humanish 0.0.1 → 0.15.0

package/dist/image-evidence.js

@@ -0,0 +1,33 @@
+export function screenshotEvidenceError(relativePath, bytes) {
+    const extension = relativePath.toLowerCase().split(".").pop() ?? "";
+    if (extension === "png") {
+        return hasPrefix(bytes, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a])
+            ? null
+            : "expected PNG signature";
+    }
+    if (extension === "jpg" || extension === "jpeg") {
+        return hasPrefix(bytes, [0xff, 0xd8, 0xff]) ? null : "expected JPEG signature";
+    }
+    if (extension === "webp") {
+        return bytes.length >= 12
+            && bytes.subarray(0, 4).toString("ascii") === "RIFF"
+            && bytes.subarray(8, 12).toString("ascii") === "WEBP"
+            ? null
+            : "expected WEBP signature";
+    }
+    if (extension === "gif") {
+        const signature = bytes.subarray(0, 6).toString("ascii");
+        return signature === "GIF87a" || signature === "GIF89a" ? null : "expected GIF signature";
+    }
+    return `unsupported screenshot extension .${extension || "unknown"}`;
+}
+export function assertScreenshotEvidence(relativePath, bytes) {
+    const error = screenshotEvidenceError(relativePath, bytes);
+    if (error) {
+        throw new Error(`Invalid screenshot evidence ${relativePath}: ${error}`);
+    }
+}
+function hasPrefix(bytes, prefix) {
+    return bytes.length >= prefix.length && prefix.every((value, index) => bytes[index] === value);
+}
+//# sourceMappingURL=image-evidence.js.map

package/dist/image-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-evidence.js","sourceRoot":"","sources":["../src/image-evidence.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,KAAa;IACzE,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAEpE,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,wBAAwB,CAAC;IAC/B,CAAC;IAED,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACjF,CAAC;IAED,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE;eACpB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;eACjD,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;YACrD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,yBAAyB,CAAC;IAChC,CAAC;IAED,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC5F,CAAC;IAED,OAAO,qCAAqC,SAAS,IAAI,SAAS,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAoB,EAAE,KAAa;IAC1E,MAAM,KAAK,GAAG,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,KAAK,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,MAAgB;IAChD,OAAO,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;AACjG,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,63 @@
+export { ACTOR_TRACE_SCHEMA, CODEX_APP_SERVER_CAPABILITIES, SCRIPTED_BROWSER_CAPABILITIES, TERMINAL_AGENT_CAPABILITIES, codexResultToActorTrace, codexStatusToCompletionReason } from "./actor-contract.js";
+export type { ActorCapabilities, ActorCompletionReason, ActorLane, ActorPersonaRef, ActorProtocol, ActorStatus, ActorTokenUsage, ActorTrace, ActorTraceItem, ActorTraceItemKind } from "./actor-contract.js";
+export { actorRegistry, getActor, isCuaActorDescriptor, isScriptedBrowserActorDescriptor, isTerminalActorDescriptor } from "./actor-registry.js";
+export type { ActorDescriptor, ActorId, CuaActorDescriptor, ScriptedBrowserActorDescriptor, TerminalActorDescriptor } from "./actor-registry.js";
+export { TERMINAL_AGENT_NOT_IMPLEMENTED_CODE, runTerminalAgentSession } from "./terminal-agent-actor.js";
+export type { TerminalAgentSessionOptions, TerminalAgentSessionResult } from "./terminal-agent-actor.js";
+export { describeCuaAction, runComputerUseLoop } from "./computer-use.js";
+export type { CuaAction, CuaExecutor, CuaLoopOptions, CuaLoopResult, CuaObservation, CuaProvider, CuaSafetyCheck, CuaTurn, CuaTurnRequest } from "./computer-use.js";
