instar 1.3.1262 → 1.3.1263

package/dist/core/GooglePasskeyPageClasses.d.ts

@@ -0,0 +1,97 @@
+/**
+ * GooglePasskeyPageClasses — the CLOSED set of Google pages the passkey work
+ * recognises (spec docs/specs/agent-held-google-passkey.md §3.6), each matched on
+ * STRUCTURE (exact origin, sign-in route, element ids / roles / exact control
+ * labels), evaluated BEFORE the parent driver's text-regex chain, and the outcome
+ * mapping a proof or repair derives from the page it ended on.
+ *
+ * Why structure first: the parent chain (`ChromeCdpReloginBrowser.snapshot`) reads
+ * body prose — "verification code", "password" — which Google's passkey pages also
+ * print in help text, so a passkey challenge would read as `totp` and a backup-code
+ * page as `password`. A structural match cannot be shadowed by prose, and an
+ * unmatched page is `null` here (⇒ the parent chain, ⇒ `unknown`): the safe
+ * direction. Every class is a SINGLE-source structural match and errs toward
+ * restriction (§11): a false `credential-rejected` costs one proof, a false
+ * `ready` is impossible from here because `ready` needs the observed assertion
+ * and the identity read as well (§3.8).
+ *
+ * Provenance of each predicate (`PAGE_CLASS_PROVENANCE`): `measured` = observed
+ * live in the 2026-09-20 prototype notes (identifier field id, the `pk/presend`
+ * challenge, the device-prompt / TOTP routes, the passkey speedbump, the
+ * Workspace refusal); `documented` = Google's long-stable sign-in routes and
+ * control ids that the prototype did not need to visit. The Rung-1 live step
+ * (§14 FD9) re-checks every `documented` row against real pages before any
+ * unattended use; until then a mismatch can only make a page `unknown`.
+ *
+ * `classifyGooglePasskeyPage` is SELF-CONTAINED (no module-level constants, no
+ * imports) so the browser can serialise it with `Function.prototype.toString`
+ * and run the SAME code inside the page, exactly as it does for
+ * `isClosedOpenAiDeviceApproval`. The unit tests exercise the function directly;
+ * the fixture test proves the in-page ordering through real Chrome.
+ */
+export declare const GOOGLE_PASSKEY_PAGE_CLASSES: readonly ["google-passkey-challenge", "google-passkey-create", "google-passkey-create-confirm", "google-already-enrolled", "google-passkey-throttled", "google-workspace-policy-blocked", "google-credential-not-recognized", "google-account-identity", "google-passkey-list", "google-totp-entry", "google-backup-code-entry", "google-risk-challenge"];
+export type GooglePasskeyPageClass = typeof GOOGLE_PASSKEY_PAGE_CLASSES[number];
+/** Where each predicate came from (see the header). */
+export declare const PAGE_CLASS_PROVENANCE: Readonly<Record<GooglePasskeyPageClass, 'measured' | 'documented'>>;
+/**
+ * The REDACTED structural facts the browser extracts from a page. No prose, no
+ * input values, no URL query, no email ever enters this object: only the origin,
+ * the path, bounded lists of element ids and exact lower-cased control labels,
+ * and a handful of role/landmark booleans.
+ */
+export interface GooglePageFacts {
+    origin: string;
+    pathname: string;
+    /** Element ids present on the page (bounded, lower-cased). */
+    ids: string[];
+    /** Exact, trimmed, lower-cased accessible labels of buttons/links (bounded). */
+    controlLabels: string[];
+    hasPasswordInput: boolean;
+    /** An open `[role="dialog"]` / `<dialog open>`. */
+    hasDialog: boolean;
+    /** A non-empty `[role="alert"]` / `[aria-live="assertive"]` region. */
+    hasAlert: boolean;
+    /** A reCAPTCHA frame or the classic captcha image. */
+    hasCaptchaWidget: boolean;
+    /** A link into Google Workspace admin help (the Workspace refusal cites it). */
+    hasAdminHelpLink: boolean;
+}
+export interface GooglePageOrigins {
+    /** accounts.google.com in production; the fixture's holder origin in tests. */
+    holderOrigin: string;
+    /** myaccount.google.com in production; the fixture's other origin in tests. */
+    accountOrigin: string;
+}
+export declare const GOOGLE_ACCOUNT_ORIGIN = "https://myaccount.google.com";
+/**
+ * Structural classification. Returns the matched class or `null` (⇒ the caller
+ * falls through to its own chain). Pure, self-contained, serialisable.
+ */
+export declare function classifyGooglePasskeyPage(facts: GooglePageFacts, origins: GooglePageOrigins): GooglePasskeyPageClass | null;
+/** Classes on which NO action is ever allowed; the driver maps them to a result. */
+export declare const TERMINAL_GOOGLE_PAGE_CLASSES: ReadonlySet<GooglePasskeyPageClass>;
+export type PasskeySignInOutcome = 'ready' | 'credential-rejected' | 'removed-on-google' | 'failed' | 'security' | 'unknown';
+export interface PasskeySignInObservation {
+    /** The last page class the sign-in ended on (`unknown` when the parent chain matched nothing). */
+    finalPageClass: string;
+    /** Result of the in-port identity read after sign-in: matched E, matched a DIFFERENT identity, or no signed-in identity. */
+    signedInIdentity: 'match' | 'mismatch' | 'none';
+    /** Google asked for and received a WebAuthn assertion from the STORED credential id (§3.8). */
+    observedAssertion: boolean;
+    /** The virtual authenticator held exactly the one stored credential. */
+    singleCredential: boolean;
+    /** Transport/outage/timeouts happened before a verdict could be read. */
+    transportError: boolean;
+    /** The cell's Google-side removal state (§3.2): a pending/attested cell never counts as rejected. */
+    googleSideRemoval: 'none' | 'pending' | 'attested' | 'verified';
+}
+/**
+ * `ready` requires ALL of: identity match, observed assertion for the stored id,
+ * a single-credential authenticator (§3.8). `security` = signed in as somebody
+ * else (custody is corrupt). `credential-rejected` = Google's not-recognized page
+ * (recorded as `removed-on-google` while the cell's removal is pending/attested/
+ * verified, so it never counts toward suspension). `failed` = reached sign-in,
+ * did not sign in, no rejection page. Everything else is `unknown`.
+ */
+export declare function mapPasskeySignInOutcome(obs: PasskeySignInObservation): PasskeySignInOutcome;
+//# sourceMappingURL=GooglePasskeyPageClasses.d.ts.map

