mail|check your e-?mail/.test(goal.toLowerCase());
-}
-export function inboxSpecialPlan(rows, decisionKind, _clicked, remainingFillCount, pageUrl = "", pageText = "", goal = "", submittedThisDrive = false) {
+export function inboxSpecialPlan(rows, decisionKind, _clicked, remainingFillCount, pageUrl = "", pageText = "", _goal = "", submittedThisDrive = false) {
     if (decisionKind !== "stuck" && decisionKind !== "wait")
         return undefined;
     const waitingForMail = pageSuggestsInboxWait(rows, pageUrl, pageText);
@@ -3500,12 +3144,8 @@ export function inboxSpecialPlan(rows, decisionKind, _clicked, remainingFillCoun
         !isOtpRow(row) &&
         !isOauthChromeRow(row) &&
         !isOffscreenRow(row))) {
-        if (submittedThisDrive && goalSeeksVerification(goal))
-            return { kind: "link" };
         return undefined;
     }
-    if (submittedThisDrive && goalSeeksVerification(goal))
-        return { kind: "link" };
     return undefined;
 }
 export function inboxVerificationDecision(verification, planKind) {
@@ -4005,7 +3645,7 @@ function publicDriveHandoff(session, handoff) {
         }
         return value;
     };
-    return maskDriveOutput(session, visit(handoff));
+    return maskCardValues(session, visit(handoff));
 }
 function maskedRefsOf(drive) {
     if (!Array.isArray(drive.maskedValueRefs))
@@ -4272,11 +3912,34 @@ async function actSafely(deps, sessionId, action) {
         };
     }
 }
-export function resumeAnswerOptions(rows, facts, goal, includePayment, pageUrl, liveProviders) {
+function resumeAllowsRow(row, rows, liveProviders) {
+    const liveProviderOffered = rows.some((candidate) => {
+        const provider = oauthProviderForRow(candidate);
+        return provider !== undefined && liveProviders?.includes(provider) === true;
+    });
+    if (!liveProviderOffered || !isOauthChromeRow(row))
+        return true;
+    const provider = oauthProviderForRow(row);
+    return provider !== undefined && liveProviders?.includes(provider) === true;
+}
+function resumeTargetSets(rows, facts, goal, includePayment, pageUrl, liveProviders) {
     const sets = driveTargetSets(rows, facts, includePayment, [], pageUrl, new Map(), (text) => text, [], {
         goal,
         ...(liveProviders === undefined ? {} : { liveProviders }),
     });
+    // Jev sees every row. The human handoff offers only providers already live
+    // in this browser when one of those providers is present on the page.
+    const click = sets.CLICK.filter((candidate) => resumeAllowsRow(candidate.row, rows, liveProviders));
+    return {
+        ...sets,
+        CLICK: click,
+        operations: click.length === 0
+            ? sets.operations.filter((operation) => operation !== "CLICK")
+            : sets.operations,
+    };
+}
+export function resumeAnswerOptions(rows, facts, goal, includePayment, pageUrl, liveProviders) {
+    const sets = resumeTargetSets(rows, facts, goal, includePayment, pageUrl, liveProviders);
     // The question builder applies the decision-budget cap to these same sets.
     // A handoff must offer exactly the target keys its resume validator accepts.
     buildDriveQuestions(rows, facts, goal, includePayment, [], pageUrl, new Map(), sets);
@@ -4298,21 +3961,14 @@ export function resumeAction(answer, rows, facts, goal, cardRef, pageUrl, livePr
     if (answer === "WAIT" || answer === "wait")
         return { kind: "wait", confidence: 1 };
     const includePayment = cardRef !== undefined;
-    const sets = driveTargetSets(rows, facts, includePayment, [], pageUrl, new Map(), (text) => text, [], {
-        goal,
-        ...(liveProviders === undefined ? {} : { liveProviders }),
-    });
+    const sets = resumeTargetSets(rows, facts, goal, includePayment, pageUrl, liveProviders);
     const questions = buildDriveQuestions(rows, facts, goal, includePayment, [], pageUrl, new Map(), sets);
     const validKeys = Object.keys(resumeAnswerOptions(rows, facts, goal, includePayment, pageUrl, liveProviders));
     const offered = [...sets.CLICK, ...sets.TYPE_TEXT, ...sets.SELECT].find((entry) => entry.slug === answer || entry.ref === answer);
     const fallbackRow = findRow(rows, answer, pageUrl);
-    const provider = fallbackRow === undefined ? undefined : oauthProviderForRow(fallbackRow);
-    const liveProviderOffered = rows.some((row) => {
-        const offeredProvider = oauthProviderForRow(row);
-        return offeredProvider !== undefined && liveProviders?.includes(offeredProvider) === true;
-    });
-    const row = offered?.row ?? (fallbackRow !== undefined && isOauthChromeRow(fallbackRow) && liveProviderOffered &&
-        (provider === undefined || !liveProviders?.includes(provider)) ? undefined : fallbackRow);
+    const row = offered?.row ?? (fallbackRow !== undefined && resumeAllowsRow(fallbackRow, rows, liveProviders)
+        ? fallbackRow
+        : undefined);
     if (row === undefined) {
         return {
             kind: "invalid_answer",
@@ -4559,7 +4215,7 @@ async function driveLoop(input) {
     let liveProviders;
     const detectOfferedProviderSessions = async () => {
         if (liveProviders === undefined &&
-            new Set(rows.map(oauthProviderForRow).filter((provider) => provider !== undefined)).size > 1) {
+            rows.filter(isOauthChromeRow).length > 1) {
             liveProviders = await liveProviderSessionsForSession(sessionId);
         }
     };
@@ -4779,39 +4435,25 @@ async function driveLoop(input) {
             if (completeSnap !== "ok")
                 return completeSnap;
             const fresh = driveProgressFingerprint(observation, rows, drive, session);
-            // Completion for a key goal is decided from fresh extraction below. A
-            // binding from the preceding page must not veto a readable credential.