+export { runCuaActorSession } from "./computer-use-actor.js";
+export type { CuaActorSessionOptions } from "./computer-use-actor.js";
+export { createE2BDesktopExecutor } from "./e2b-desktop-executor.js";
+export type { E2BDesktopExecutorOptions, E2BDesktopLike } from "./e2b-desktop-executor.js";
+export { loadE2BDesktopModule } from "./e2b-desktop-launch.js";
+export type { E2BDesktopModule, E2BDesktopSandbox } from "./e2b-desktop-launch.js";
+export { DEFAULT_OPENAI_CU_MODEL, OPENAI_RESPONSES_CU_CAPABILITIES, createOpenAiResponsesProvider } from "./openai-responses-cu.js";
+export type { FetchLike, OpenAiResponsesProviderOptions } from "./openai-responses-cu.js";
+export { adapterScoreFailureMessage, applyAdapterScoreFailureToReview, applyBrowserAdapterHooks } from "./adapter-extension.js";
+export type { BrowserAdapterBackend, BrowserLabAdapterHooks, BrowserLabScoringContext } from "./adapter-extension.js";
+export type { RedactionHooks } from "./redaction.js";
+export { normalizeCliArgv } from "./argv.js";
+export { CODEX_APP_SERVER_UI_SCHEMA, startCodexAppServerUi } from "./codex-app-server-ui.js";
+export type { CodexAppServerUiController, CodexAppServerUiOptions, CodexAppServerUiState } from "./codex-app-server-ui.js";
+export { CODEX_APP_SERVER_TRACE_SCHEMA, runCodexAppServerSession } from "./codex-app-server.js";
+export type { CodexAppServerRunOptions, CodexAppServerRunResult, CodexAppServerTrace } from "./codex-app-server.js";
+export { FEEDBACK_RESULT_SCHEMA, FEEDBACK_SCHEMA, draftFeedback, listFeedback, renderIssueMarkdown, renderIssueUrl, verifyFeedback } from "./feedback.js";
+export type { FeedbackDraft, FeedbackResult } from "./feedback.js";
+export { INIT_RESPONSE_SCHEMA, runInit } from "./init.js";
+export type { InitChange, InitMode, InitOptions, InitResult } from "./init.js";
+export { OBSERVER_DATA_SCHEMA, buildObserverData, stripAnsi } from "./observer-data.js";
+export type { ObserverData, ObserverStream } from "./observer-data.js";
+export { OBSERVER_SCHEMA, openTarget, renderObserver, serveObserver } from "./observer.js";
+export type { ObserverOptions, ObserverResult, ObserverServeOptions, ObserverServer } from "./observer.js";
+export { OBSERVER_STATIC_HOST, createObserverStaticHandler, observerStaticContentType, respondToObserverStaticRequest, serveObserverStatic } from "./observer-static.js";
+export type { ObserverStaticHandlerOptions, ObserverStaticServeOptions, ObserverStaticServer } from "./observer-static.js";
+export { DEFAULT_OSS_REPOS, OSS_LAB_SCHEMA, normalizeOssRepoSlugs, runOssLab, validateOssRepoSlug } from "./oss-lab.js";
+export type { OssLabOptions, OssLabRepoResult, OssLabResult, OssLabStep } from "./oss-lab.js";
+export { CLEANUP_SCHEMA, DOCTOR_SCHEMA, REVIEW_SCHEMA, RUNS_SCHEMA, RUN_BUNDLE_SCHEMA, VERIFY_SCHEMA, cleanupRun, doctor, extractLocalActorVerdict, listRuns, normalizeLocalActorTranscript, readReview, runDryRun, verifyRun } from "./run.js";
+export { SHARED_WORLD_SCHEMA } from "./run.js";
+export type { CleanupAdapterResult, CleanupResourceResult, CleanupResult, DoctorResult, ReviewSummary, RunAdapterArtifact, RunAdapterScore, RunAttributionClass, RunBundle, RunEvent, RunFeedbackCandidate, RunMeaningfulUseComponentId, RunMeaningfulUseScore, RunCleanupHooks, RunOptions, RunProviderResource, RunResult, RunSimulation, RunStream, RunStreamKind, RunSubjectProvenance, RunSubjectStateStepRecord, RunsResult, SharedWorldCheckpoint, SharedWorldEvidence, SharedWorldLaneWindow, SharedWorldOutcome, SharedWorldPlane, SharedWorldStateSnapshot, SharedWorldTimelineEntry, SharedWorldTurn, VerifyResult } from "./run.js";
+export { CUA_ACTOR_LAB_PROVIDER_METADATA, CUA_ACTOR_LAB_SCHEMA, CUA_FANOUT_STRATEGY, buildCuaBundle, buildCuaFanoutBundle, resolveCuaLanePlan, runCuaActorLab } from "./cua-actor-lab.js";