package/dist/core/GooglePasskeyPageClasses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GooglePasskeyPageClasses.d.ts","sourceRoot":"","sources":["../../src/core/GooglePasskeyPageClasses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,eAAO,MAAM,2BAA2B,2VAa9B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;AAEhF,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,EAAE,UAAU,GAAG,YAAY,CAAC,CAapG,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,gFAAgF;IAChF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;IAClB,sDAAsD;IACtD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gFAAgF;IAChF,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,qBAAqB,iCAAiC,CAAC;AAEpE;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,GAAG,sBAAsB,GAAG,IAAI,CAgD3H;AAED,oFAAoF;AACpF,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,sBAAsB,CAG3E,CAAC;AAIH,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,qBAAqB,GAAG,mBAAmB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7H,MAAM,WAAW,wBAAwB;IACvC,kGAAkG;IAClG,cAAc,EAAE,MAAM,CAAC;IACvB,4HAA4H;IAC5H,gBAAgB,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IAChD,+FAA+F;IAC/F,iBAAiB,EAAE,OAAO,CAAC;IAC3B,wEAAwE;IACxE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,cAAc,EAAE,OAAO,CAAC;IACxB,qGAAqG;IACrG,iBAAiB,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;CACjE;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,wBAAwB,GAAG,oBAAoB,CAW3F"}