-            if (!isKeyGoal(drive.goal) &&
-                drive.boundFingerprint !== null &&
+            if (drive.boundFingerprint !== null &&
                 fresh !== drive.boundFingerprint) {
                 drive.consumedActionKey = null;
                 automaticDecisionRefused = true;
                 return "continue";
             }
-            // A key goal requires a secret-shaped value from the same capture flow
-            // as operate_extract. The model decides whether it satisfies the goal.
-            const keyEvidence = isKeyGoal(drive.goal) ? await driveKeyEvidence(sessionId) : undefined;
-            if (keyEvidence !== undefined && !driveKeyGoalComplete(keyEvidence)) {
-                noteOutcome({
-                    beforeUrl: observation.url,
-                    afterUrl: observation.url,
-                    action: "DONE",
-                    step: drive.trajectory.length,
-                    executed: false,
-                    notExecutedReason: "refused",
-                    beforeFingerprint: drive.boundFingerprint ?? fresh,
-                    afterFingerprint: fresh,
-                });
-                const masked = maskedRemainingReason(keyEvidence);
-                drive.history.push(masked === undefined
-                    ? "DONE refused: extraction found no secret-shaped credential"
-                    : `DONE refused: ${masked}`);
+            // Try the known Copy source on every DONE, even if the value has no
+            // recognizable shape or label in the observation. Page evidence only
+            // decides whether a failed extraction must hand back for explicit capture.
+            const extracted = await extractCredentials(sessionId).catch(() => null);
+            if (storableCredentials(extracted?.credentials ?? {}) === null &&
+                pageShowsCredentialValue(rows)) {
+                drive.history.push("DONE refused: a visible credential has no captured source");
                 drive.consumedActionKey = null;
                 const stallKey = pageProgressKey(observation.url, rows, drive.filledRefs, observation.semantic?.headings ?? []);
                 drive.stallKeys ??= [];
                 if (drive.stallKeys.includes(stallKey)) {
                     return finish("stuck", {
-                        reason: masked ?? "no stored credential is on the page",
+                        reason: "no key with a known source: read the page with operate_observe and point capture at the key",
                     });
                 }
                 drive.stallKeys.push(stallKey);
@@ -5082,6 +4724,13 @@ async function driveLoop(input) {
             automaticDecisionRefused = true;
             return "continue";
         }
+        if ((decision.action.kind === "click" || decision.action.kind === "select") &&
+            liveRow !== undefined &&
+            isExistingCredentialMutationRow(liveRow, observation.url, rows, decision.action.kind === "select" ? decision.action.text : "", observation.semantic?.headings ?? [])) {
+            return finish("stuck", {
+                reason: `operator decision required before ${readableLabel(liveRow)} on ${observation.url}; no action was dispatched`,
+            });
+        }
         if ((decision.action.kind === "click" || decision.action.kind === "oauth_login") &&
             liveRow !== undefined &&
             isSubmitLikeRow(liveRow) &&
@@ -5533,7 +5182,7 @@ async function driveLoop(input) {
                 // progress to fill, not a failed response to a submitted form.