+export type { CuaActorLabErrorCode, CuaActorLabHooks, CuaActorLabResult, CuaLanePlan, CuaLanePlanEntry, CuaLaneResult, CuaLaneSummary, CuaSubjectProjection, RunCuaActorLabOptions, SubjectPhaseEvent } from "./cua-actor-lab.js";
+export { SCRIPTED_BROWSER_PROVIDER, runScriptedBrowserSession } from "./scripted-browser-actor.js";
+export type { BrowserPersonaJourney, BrowserSurface, ScriptedBrowserLaunchArgs, ScriptedBrowserLike, ScriptedBrowserSessionOptions, ScriptedBrowserSessionResult, ScriptedLocatorLike, ScriptedPageLike } from "./scripted-browser-actor.js";
+export { SCRIPTED_BROWSER_LAB_SCHEMA, buildScriptedLabBundle, runScriptedBrowserLab } from "./scripted-browser-lab.js";
+export type { RunScriptedBrowserLabOptions, ScriptedBrowserLabHooks, ScriptedBrowserLabResult, ScriptedBrowserLabSession } from "./scripted-browser-lab.js";
+export { TERMINAL_PRODUCT_LAB_SCHEMA, buildTerminalProductBundle, runTerminalProductLab } from "./e2b-terminal-lab.js";
+export type { CommandLogRecord, CostCategory, CostLine, InterventionRecord, LifecycleRecord, NoSpendProof, RunTerminalProductLabOptions, TerminalCostLedger, TerminalLedgers, TerminalProductLabHooks, TerminalProductLabResult, TerminalProductScoringContext } from "./e2b-terminal-lab.js";
+export { SHARED_WORLD_LAB_PROVIDER_METADATA, SHARED_WORLD_LAB_SCHEMA, buildSharedWorldBundle, runSharedWorldLab } from "./shared-world-lab.js";
+export type { RunSharedWorldLabOptions, SharedWorldLabErrorCode, SharedWorldLabHooks, SharedWorldLabResult, SharedWorldRoleResult } from "./shared-world-lab.js";
+export { CONCURRENT_ATTRIBUTION_LIMITS, CONCURRENT_SHARED_WORLD_LAB_SCHEMA, CONCURRENT_SHARED_WORLD_PROVIDER_METADATA, buildConcurrentSharedWorldBundle, runConcurrentSharedWorld } from "./concurrent-shared-world-lab.js";
+export type { ConcurrentSharedWorldLabErrorCode, ConcurrentSharedWorldLabResult, ConcurrentSharedWorldRoleResult, RunConcurrentSharedWorldLabOptions } from "./concurrent-shared-world-lab.js";
+export { probeUrl, readDetachedLog, runDetachedStep, startDetachedProcess } from "./e2b-detached.js";
+export type { DetachedStepOptions, DetachedStepResult, DetachedTimers } from "./e2b-detached.js";
+export { DEFAULT_DEVICE_PRESET, DEVICE_PRESETS, DEVICE_PRESET_NAMES, isDevicePresetName, resolveDevicePreset } from "./device-presets.js";
+export type { DevicePreset, DevicePresetName } from "./device-presets.js";
+export { actorResolvesToTerminal, cuaLaneCount, cuaLaneValidationReason, isHttpUrl, isLoopbackUrl, LAB_CONFIG_SCHEMA, MAX_CUA_LANES, concurrentSharedWorldValidationReason, parseLabConfig, resolveSeatUrl, routesToComputerUse, routesToConcurrentSharedWorld, routesToScriptedBrowser, routesToSharedWorld, routesToTerminalProduct, sharedWorldValidationReason, subjectStateInvalidReason } from "./lab-config.js";
+export type { LabActor, LabActorLane, LabConfig, LabConfigParseResult, LabExecutionTerminal, LabRuntimeAuth, LabScenarioCaps, LabStateStepWhen, LabSubject, LabSubjectProduct, LabSubjectServe, LabSubjectSource, LabSubjectState, LabSubjectStateCheckpoint, LabSubjectStateStep, LabSubjectTopology, LabTerminalStdin, LabTerminalTransport } from "./lab-config.js";
+export { resolveLabDryRun, runLab, selectLabBackend } from "./lab-engine.js";
+export type { LabBackend, LabOutcome, RunLabOptions } from "./lab-engine.js";
+export { LAB_PREFLIGHT_SCHEMA, runLabPreflight } from "./lab-preflight.js";
+export type { LabPreflightCheck, LabPreflightReachabilityMode, LabPreflightResult, LabPreflightSandbox, LabPreflightSpend, LabPreflightTarget, RunLabPreflightOptions } from "./lab-preflight.js";
+export { CLI_RESPONSE_SCHEMA, createProgram } from "./program.js";
+export type { CliIo, UnexpectedErrorEnvelope } from "./program.js";

package/dist/index.js

@@ -0,0 +1,33 @@