package/dist/core/GooglePasskeyPageClasses.js

@@ -0,0 +1,154 @@
+/**
+ * GooglePasskeyPageClasses — the CLOSED set of Google pages the passkey work
+ * recognises (spec docs/specs/agent-held-google-passkey.md §3.6), each matched on
+ * STRUCTURE (exact origin, sign-in route, element ids / roles / exact control
+ * labels), evaluated BEFORE the parent driver's text-regex chain, and the outcome
+ * mapping a proof or repair derives from the page it ended on.
+ *
+ * Why structure first: the parent chain (`ChromeCdpReloginBrowser.snapshot`) reads
+ * body prose — "verification code", "password" — which Google's passkey pages also
+ * print in help text, so a passkey challenge would read as `totp` and a backup-code
+ * page as `password`. A structural match cannot be shadowed by prose, and an
+ * unmatched page is `null` here (⇒ the parent chain, ⇒ `unknown`): the safe
+ * direction. Every class is a SINGLE-source structural match and errs toward
+ * restriction (§11): a false `credential-rejected` costs one proof, a false
+ * `ready` is impossible from here because `ready` needs the observed assertion
+ * and the identity read as well (§3.8).
+ *
+ * Provenance of each predicate (`PAGE_CLASS_PROVENANCE`): `measured` = observed
+ * live in the 2026-09-20 prototype notes (identifier field id, the `pk/presend`
+ * challenge, the device-prompt / TOTP routes, the passkey speedbump, the
+ * Workspace refusal); `documented` = Google's long-stable sign-in routes and
+ * control ids that the prototype did not need to visit. The Rung-1 live step
+ * (§14 FD9) re-checks every `documented` row against real pages before any
+ * unattended use; until then a mismatch can only make a page `unknown`.
+ *
+ * `classifyGooglePasskeyPage` is SELF-CONTAINED (no module-level constants, no
+ * imports) so the browser can serialise it with `Function.prototype.toString`
+ * and run the SAME code inside the page, exactly as it does for
+ * `isClosedOpenAiDeviceApproval`. The unit tests exercise the function directly;
+ * the fixture test proves the in-page ordering through real Chrome.
+ */
+export const GOOGLE_PASSKEY_PAGE_CLASSES = [
+    'google-passkey-challenge',
+    'google-passkey-create',
+    'google-passkey-create-confirm',
+    'google-already-enrolled',
+    'google-passkey-throttled',
+    'google-workspace-policy-blocked',
+    'google-credential-not-recognized',
+    'google-account-identity',
+    'google-passkey-list',
+    'google-totp-entry',
+    'google-backup-code-entry',
+    'google-risk-challenge',
+];
+/** Where each predicate came from (see the header). */
+export const PAGE_CLASS_PROVENANCE = Object.freeze({
+    'google-passkey-challenge': 'measured',
+    'google-passkey-create': 'measured',
+    'google-passkey-create-confirm': 'documented',
+    'google-already-enrolled': 'measured',
+    'google-passkey-throttled': 'documented',
+    'google-workspace-policy-blocked': 'measured',
+    'google-credential-not-recognized': 'documented',
+    'google-account-identity': 'measured',
+    'google-passkey-list': 'measured',
+    'google-totp-entry': 'measured',
+    'google-backup-code-entry': 'documented',
+    'google-risk-challenge': 'measured',
+});
+export const GOOGLE_ACCOUNT_ORIGIN = 'https://myaccount.google.com';
+/**
+ * Structural classification. Returns the matched class or `null` (⇒ the caller
+ * falls through to its own chain). Pure, self-contained, serialisable.
+ */
+export function classifyGooglePasskeyPage(facts, origins) {
+    const path = String(facts.pathname || '');
+    const ids = new Set((facts.ids || []).map((v) => String(v).toLowerCase()));
+    const labels = new Set((facts.controlLabels || []).map((v) => String(v).trim().toLowerCase()));
+    // An empty origin on either side never matches (a data: page reports 'null', a
+    // policy without an account origin reports '').
+    const onHolder = !!facts.origin && facts.origin !== 'null' && facts.origin === origins.holderOrigin;
+    const onAccount = !!facts.origin && facts.origin !== 'null' && !!origins.accountOrigin && facts.origin === origins.accountOrigin;
+    // Google's sign-in routes: current `/v3/signin/...`, legacy `/signin/v2/...`, bare `/signin/...`.
+    const challenge = (segment) => new RegExp('^/(?:v3/signin|signin/v2|signin)/challenge/' + segment + '(?:/|$)').test(path);
+    const identifierRoute = /^\/(?:v3\/signin|signin\/v2|signin)\/identifier(?:\/|$)/.test(path);
+    const rejectedRoute = /^\/(?:v3\/signin|signin\/v2|signin)\/rejected(?:\/|$)/.test(path);
+    const speedbumpRoute = /^\/(?:signin\/v2\/)?speedbump\/passkeyenrollment(?:\/|$)/.test(path);
+    const passkeyOptionsRoute = /^\/signinoptions\/passkeys(?:\/|$)/.test(path);
+    if (onHolder) {
+        // Risk / CAPTCHA first: it can wear any other page's clothes and must never be acted on.
+        if (facts.hasCaptchaWidget || rejectedRoute || challenge('recaptcha') || challenge('ipp') || challenge('iap') || challenge('ipe'))
+            return 'google-risk-challenge';
+        if (challenge('pk(?:/presend)?')) {
+            // The passkey prompt: "Continue" (fires navigator.credentials.get) + "Try another way".
+            // A live prompt that still offers Continue is the CHALLENGE even if a live region
+            // is announcing something — the rejection classes need the prompt's action GONE
+            // plus a visible alert, because `credential-not-recognized` feeds suspension and
+            // a false read there is NOT the safe direction (second-pass review, 2026-09-23).
+            if (labels.has('continue'))
+                return 'google-passkey-challenge';
+            if (facts.hasAlert && labels.has('try again later'))
+                return 'google-passkey-throttled';
+            if (facts.hasAlert && labels.has('try another way'))
+                return 'google-credential-not-recognized';
+            return null;
+        }
+        if (challenge('totp') && ids.has('totppin'))
+            return 'google-totp-entry';
+        if (challenge('bc') && ids.has('backupcodepin'))
+            return 'google-backup-code-entry';
+        if (identifierRoute && ids.has('identifierid'))
+            return 'google-account-identity';
+        if (speedbumpRoute) {
+            if (facts.hasDialog && (labels.has('continue') || labels.has('create')))
+                return 'google-passkey-create-confirm';
+            if (labels.has('create a passkey'))
+                return 'google-passkey-create';
+            return null;
+        }
+        return null;
+    }
+    if (onAccount && passkeyOptionsRoute) {
+        if (facts.hasAlert && facts.hasAdminHelpLink)
+            return 'google-workspace-policy-blocked';
+        if (facts.hasDialog && (labels.has('continue') || labels.has('create')))
+            return 'google-passkey-create-confirm';
+        if (facts.hasDialog && (labels.has('done') || labels.has('ok')) && !labels.has('create a passkey'))
+            return 'google-already-enrolled';
+        if (labels.has('create a passkey'))
+            return 'google-passkey-create';
+        return 'google-passkey-list';
+    }
+    return null;
+}
+/** Classes on which NO action is ever allowed; the driver maps them to a result. */
+export const TERMINAL_GOOGLE_PAGE_CLASSES = new Set([
+    'google-already-enrolled', 'google-passkey-throttled', 'google-workspace-policy-blocked',
+    'google-credential-not-recognized', 'google-passkey-list', 'google-risk-challenge',
+]);
+/**
+ * `ready` requires ALL of: identity match, observed assertion for the stored id,
+ * a single-credential authenticator (§3.8). `security` = signed in as somebody
+ * else (custody is corrupt). `credential-rejected` = Google's not-recognized page
+ * (recorded as `removed-on-google` while the cell's removal is pending/attested/
+ * verified, so it never counts toward suspension). `failed` = reached sign-in,
+ * did not sign in, no rejection page. Everything else is `unknown`.
+ */
+export function mapPasskeySignInOutcome(obs) {
+    if (obs.signedInIdentity === 'mismatch')
+        return 'security';
+    if (obs.transportError)
+        return 'unknown';
+    if (obs.finalPageClass === 'google-credential-not-recognized')
+        return obs.googleSideRemoval === 'none' ? 'credential-rejected' : 'removed-on-google';
+    if (obs.finalPageClass === 'google-risk-challenge' || obs.finalPageClass === 'google-passkey-throttled'
+        || obs.finalPageClass === 'unknown')
+        return 'unknown';
+    if (obs.signedInIdentity === 'match') {
+        return obs.observedAssertion && obs.singleCredential ? 'ready' : 'unknown';
+    }
+    return 'failed';
+}
+//# sourceMappingURL=GooglePasskeyPageClasses.js.map