                 if (clicked !== undefined &&
                     isSubmitLikeRow(clicked) &&
-                    !isKeyCreateOpener(clicked, drive.goal)) {
+                    !isKeyCreateOpener(clicked)) {
                     captchaAfterSubmit = true;
                     drive.submitBeforeText = textBeforeClick;
                     drive.submitExcludeLabels = excludeBeforeClick;
@@ -5573,7 +5222,7 @@ async function driveLoop(input) {
                 }
             }
             if (shouldInspectSubmitResponse(decision.action, clickedBefore) &&
-                !isKeyCreateOpener(clickedBefore, drive.goal)) {
+                !isKeyCreateOpener(clickedBefore)) {
                 const navigated = pagePathKey(observation.url) !== pagePathKey(urlBeforeClick);
                 const fieldError = invalidFieldReason(rows);
                 if (fieldError !== undefined) {
@@ -5662,7 +5311,7 @@ async function driveLoop(input) {
                     binding: decisionTargetBinding(clicked, urlBeforeClick),
                     url: urlBeforeClick,
                 };
-                if (isSubmitLikeRow(clicked) && !isKeyCreateOpener(clicked, drive.goal)) {
+                if (isSubmitLikeRow(clicked) && !isKeyCreateOpener(clicked)) {
                     drive.submittedThisDrive = true;
                 }
             }
@@ -5772,13 +5421,15 @@ async function driveLoop(input) {
     }
     const ask = async (state, questions) => {
         try {
-            const jev = await dependencies.askJev(api, maskDriveOutput(session, state), maskDriveOutput(session, questions), context?.signal);
+            const jev = await dependencies.askJev(api, maskCardValues(session, state), maskCardValues(session, questions), context?.signal);
             drive.jevCalls += 1;
             return jev;
         }
         catch (error) {
-            if (error instanceof JevUnavailableError || error instanceof JevRequestError) {
-                return finish("jev_unavailable", { jevRetried: error.message });
+            if (error instanceof JevUnavailableError ||
+                error instanceof JevRequestError ||
+                error instanceof JevInvalidResponseError) {
+                return finish("jev_unavailable", { jevRetried: error.message, reason: error.message });
             }
             throw error;
         }
@@ -5802,9 +5453,6 @@ async function driveLoop(input) {
         let missing = requiredFillableMissingFact(rows, drive.facts, drive.filledRefs, pageUrl, drive.goal);
         let pageOptions = lastSelectOptions.get(session) ?? selectOptionsFromElements(session.lastElements);
         const remainingFills = fillableCandidates(rows, drive.facts, includePayment, drive.filledRefs, pageUrl);
-        let hasGoalDestination = rows.some((row) => rowCarriesGoalNoun(row, args.goal) &&
-            isGoalDestinationRow(row) &&
-            !isOffProductNavRow(row, pageUrl));
         let terminalOnly = false;
         // A rejected pre-act choice must reach the model on the refreshed page.
         // None of the automatic choices below may consume that opportunity.
@@ -5923,49 +5571,6 @@ async function driveLoop(input) {
                     },
                 });
             }
-            if (isPreexistingSessionPage({
-                rows,
-                pageUrl,
-                pageText: pageTextFromObservation(observation, [observation.dom ?? ""]),
-                goal: args.goal,
-                submittedThisDrive: drive.submittedThisDrive === true,
-            })) {
-                if (drive.preexistingRestarted === true ||
-                    rows.find((row) => isLogoutRow(row)) === undefined) {
-                    return finish("stuck", { reason: alreadySignedInReason() });
-                }
-                const logout = rows.find((row) => isLogoutRow(row));
-                if (logout === undefined) {
-                    return finish("stuck", { reason: alreadySignedInReason() });
-                }
-                drive.preexistingRestarted = true;
-                drive.boundFingerprint = driveProgressFingerprint(observation, rows, drive, session);
-                drive.consumedActionKey = null;
-                const applied = await applyDecision({
-                    kind: "act",
-                    action: { kind: "click", target: logout[0] },
-                    actionKey: logout[0],
-                    confidence: 1,
-                });
-                if (applied !== "continue")
-                    return applied;
-                if (automaticDecisionRefused)
-                    break automaticDecisions;
-                const safe = await actSafely(dependencies, sessionId, {
-                    kind: "goto",
-                    url: session.startUrl,
-                });
-                drive.lastDispatchFailure = safe.dispatchFailure ?? null;
-                drive.lastOauthBounceReason = null;
-                observation = safe.observation;
-                if (observation.needs_user !== undefined)
-                    return finishOnWall(observation.needs_user);
-                const restarted = await snapshotOrTimeout(framesIfNeeded());
-                if (restarted !== "ok")
-                    return restarted;
-                spendStep("preexisting_restart");
-                continue;
-            }
             // A same-document stage swap (Shopify one-page checkout) and a hydrating
             // checkout both leave the snapshot empty for a while, so spend the
             // re-observation budget before asking anything. Past it the ordinary
@@ -6226,9 +5831,6 @@ async function driveLoop(input) {
             else {
                 return finish("stuck", { reason: missingPay });
             }
-            if (goalExcludesOauth(args.goal) && pageOffersOnlyThirdPartySignup(rows)) {
-                return finish("stuck", { reason: noOtherSignupPathReason() });
-            }
             drive.awaitingDecideAfterExplore = false;
             // Rule 1: undo a narrowing input the drive itself typed before the loop
             // decides anything else, then re-offer the control it removed.