+export { ACTOR_TRACE_SCHEMA, CODEX_APP_SERVER_CAPABILITIES, SCRIPTED_BROWSER_CAPABILITIES, TERMINAL_AGENT_CAPABILITIES, codexResultToActorTrace, codexStatusToCompletionReason } from "./actor-contract.js";
+export { actorRegistry, getActor, isCuaActorDescriptor, isScriptedBrowserActorDescriptor, isTerminalActorDescriptor } from "./actor-registry.js";
+export { TERMINAL_AGENT_NOT_IMPLEMENTED_CODE, runTerminalAgentSession } from "./terminal-agent-actor.js";
+export { describeCuaAction, runComputerUseLoop } from "./computer-use.js";
+export { runCuaActorSession } from "./computer-use-actor.js";
+export { createE2BDesktopExecutor } from "./e2b-desktop-executor.js";
+export { loadE2BDesktopModule } from "./e2b-desktop-launch.js";
+export { DEFAULT_OPENAI_CU_MODEL, OPENAI_RESPONSES_CU_CAPABILITIES, createOpenAiResponsesProvider } from "./openai-responses-cu.js";
+export { adapterScoreFailureMessage, applyAdapterScoreFailureToReview, applyBrowserAdapterHooks } from "./adapter-extension.js";
+export { normalizeCliArgv } from "./argv.js";
+export { CODEX_APP_SERVER_UI_SCHEMA, startCodexAppServerUi } from "./codex-app-server-ui.js";
+export { CODEX_APP_SERVER_TRACE_SCHEMA, runCodexAppServerSession } from "./codex-app-server.js";
+export { FEEDBACK_RESULT_SCHEMA, FEEDBACK_SCHEMA, draftFeedback, listFeedback, renderIssueMarkdown, renderIssueUrl, verifyFeedback } from "./feedback.js";
+export { INIT_RESPONSE_SCHEMA, runInit } from "./init.js";
+export { OBSERVER_DATA_SCHEMA, buildObserverData, stripAnsi } from "./observer-data.js";
+export { OBSERVER_SCHEMA, openTarget, renderObserver, serveObserver } from "./observer.js";
+export { OBSERVER_STATIC_HOST, createObserverStaticHandler, observerStaticContentType, respondToObserverStaticRequest, serveObserverStatic } from "./observer-static.js";
+export { DEFAULT_OSS_REPOS, OSS_LAB_SCHEMA, normalizeOssRepoSlugs, runOssLab, validateOssRepoSlug } from "./oss-lab.js";
+export { CLEANUP_SCHEMA, DOCTOR_SCHEMA, REVIEW_SCHEMA, RUNS_SCHEMA, RUN_BUNDLE_SCHEMA, VERIFY_SCHEMA, cleanupRun, doctor, extractLocalActorVerdict, listRuns, normalizeLocalActorTranscript, readReview, runDryRun, verifyRun } from "./run.js";
+export { SHARED_WORLD_SCHEMA } from "./run.js";
+export { CUA_ACTOR_LAB_PROVIDER_METADATA, CUA_ACTOR_LAB_SCHEMA, CUA_FANOUT_STRATEGY, buildCuaBundle, buildCuaFanoutBundle, resolveCuaLanePlan, runCuaActorLab } from "./cua-actor-lab.js";
+export { SCRIPTED_BROWSER_PROVIDER, runScriptedBrowserSession } from "./scripted-browser-actor.js";
+export { SCRIPTED_BROWSER_LAB_SCHEMA, buildScriptedLabBundle, runScriptedBrowserLab } from "./scripted-browser-lab.js";
+export { TERMINAL_PRODUCT_LAB_SCHEMA, buildTerminalProductBundle, runTerminalProductLab } from "./e2b-terminal-lab.js";
+export { SHARED_WORLD_LAB_PROVIDER_METADATA, SHARED_WORLD_LAB_SCHEMA, buildSharedWorldBundle, runSharedWorldLab } from "./shared-world-lab.js";
+export { CONCURRENT_ATTRIBUTION_LIMITS, CONCURRENT_SHARED_WORLD_LAB_SCHEMA, CONCURRENT_SHARED_WORLD_PROVIDER_METADATA, buildConcurrentSharedWorldBundle, runConcurrentSharedWorld } from "./concurrent-shared-world-lab.js";
+export { probeUrl, readDetachedLog, runDetachedStep, startDetachedProcess } from "./e2b-detached.js";
+export { DEFAULT_DEVICE_PRESET, DEVICE_PRESETS, DEVICE_PRESET_NAMES, isDevicePresetName, resolveDevicePreset } from "./device-presets.js";
+export { actorResolvesToTerminal, cuaLaneCount, cuaLaneValidationReason, isHttpUrl, isLoopbackUrl, LAB_CONFIG_SCHEMA, MAX_CUA_LANES, concurrentSharedWorldValidationReason, parseLabConfig, resolveSeatUrl, routesToComputerUse, routesToConcurrentSharedWorld, routesToScriptedBrowser, routesToSharedWorld, routesToTerminalProduct, sharedWorldValidationReason, subjectStateInvalidReason } from "./lab-config.js";