package/dist/core/GooglePasskeyPageClasses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GooglePasskeyPageClasses.js","sourceRoot":"","sources":["../../src/core/GooglePasskeyPageClasses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,0BAA0B;IAC1B,uBAAuB;IACvB,+BAA+B;IAC/B,yBAAyB;IACzB,0BAA0B;IAC1B,iCAAiC;IACjC,kCAAkC;IAClC,yBAAyB;IACzB,qBAAqB;IACrB,mBAAmB;IACnB,0BAA0B;IAC1B,uBAAuB;CACf,CAAC;AAIX,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAwE,MAAM,CAAC,MAAM,CAAC;IACtH,0BAA0B,EAAE,UAAU;IACtC,uBAAuB,EAAE,UAAU;IACnC,+BAA+B,EAAE,YAAY;IAC7C,yBAAyB,EAAE,UAAU;IACrC,0BAA0B,EAAE,YAAY;IACxC,iCAAiC,EAAE,UAAU;IAC7C,kCAAkC,EAAE,YAAY;IAChD,yBAAyB,EAAE,UAAU;IACrC,qBAAqB,EAAE,UAAU;IACjC,mBAAmB,EAAE,UAAU;IAC/B,0BAA0B,EAAE,YAAY;IACxC,uBAAuB,EAAE,UAAU;CACpC,CAAC,CAAC;AAiCH,MAAM,CAAC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAsB,EAAE,OAA0B;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/F,+EAA+E;IAC/E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC;IACpG,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC;IACjI,kGAAkG;IAClG,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,6CAA6C,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClI,MAAM,eAAe,GAAG,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,MAAM,cAAc,GAAG,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7F,MAAM,mBAAmB,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5E,IAAI,QAAQ,EAAE,CAAC;QACb,yFAAyF;QACzF,IAAI,KAAK,CAAC,gBAAgB,IAAI,aAAa,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC;YAC/H,OAAO,uBAAuB,CAAC;QACjC,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjC,wFAAwF;YACxF,kFAAkF;YAClF,gFAAgF;YAChF,iFAAiF;YACjF,iFAAiF;YACjF,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,OAAO,0BAA0B,CAAC;YAC9D,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAAE,OAAO,0BAA0B,CAAC;YACvF,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAAE,OAAO,kCAAkC,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,mBAAmB,CAAC;QACxE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;YAAE,OAAO,0BAA0B,CAAC;QACnF,IAAI,eAAe,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,OAAO,yBAAyB,CAAC;QACjF,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,+BAA+B,CAAC;YAChH,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAAE,OAAO,uBAAuB,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,gBAAgB;YAAE,OAAO,iCAAiC,CAAC;QACvF,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,+BAA+B,CAAC;QAChH,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAAE,OAAO,yBAAyB,CAAC;QACrI,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAAE,OAAO,uBAAuB,CAAC;QACnE,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,4BAA4B,GAAwC,IAAI,GAAG,CAAyB;IAC/G,yBAAyB,EAAE,0BAA0B,EAAE,iCAAiC;IACxF,kCAAkC,EAAE,qBAAqB,EAAE,uBAAuB;CACnF,CAAC,CAAC;AAqBH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAA6B;IACnE,IAAI,GAAG,CAAC,gBAAgB,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC3D,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,GAAG,CAAC,cAAc,KAAK,kCAAkC;QAC3D,OAAO,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACxF,IAAI,GAAG,CAAC,cAAc,KAAK,uBAAuB,IAAI,GAAG,CAAC,cAAc,KAAK,0BAA0B;WAClG,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,GAAG,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACrC,OAAO,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/PasskeyBrowserPolicy.d.ts