@@ -6246,9 +5848,6 @@ async function driveLoop(input) {
             missing = requiredFillableMissingFact(rows, drive.facts, drive.filledRefs, pageUrl, drive.goal);
             pageOptions =
                 lastSelectOptions.get(session) ?? selectOptionsFromElements(session.lastElements);
-            hasGoalDestination = rows.some((row) => rowCarriesGoalNoun(row, args.goal) &&
-                isGoalDestinationRow(row) &&
-                !isOffProductNavRow(row, pageUrl));
             terminalOnly = false;
         }
         if (drive.jevCalls >= DRIVE_MAX_JEV_CALLS) {
@@ -6265,7 +5864,7 @@ async function driveLoop(input) {
             ...new Set([...(drive.exhaustedActionKeys ?? []), ...(drive.staleClickRefs ?? [])]),
         ];
         await detectOfferedProviderSessions();
-        const sets = driveTargetSets(rows, drive.facts, includePayment, drive.filledRefs, pageUrl, pageOptions, (text) => maskDriveOutput(session, text), skippedActions, {
+        const sets = driveTargetSets(rows, drive.facts, includePayment, drive.filledRefs, pageUrl, pageOptions, (text) => maskCardValues(session, text), skippedActions, {
             headings: observation.semantic?.headings ?? [],
             failedKeys: drive.failedActionKeys ?? [],
             goal: drive.goal,
@@ -6425,61 +6024,6 @@ async function driveLoop(input) {
             jev_question_count: questionCount,
             jev_state_bytes: stateBytes,
         };
-        const inboxPlan = inboxSpecialPlan(rows, decision.kind, lastNonWaitWasClick(drive.trajectory), remainingFills.length, observation.url, pageTextFromObservation(observation, [observation.dom ?? ""]), drive.goal, drive.submittedThisDrive === true);
-        if (inboxPlan !== undefined) {
-            const lastClick = [...drive.trajectory]
-                .reverse()
-                .find((step) => step.action === "click" || step.action === "oauth_login");
-            const applied = await applyDecision({
-                kind: "act",
-                action: inboxPlan.kind === "otp"
-                    ? { kind: "type", target: inboxPlan.target, text: "" }
-                    : { kind: "click", target: lastClick?.target ?? "inbox_link" },
-                actionKey: inboxPlan.kind === "otp" ? inboxPlan.target : "inbox_link",
-                confidence: 1,
-                special: "inbox",
-            }, jevMs);
-            if (applied !== "continue")
-                return applied;
-            spendStep("inbox_plan");
-            continue;
-        }
-        if (goalSeeksKey(args.goal) && !pageShowsRevealedKey(rows)) {
-            const visited = drive.visitedSectionKeys ?? [];
-            const untriedEntries = untriedListedItemRows(rows, visited, pageUrl);
-            const nextSection = nextExploreRow(rows, visited, pageUrl);
-            const picked = decisionIsActionable(decision)
-                ? findRow(rows, decision.actionKey, pageUrl)
-                : undefined;
-            const pickedIsReveal = picked !== undefined && isRevealOrCopyRow(picked);
-            const pickedIsPending = picked !== undefined && isPendingPageAction(picked, args.goal);
-            const pickedIsUntriedEntry = picked !== undefined && untriedEntries.some((entry) => entry[0] === picked[0]);
-            const pickedVisitedTab = picked !== undefined &&
-                isSiblingSectionNavRow(picked, pageUrl, rows) &&
-                visited.includes(sectionIdentity(picked, pageUrl));
-            const takeExplore = nextSection !== undefined &&
-                !pickedIsPending &&
-                ((untriedEntries.length > 0 && !pickedIsUntriedEntry && !pickedIsReveal) ||
-                    pickedVisitedTab ||
-                    (!decisionIsActionable(decision) && !hasGoalDestination));
-            if (takeExplore && nextSection !== undefined) {
-                const applied = await applyDecision({
-                    kind: "act",
-                    action: { kind: "click", target: nextSection[0] },
-                    actionKey: nextSection[0],
-                    confidence: 1,
-                });
-                if (applied !== "continue")
-                    return applied;
-                drive.boundFingerprint = driveProgressFingerprint(observation, rows, drive, session);
-                drive.consumedActionKey = null;
-                spendStep("explore");
-                continue;
-            }
-            if (!decisionIsActionable(decision) && !hasGoalDestination && visited.length > 0) {
-                return finish("no_progress", { reason: sectionsTriedReason(visited) });
-            }
-        }
         const applied = await applyDecision(decision, jevMs, true);
         if (applied !== "continue")
             return applied;