domain-skills/alaska: full checkout flow

[bilaldaqqah]

End-to-end booking on alaskaair.com — Auro Design System + CyberSource PCI iframe.

Highlights

• Auro Design System web components (AURO-INPUT, AURO-SELECT) silently reject .value + synthetic events: form visually fills but Auro's validator flags "Invalid
  email/phone/zip/day/year" on Continue. Must type real keystrokes for inputs; for selects, click auro-menuoption[value=...] child elements after opening.
• CyberSource PCI iframe — same OOPIF pattern as TokenEx: cdp("Target.getTargets") filtered on cybersource.com, then js("document.getElementById('number').focus()", target_id=...) followed by type_text(...) routes to #number (PAN) and #securityCode (CVV).
• Results deep link skips the homepage promo modal: /search/results?O=SEA&D=PDX&OD=2026-04-29&A=1&....
• Flow: /search/results → /search/cart → /book/guest-info → /book/seat-selection → /book/checkout.
• reCAPTCHA Enterprise badge present on checkout but never challenged from real Chrome.
• Saver upsell dialog: FS-AURO-BUTTON containing "Continue with Saver" text.
• Guest-info silent failure: URL doesn't change if Auro validation fails — must check URL, not assume navigation.

---

Summary by cubic

Adds a new alaska domain skill guide for automating guest checkout on alaskaair.com from search results to the card-entry form, covering Auro components and CyberSource Microform iframe handling.

• New Features
  • Added domain-skills/alaska/checkout.md with the full flow: results → cart → guest-info → seat-selection → checkout.
  • Reliable input patterns for AURO-INPUT/AURO-SELECT (type and click options; avoid .value and synthetic events).
  • CyberSource iframe strategy: find frames via Target.getTargets, focus #number/#securityCode with JS, then type_text.
  • Stable selectors, waits, and traps (Saver upsell, hidden insurance radios, money/points toggle, reCAPTCHA badge).

^{Written for commit 99c7455. Summary will update on new commits.}

[browser-harness-review]

✅ Skill review passed

Reviewed 1 file(s) — no findings.

[cubic-dev-ai]

No issues found across 1 file