@@ -28,8 +28,17 @@ export interface OriginPolicy {
     apexHost: string;
     /** Fixture-only: accept http:// for the apex family (WebAuthn treats localhost as secure). */
     allowInsecure?: boolean;
+    /**
+     * The account-settings origin whose passkey pages the closed page classes
+     * recognise (spec §3.6): myaccount.google.com in production, the fixture's
+     * OTHER origin in tests. It is in the relying-party family, so the stored
+     * credential is REMOVED before any document there loads — classification
+     * there never coexists with the key. Absent ⇒ no account-origin class matches.
+     */
+    accountOrigin?: string;
 }
 export declare const ACCOUNTS_GOOGLE_ORIGIN = "https://accounts.google.com";
+export declare const MYACCOUNT_GOOGLE_ORIGIN = "https://myaccount.google.com";
 export declare const GOOGLE_ORIGIN_POLICY: OriginPolicy;
 /** Origin of a URL, or null when it cannot be parsed. */
 export declare function originOf(url: string): string | null;

package/dist/core/PasskeyBrowserPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyBrowserPolicy.d.ts","sourceRoot":"","sources":["../../src/core/PasskeyBrowserPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,eAAO,MAAM,oBAAoB,EAAE,YAGjC,CAAC;AAEH,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQnD;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,YAAmC,GAAG,OAAO,CAYrG;AAED,kDAAkD;AAClD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,GAAE,YAAmC,GAAG,OAAO,CAMrH;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EAAE,EAC/C,MAAM,GAAE,YAAmC,GAC1C,OAAO,CAIT;AAED,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,sLAK9B,CAAC"}
+{"version":3,"file":"PasskeyBrowserPolicy.d.ts","sourceRoot":"","sources":["../../src/core/PasskeyBrowserPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AAEtE,eAAO,MAAM,oBAAoB,EAAE,YAIjC,CAAC;AAEH,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQnD;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,YAAmC,GAAG,OAAO,CAYrG;AAED,kDAAkD;AAClD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,GAAE,YAAmC,GAAG,OAAO,CAMrH;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EAAE,EAC/C,MAAM,GAAE,YAAmC,GAC1C,OAAO,CAIT;AAED,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,sLAK9B,CAAC"}

package/dist/core/PasskeyBrowserPolicy.js

@@ -22,9 +22,11 @@
  * Fetch interception handler.
  */
 export const ACCOUNTS_GOOGLE_ORIGIN = 'https://accounts.google.com';
+export const MYACCOUNT_GOOGLE_ORIGIN = 'https://myaccount.google.com';
 export const GOOGLE_ORIGIN_POLICY = Object.freeze({
     holderOrigin: ACCOUNTS_GOOGLE_ORIGIN,
     apexHost: 'google.com',
+    accountOrigin: MYACCOUNT_GOOGLE_ORIGIN,
 });
 /** Origin of a URL, or null when it cannot be parsed. */
 export function originOf(url) {