+export { resolveLabDryRun, runLab, selectLabBackend } from "./lab-engine.js";
+export { LAB_PREFLIGHT_SCHEMA, runLabPreflight } from "./lab-preflight.js";
+export { CLI_RESPONSE_SCHEMA, createProgram } from "./program.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAa7B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEjJ,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAY3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,cAAc,EACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,SAAS,EACT,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,wBAAwB,EACxB,QAAQ,EACR,6BAA6B,EAC7B,UAAU,EACV,SAAS,EACT,SAAS,EACV,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAmC/C,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACf,MAAM,oBAAoB,CAAC;AAa5B,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,6BAA6B,CAAC;AAWrC,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAOnC,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAe/B,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,yCAAyC,EACzC,gCAAgC,EAChC,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAErG,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,uBAAuB,EACvB,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,qCAAqC,EACrC,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,iBAAiB,CAAC;AAqBzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAU3E,OAAO,EACL,mBAAmB,EACnB,aAAa,EACd,MAAM,cAAc,CAAC"}

package/dist/init-templates.d.ts

@@ -0,0 +1,12 @@
+export interface StarterFile {
+    path: string;
+    contents: string;
+    plane: "source";
+}
+export interface RuntimeDirectory {
+    path: string;
+    plane: "runtime";
+}
+export declare const starterFiles: StarterFile[];
+export declare const runtimeDirectories: RuntimeDirectory[];
+export declare const humanishScripts: Record<string, string>;

package/dist/init-templates.js

@@ -0,0 +1,369 @@
+export const starterFiles = [
+    {
+        path: "humanish/README.md",
+        plane: "source",
+        contents: `# Humanish
+
+This directory is the committed source of persona simulation intent for this app.
+
+Keep this directory public-safe:
+
+- synthetic personas only;
+- synthetic fixtures only;
+- env var names only, never values;
+- no PII, PHI, secrets, raw private transcripts, private screenshots, customer data, or patient data.
+
+Generated run bundles, screenshots, traces, logs, and local overrides belong in ignored \`.humanish/\`.
+
+Labs:
+
+- committed reusable labs live in humanish/labs/*.yaml;
+- private or machine-local labs live in ignored .humanish/labs/*.yaml or .humanish/local/labs/*.yaml;
+- run a lab with \`humanish watch <lab>\` or \`humanish lab run <lab>\`.
+
+Format standard:
+
+- human-authored Humanish source uses .yaml;
+- executable integration uses .ts;
+- generated artifacts, synthetic fixtures, and event streams use .json or .ndjson;
+- .yml is reserved for outside ecosystem files such as GitHub Actions, not Humanish source.
+`
+    },
+    {
+        path: "humanish/config.ts",
+        plane: "source",
+        contents: `export default {
+  schema: "humanish.config.v1",
+  app: {
+    name: "synthetic-app",
+    baseUrl: "http://localhost:3000",
+    startCommand: "npm run dev"
+  },
+  personasDir: "humanish/personas",
+  scenariosDir: "humanish/scenarios",
+  policiesDir: "humanish/policies",
+  artifactsDir: ".humanish/runs"
+};
+`
+    },
+    {
+        path: "humanish/personas/synthetic-new-user.yaml",
+        plane: "source",
+        contents: `schema: humanish.persona.v1
+id: synthetic-new-user
+name: Synthetic New User
+summary: A privacy-safe first-time user evaluating the app with realistic but synthetic needs.
+traits:
+  patience: medium
+  technical_confidence: medium
+  accessibility_needs: none_declared
+constraints:
+  - Do not use real personal data.