package/dist/core/PasskeyBrowserPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyBrowserPolicy.js","sourceRoot":"","sources":["../../src/core/PasskeyBrowserPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAWH,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE,MAAM,CAAC,MAAM,oBAAoB,GAAiB,MAAM,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,sBAAsB;IACpC,QAAQ,EAAE,YAAY;CACvB,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,6EAA6E;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,SAAuB,oBAAoB;IAC1F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/F,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,qEAAqE;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AACxD,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAoB,EAAE,SAAuB,oBAAoB;IAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,4BAA4B;IAC9D,IAAI,MAAM,KAAK,MAAM,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA+C,EAC/C,SAAuB,oBAAoB;IAE3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,yBAAyB;IACzB,sBAAsB;IACtB,sDAAsD;IACtD,8DAA8D;CACtD,CAAC"}
+{"version":3,"file":"PasskeyBrowserPolicy.js","sourceRoot":"","sources":["../../src/core/PasskeyBrowserPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAmBH,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAEtE,MAAM,CAAC,MAAM,oBAAoB,GAAiB,MAAM,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,sBAAsB;IACpC,QAAQ,EAAE,YAAY;IACtB,aAAa,EAAE,uBAAuB;CACvC,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,6EAA6E;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,SAAuB,oBAAoB;IAC1F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/F,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,qEAAqE;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AACxD,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAoB,EAAE,SAAuB,oBAAoB;IAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,4BAA4B;IAC9D,IAAI,MAAM,KAAK,MAAM,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA+C,EAC/C,SAAuB,oBAAoB;IAE3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,yBAAyB;IACzB,sBAAsB;IACtB,sDAAsD;IACtD,8DAA8D;CACtD,CAAC"}

package/dist/core/PasskeyWebAuthnFixture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyWebAuthnFixture.d.ts","sourceRoot":"","sources":["../../src/core/PasskeyWebAuthnFixture.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAuED,wDAAwD;AACxD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,cAAc,CAAC,CAsBnE"}
+{"version":3,"file":"PasskeyWebAuthnFixture.d.ts","sourceRoot":"","sources":["../../src/core/PasskeyWebAuthnFixture.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAkHD,wDAAwD;AACxD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,cAAc,CAAC,CAsBnE"}

package/dist/core/PasskeyWebAuthnFixture.js

@@ -81,6 +81,49 @@ function handler(selfOrigin, otherOrigin) {
                 const safe = email.replace(/[<>&"]/g, '');
                 return send(200, page(`<h1>account</h1><div data-email="${safe}">${safe}</div>`));
             }
+            // ── Redacted page-class fixtures (spec §3.6 / §8 "page-class ordering fixtures").
+            // Each page carries the STRUCTURE of one closed Google page AND prose the parent
+            // text-regex chain would classify differently, so a match here proves the
+            // structural layer runs first. No identities, no real copy beyond the markers.
+            case '/parent-chain':
+                // No structural class here: the parent prose/selector chain must answer (`email`).
+                return send(200, page(`<input type="email" autocomplete="username"><button>Next</button>`));
+            case '/v3/signin/identifier':
+                return send(200, page(`<p>enter a verification code</p><input type="text" id="identifierId" name="identifier"><button>Next</button>`));
+            case '/v3/signin/challenge/pk/presend': {
+                const v = url.searchParams.get('v') ?? '';
+                const rejected = v === 'alert' || v === 'throttled';
+                // The rejection states show the alert and LOSE the prompt's own Continue control.
+                const alert = rejected ? '<div role="alert">something went wrong</div>' : '';
+                const again = v === 'throttled' ? '<button>Try again later</button>' : '';
+                const cont = rejected ? '' : '<button id="continue" onclick="document.getElementById(\'picked\').textContent=\'continue\'">Continue</button>';
+                // A HIDDEN dialog + a hidden "Not now": present in the DOM, never rendered — must not count.
+                return send(200, page(`<p>use your passkey, or enter your password or a verification code</p>${alert}
+          <div role="dialog" style="display:none"><button>Not now</button></div>
+          ${cont}${again}
+          <a href="#" onclick="document.getElementById('picked').textContent='another'">Try another way</a><span id="picked">none</span>`));
+            }
+            case '/v3/signin/challenge/totp':
+                return send(200, page(`<p>choose an account</p><input type="tel" id="totpPin" name="totpPin"><button>Next</button>`));
+            case '/v3/signin/challenge/bc':
+                return send(200, page(`<p>choose an account</p><input type="tel" id="backupCodePin" name="backupCodePin"><button>Next</button>`));
+            case '/v3/signin/challenge/recaptcha':
+                return send(200, page(`<div class="g-recaptcha" data-sitekey="fixture"></div><input type="password"><button>Next</button>`));
+            case '/speedbump/passkeyenrollment': {
+                const confirm = url.searchParams.get('v') === 'confirm';
+                return send(200, page(`<p>enter your password</p>${confirm ? '<div role="dialog"><button>Continue</button></div>' : ''}
+          <button onclick="document.getElementById('picked').textContent='create'">Create a passkey</button>
+          <button onclick="document.getElementById('picked').textContent='not-now'">Not now</button><span id="picked">none</span>`));
+            }
+            case '/signinoptions/passkeys': {
+                const v = url.searchParams.get('v') ?? 'list';
+                const body = v === 'create' ? '<button>Create a passkey</button>'
+                    : v === 'confirm' ? '<div role="dialog"><button>Continue</button></div><button>Create a passkey</button>'
+                        : v === 'done' ? '<div role="dialog"><button>Done</button></div>'
+                            : v === 'blocked' ? '<div role="alert">passkeys are not enabled here</div><a href="https://support.google.com/a/answer/0">Learn more</a>'
+                                : '<ul><li>a passkey</li></ul>';
+                return send(200, page(`<p>enter your password</p>${body}`));
+            }
             default:
                 return send(404, page('<h1>not found</h1>'));
         }
@@ -101,7 +144,7 @@ export async function startPasskeyFixture() {
     return {
         holderOrigin,
         otherOrigin,
-        policy: { holderOrigin, apexHost: RP_ID, allowInsecure: true },
+        policy: { holderOrigin, apexHost: RP_ID, allowInsecure: true, accountOrigin: otherOrigin },
         close: async () => {
             await Promise.all([
                 new Promise((r) => holder.close(() => r())),

package/dist/core/PasskeyWebAuthnFixture.js.map

@@ -1 +1 @@
-{"version":3,"file":"PasskeyWebAuthnFixture.js","sourceRoot":"","sources":["../../src/core/PasskeyWebAuthnFixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,KAAK,GAAG,WAAW,CAAC;AAE1B,SAAS,IAAI,CAAC,IAAY,EAAE,KAAK,GAAG,iBAAiB;IACnD,OAAO,2DAA2D,KAAK,wBAAwB,IAAI;;;;;;;;kBAQnF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;;;;;;;;cAWzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;;;wBAMX,CAAC;AACzB,CAAC;AAED,SAAS,OAAO,CAAC,UAAwB,EAAE,WAAyB;IAClE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,UAAkC,EAAE,EAAE,EAAE;YAClF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YAClF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrB,KAAK,GAAG;gBACN,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;;;;4CAIc,CAAC,CAAC,CAAC;YACzC,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC3C,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,0CAA0C,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACrG,KAAK,uBAAuB;gBAC1B,uEAAuE;gBACvE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,+CAA+C,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC5I,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,qFAAqF,CAAC,CAAC,CAAC;YAChH,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC3C,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oCAAoC,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC;YACpF,CAAC;YACD;gBACE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAClE,CAAC,CAAC;IACH,YAAY,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAC5E,WAAW,GAAG,oBAAqB,KAAK,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAC1E,OAAO;QACL,YAAY;QACZ,WAAW;QACX,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;QAC9D,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"PasskeyWebAuthnFixture.js","sourceRoot":"","sources":["../../src/core/PasskeyWebAuthnFixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,KAAK,GAAG,WAAW,CAAC;AAE1B,SAAS,IAAI,CAAC,IAAY,EAAE,KAAK,GAAG,iBAAiB;IACnD,OAAO,2DAA2D,KAAK,wBAAwB,IAAI;;;;;;;;kBAQnF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;;;;;;;;cAWzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;;;wBAMX,CAAC;AACzB,CAAC;AAED,SAAS,OAAO,CAAC,UAAwB,EAAE,WAAyB;IAClE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,UAAkC,EAAE,EAAE,EAAE;YAClF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YAClF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrB,KAAK,GAAG;gBACN,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;;;;4CAIc,CAAC,CAAC,CAAC;YACzC,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC3C,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,0CAA0C,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACrG,KAAK,uBAAuB;gBAC1B,uEAAuE;gBACvE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,+CAA+C,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC5I,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,qFAAqF,CAAC,CAAC,CAAC;YAChH,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC3C,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oCAAoC,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,mFAAmF;YACnF,iFAAiF;YACjF,0EAA0E;YAC1E,+EAA+E;YAC/E,KAAK,eAAe;gBAClB,mFAAmF;gBACnF,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;YAC9F,KAAK,uBAAuB;gBAC1B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,8GAA8G,CAAC,CAAC,CAAC;YACzI,KAAK,iCAAiC,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,CAAC;gBACpD,kFAAkF;gBAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,KAAK,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gHAAgH,CAAC;gBAC9I,6FAA6F;gBAC7F,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,yEAAyE,KAAK;;YAEhG,IAAI,GAAG,KAAK;yIACiH,CAAC,CAAC,CAAC;YACtI,CAAC;YACD,KAAK,2BAA2B;gBAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,6FAA6F,CAAC,CAAC,CAAC;YACxH,KAAK,yBAAyB;gBAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,yGAAyG,CAAC,CAAC,CAAC;YACpI,KAAK,gCAAgC;gBACnC,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oGAAoG,CAAC,CAAC,CAAC;YAC/H,KAAK,8BAA8B,CAAC,CAAC,CAAC;gBACpC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;gBACxD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,6BAA6B,OAAO,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,EAAE;;kIAEI,CAAC,CAAC,CAAC;YAC/H,CAAC;YACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;gBAC9C,MAAM,IAAI,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,mCAAmC;oBAC/D,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,qFAAqF;wBACzG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,gDAAgD;4BACjE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,qHAAqH;gCACzI,CAAC,CAAC,6BAA6B,CAAC;gBAClC,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD;gBACE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAClE,CAAC,CAAC;IACH,YAAY,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAC5E,WAAW,GAAG,oBAAqB,KAAK,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAC1E,OAAO;QACL,YAAY;QACZ,WAAW;QACX,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE;QAC1F,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "c55d201d822f8706b0dc50ce21b0b8298b4ac470543cfe46d8988da03b0d34b9",
-  "packageVersion": "1.3.1262",
+  "packageVersion": "1.3.1263",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/dist/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "e2e30192142df3c20c6cb63d0ee4e654aafd20e8f2a33124f13ec9fc0287cbd0",
+  "sha256": "ab76a4f6a4b8d97882686bf355e67b63bcc1d0ceb39d01fd72bf8c4cc5741f85",
   "registrySha256": "c55d201d822f8706b0dc50ce21b0b8298b4ac470543cfe46d8988da03b0d34b9",
-  "packageVersion": "1.3.1262"
+  "packageVersion": "1.3.1263"
 }