+  - Do not use production accounts.
+  - Treat all credentials as env var names only.
+`
+    },
+    {
+        path: "humanish/personas/skeptical-power-user.yaml",
+        plane: "source",
+        contents: `schema: humanish.persona.v1
+id: skeptical-power-user
+name: Skeptical Power User
+summary: A privacy-safe experienced user looking for speed, reversibility, and clear proof.
+traits:
+  patience: low
+  technical_confidence: high
+  accessibility_needs: keyboard_first
+constraints:
+  - Do not use real personal data.
+  - Prefer synthetic fixture inputs.
+  - Flag unclear recovery paths.
+`
+    },
+    {
+        path: "humanish/scenarios/first-run-smoke.yaml",
+        plane: "source",
+        contents: `schema: humanish.scenario.v1
+id: first-run-smoke
+title: First-run smoke
+persona: synthetic-new-user
+goal: Reach the first meaningful product state without using private data.
+mode: dry-run
+steps:
+  - name: Open the app
+    expectation: The app shell is reachable.
+  - name: Complete the first synthetic action
+    expectation: The user sees a clear next state.
+  - name: Capture review notes
+    expectation: Notes are public-safe and evidence-backed.
+`
+    },
+    {
+        path: "humanish/scenarios/onboarding-regression.yaml",
+        plane: "source",
+        contents: `schema: humanish.scenario.v1
+id: onboarding-regression
+title: Onboarding regression
+persona: skeptical-power-user
+goal: Exercise onboarding friction using synthetic inputs and explicit recovery checks.
+mode: dry-run
+steps:
+  - name: Start onboarding
+    expectation: Required information is clear.
+  - name: Use synthetic fixture data
+    expectation: No real user data is entered.
+  - name: Check recovery path
+    expectation: The user can back out or retry safely.
+`
+    },
+    {
+        path: "humanish/labs/first-run.yaml",
+        plane: "source",
+        contents: `schema: humanish.lab.v2
+id: first-run
+title: First-run synthetic Observer
+description: Public-safe starter lab that generates a synthetic run bundle and Observer without provider spend.
+subject:
+  source: this-repo
+actors:
+  - type: synthetic-persona
+    count: 4
+scenario:
+  mode: dry-run
+defaults:
+  open: true
+`
+    },
+    {
+        path: "humanish/labs/cua-browser.yaml",
+        plane: "source",
+        contents: `schema: humanish.lab.v2
+id: cua-browser
+title: Computer-use browser lab
+description: >-
+  A registered computer-use actor drives your app in a hosted desktop browser and emits an
+  evidence bundle into gitignored .humanish/. Screenshots are full-fidelity (raw) by default;
+  set policies.redactScreenshots: true to blur at capture for a share-as-is bundle. Typed
+  text is recorded as length only. Dry-run by default; switch scenario.mode to live (with
+  OPENAI_API_KEY + E2B_API_KEY via --env-file) for a real session. The clone subject below
+  serves your repo INSIDE the sandbox; declared subject env NAMES are provisioned from
+  --env-file (values are never persisted).
+subject:
+  source: clone
+  repos: [your-org/your-app]
+  serve:
+    install: pnpm install --frozen-lockfile
+    build: pnpm build
+    start: pnpm start
+    url: http://127.0.0.1:3000/
+    # installTimeoutMs: 1200000   # bump for monorepo-scale installs/builds (default 600000)
+    # buildTimeoutMs: 1800000
+  # env: [DATABASE_URL]
+  # state:                        # the subject's STATE story (recorded as provenance):
+  #   seed:                       # ordered, bounded seed/migration/fixture steps (commands are
+  #     - name: db-up             # author-trusted; evidence records sha256 digests, never text)
+  #       command: sudo service postgresql start && pg_isready -t 30
+  #       when: before-start      # before-build | before-start (default) | after-ready
+  #     - name: db-migrate
+  #       command: pnpm prisma migrate deploy
+  #       timeoutMs: 300000       # per-step budget (default 300000)
+  #     - name: admin-user        # after-ready steps run against the RUNNING app
+  #       command: curl -sf -X POST http://127.0.0.1:3000/api/test/bootstrap-admin
+  #       when: after-ready
+  #   # Or point at a shared DB you do NOT control — recorded as UNPINNED in provenance;
+  #   # each name must also be declared in subject.env:
+  #   # external: [DATABASE_URL]
+  # clone:
+  #   keep: true                  # leave the sandbox up on FAILURE so you can debug install/boot
+  # Alternative: drive a deployment you own (Vercel preview, staging) instead of a clone:
+  # source: app-url
+  # appUrl: https://your-preview.vercel.app/
+actors:
+  - type: openai-computer-use
+    persona: first-time-visitor
+    mission: >-
+      Explore the app as a brand-new user trying to complete its primary flow. Note anything
+      confusing. Stop when the flow completes or you are stuck.