package/dist/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "c55d201d822f8706b0dc50ce21b0b8298b4ac470543cfe46d8988da03b0d34b9",
   "articleCount": 91,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1262"
+  "packageVersion": "1.3.1263"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1262",
+  "version": "1.3.1263",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-09-23T14:36:04.969Z",
-  "instarVersion": "1.3.1262",
+  "generatedAt": "2026-09-23T15:50:11.164Z",
+  "instarVersion": "1.3.1263",
   "entryCount": 203,
   "entries": {
     "hook:session-start": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "c55d201d822f8706b0dc50ce21b0b8298b4ac470543cfe46d8988da03b0d34b9",
-  "packageVersion": "1.3.1262",
+  "packageVersion": "1.3.1263",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "e2e30192142df3c20c6cb63d0ee4e654aafd20e8f2a33124f13ec9fc0287cbd0",
+  "sha256": "ab76a4f6a4b8d97882686bf355e67b63bcc1d0ceb39d01fd72bf8c4cc5741f85",
   "registrySha256": "c55d201d822f8706b0dc50ce21b0b8298b4ac470543cfe46d8988da03b0d34b9",
-  "packageVersion": "1.3.1262"
+  "packageVersion": "1.3.1263"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "c55d201d822f8706b0dc50ce21b0b8298b4ac470543cfe46d8988da03b0d34b9",
   "articleCount": 91,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1262"
+  "packageVersion": "1.3.1263"
 }

package/upgrades/1.3.1263.md

@@ -0,0 +1,38 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Seventh increment of the approved agent-held Google passkeys spec
+(`docs/specs/agent-held-google-passkey.md` §3.6). The sign-in repair browser now recognises the twelve
+Google pages the passkey work can meet — the account identifier, the passkey prompt and its
+not-recognised / throttled states, authenticator-code and backup-code entry, the enrollment speedbump
+and its confirm, CAPTCHA / risk review, and the passkey settings page's list / create / confirm /
+already-enrolled / Workspace-refusal shapes — by structure (exact origin, sign-in route, stable ids,
+roles, exact control labels), before its older text-based chain runs. Each page carries a fixed
+outcome (`ready` only with an observed assertion, one credential and an identity match; rejected
+only from the not-recognised page; uncertain is `unknown`) and a fixed list of actions the supervisor
+may pick from. A credential-creating control enters that list only on its exact page and only in an
+enrollment drive; a sign-in can decline the speedbump but never mint.
+
+Still dark: nothing enrolls, proves, or uses a passkey yet, and these pages are only ever exercised
+against the local fixture.
+
+## What to Tell Your User
+
+Nothing changes for you in this update. It's groundwork: your agent's sign-in repair now knows exactly
+which Google passkey screens exist and what it is allowed to do on each, so the enrollment step that
+comes next can be careful by construction.
+
+## Summary of New Capabilities
+
+- Structural recognition of the closed set of Google passkey pages, evaluated before text matching.
+- A fixed outcome mapping and a structural floor on credential-creating actions in the repair driver.
+
+## Evidence
+
+- `tests/unit/google-passkey-page-classes.test.ts`, `tests/unit/anthropic-relogin-driver-page-classes.test.ts`;
+  `tests/integration/passkey-page-classes-fixture.test.ts` (real Chrome against the local fixture:
+  structure wins over prose on every page, unmatched pages fall through, new controls click by exact label).