+execution:
+  target: e2b-desktop
+  timeoutMs: 300000
+  desktop:
+    device: desktop             # mobile | small-mobile | narrow-mobile | tablet | desktop | wide
+    # browser: chrome            # default | chrome | chromium | firefox; concrete values fail closed
+    # On this route only width/height render (real mobile LAYOUT); the model is told its device.
+    # True touch/DPR/UA emulation comes with the deterministic CDP actor (a later slice).
+scenario:
+  mode: dry-run
+# policies:
+#   redactScreenshots: true       # blur persisted frames (default off — full fidelity for local use)
+#   allowPublicTargets: true      # required to drive a non-loopback app-url (a deployment you own)
+defaults:
+  open: true
+`
+    },
+    {
+        path: "humanish/policies/redaction.yaml",
+        plane: "source",
+        contents: `schema: humanish.redaction-policy.v1
+# Public-safety policy of intent for this project.
+#
+# Enforcement scope: \`humanish verify\` detects the classes under \`enforced\`
+# (secret/key/token shapes and known local-path shapes) and fails closed on a
+# match. It does NOT detect free-form PII/PHI (names, emails, DOBs, MRNs). The
+# classes under \`author_responsibility\` are forbidden in public output but rely
+# on using synthetic data and on review, not automated detection. So
+# \`redaction: passed\` means the secret/path scan found no matches, not that the
+# artifact was certified free of PII/PHI.
+deny:
+  - pii
+  - phi
+  - secrets
+  - tokens
+  - raw_private_transcripts
+  - private_screenshots
+  - customer_data
+  - patient_data
+enforced:
+  - secret_key_token_shapes
+  - known_local_path_shapes
+author_responsibility:
+  - pii
+  - phi
+  - patient_data
+  - customer_data
+  - names_emails_and_other_identifiers
+allow:
+  - synthetic_personas
+  - synthetic_fixtures
+  - env_var_names
+`
+    },
+    {
+        path: "humanish/policies/network.yaml",
+        plane: "source",
+        contents: `schema: humanish.network-policy.v1
+default: local_only
+allowed_hosts:
+  - localhost
+  - 127.0.0.1
+notes:
+  - Add external hosts only after confirming they are safe for public proof artifacts.
+`
+    },
+    {
+        path: "humanish/policies/credentials.example.yaml",
+        plane: "source",
+        contents: `schema: humanish.credentials-policy.v1
+env_names:
+  openai: OPENAI_API_KEY
+  e2b: E2B_API_KEY
+rules:
+  - Store values outside the repository.
+  - Commit env var names only.
+  - Do not paste keys into personas, scenarios, issue drafts, or run bundles.
+`
+    },
+    {
+        path: "humanish/adapters/app.ts",
+        plane: "source",
+        contents: `export const appAdapter = {
+  schema: "humanish.adapter.v1",
+  id: "synthetic-app",
+  name: "Synthetic App",
+  routes: [
+    {
+      id: "home",
+      path: "/",
+      description: "Synthetic app entry point"
+    }
+  ]
+};
+`
+    },
+    {
+        path: "humanish/review/vocabulary.yaml",
+        plane: "source",
+        contents: `schema: humanish.review-vocabulary.v1
+verdicts:
+  - pass
+  - fail
+  - blocked
+  - needs_evidence
+labels:
+  friction: User-visible friction.
+  gap: Missing evidence or missing coverage.
+  public_safety: Potential privacy, secret, or public-boundary issue.
+`
+    },
+    {
+        path: "humanish/review/milestones.yaml",
+        plane: "source",
+        contents: `schema: humanish.milestones.v1
+milestones:
+  - id: first-visible-state
+    description: The first meaningful app state is visible.
+  - id: synthetic-action-complete
+    description: A synthetic user action reaches an expected state.
+  - id: review-ready
+    description: Public-safe evidence is ready for review.
+`
+    },
+    {
+        path: "humanish/coverage-map.md",
+        plane: "source",
+        contents: `# Coverage Map
+
+This file should enumerate screens, roles, states, and paths before scenarios are treated as complete.
+
+Current starter coverage is intentionally minimal and synthetic.
+`
+    },
+    {
+        path: "humanish/coverage-matrix.md",
+        plane: "source",
+        contents: `# Coverage Matrix
+
+| Area | Persona | Happy Path | Sad Path | Status |
+| --- | --- | --- | --- | --- |
+| First run | synthetic-new-user | planned | planned | starter |
+| Onboarding | skeptical-power-user | planned | planned | starter |
+`
+    },
+    {
+        path: "humanish/fixtures/synthetic-login-state.json",
+        plane: "source",
+        contents: `{
+  "schema": "humanish.synthetic-fixture.v1",
+  "kind": "login-state",
+  "user": {
+    "id": "synthetic-user-001",
+    "email": "synthetic.user@example.test"
+  },
+  "notes": [
+    "Synthetic fixture only.",
+    "Do not replace with real user data."
+  ]
+}
+`
+    }
+];
+export const runtimeDirectories = [
+    { path: ".humanish/runs", plane: "runtime" },
+    { path: ".humanish/cache", plane: "runtime" },
+    { path: ".humanish/tmp", plane: "runtime" },
+    { path: ".humanish/logs", plane: "runtime" },
+    { path: ".humanish/labs", plane: "runtime" },
+    { path: ".humanish/local/labs", plane: "runtime" },
+    { path: ".humanish/local/personas", plane: "runtime" },
+    { path: ".humanish/local/policies", plane: "runtime" },
+    { path: ".humanish/secrets", plane: "runtime" }
+];
+export const humanishScripts = {
+    humanish: "humanish",
+    "humanish:doctor": "humanish doctor",
+    "humanish:run": "humanish run --dry-run",
+    "humanish:watch": "humanish watch",
+    "humanish:watch:ci": "humanish watch --json --no-open",
+    "humanish:verify": "humanish verify"
+};
+//# sourceMappingURL=init-templates.js.map

package/dist/init-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-templates.js","sourceRoot":"","sources":["../src/init-templates.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC;QACE,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBb;KACE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;CAYb;KACE;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;CAYb;KACE;IACD;QACE,IAAI,EAAE,6CAA6C;QACnD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;CAYb;KACE;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;;CAab;KACE;IACD;QACE,IAAI,EAAE,+CAA+C;QACrD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;;CAab;KACE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;;CAab;KACE;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Db;KACE;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCb;KACE;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;CAOb;KACE;IACD;QACE,IAAI,EAAE,4CAA4C;QAClD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;CAQb;KACE;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;CAYb;KACE;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;CAUb;KACE;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;CAQb;KACE;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;CAKb;KACE;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;CAMb;KACE;IACD;QACE,IAAI,EAAE,8CAA8C;QACpD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;;;;;;;;;;;;CAYb;KACE;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE;IAC5C,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;IAC7C,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE;IAC3C,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE;IAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE;IAC5C,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE;IAClD,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE;IACtD,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE;IACtD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE;CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,QAAQ,EAAE,UAAU;IACpB,iBAAiB,EAAE,iBAAiB;IACpC,cAAc,EAAE,wBAAwB;IACxC,gBAAgB,EAAE,gBAAgB;IAClC,mBAAmB,EAAE,iCAAiC;IACtD,iBAAiB,EAAE,iBAAiB;CACrC,CAAC"}

package/dist/init.d.ts

@@ -0,0 +1,26 @@
+export declare const INIT_RESPONSE_SCHEMA = "humanish.init-result.v1";
+export interface InitOptions {
+    cwd: string;
+    dryRun?: boolean;
+    yes?: boolean;
+}
+export type InitMode = "dry-run" | "applied" | "needs-confirmation";
+export interface InitChange {
+    path: string;
+    action: "create" | "mkdir" | "update" | "skip";
+    target: "source" | "runtime" | "gitignore" | "package-json";
+    reason: string;
+}
+export interface InitResult {
+    schema: typeof INIT_RESPONSE_SCHEMA;
+    ok: boolean;
+    mode: InitMode;
+    cwd: string;
+    changes: InitChange[];
+    warnings: string[];
+    error?: {
+        code: "HUMANISH_CONFIRMATION_REQUIRED" | "HUMANISH_INVALID_CWD" | "HUMANISH_INVALID_PACKAGE_JSON";
+        message: string;
+    };
+}
+export declare function runInit(options: InitOptions): Promise<InitResult>;