humanish 0.104.2 → 0.104.3

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.104.2`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.104.3`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -1,8 +1,10 @@
 # Current Goals
 
-Status date: 2026-09-28. Source baseline: `0.104.2`.
+Status date: 2026-09-28. Source baseline: `0.104.3`.
 
-This page guides work on current source. Version `0.104.2` preserves video
+This page guides work on current source. Version `0.104.3` exposes the documented
+loopback SMTP catch for operator-hosted apps and fails startup if its port is busy; see the
+[release note](../release/0.104.3-local-smtp-catch.md). Version `0.104.2` preserves video
 capture timestamp precision through encoding; see its
 [release note](../release/0.104.2-recording-timestamps.md). Version `0.104.1` bounds the recording
 mix buffer to remove the reproduced initial video gap; see its
@@ -104,7 +106,7 @@ requires decision-equivalent retained evidence and a real deletion branch.
 No first-party deletion branch has met that gate. Public demonstrations do not
 substitute for it.
 
-## Current Program Truth (source `0.104.2`)
+## Current Program Truth (source `0.104.3`)
 
 | Surface | Available in source | Remaining boundary |
 | --- | --- | --- |

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.104.2` (2026-09-28). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to `0.42.0`. The containment boundary introduced in
+Package/source version in this tree: `0.104.3` (2026-09-28). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to `0.42.0`. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until
@@ -54,6 +54,9 @@ If a change does not improve one of those loops, it probably belongs elsewhere.
 
 ## Current State
 
+The [0.104.3 release note](../release/0.104.3-local-smtp-catch.md)
+describes SMTP capture for apps hosted by the study operator.
+
 The [0.104.2 release note](../release/0.104.2-recording-timestamps.md)
 describes video capture timestamp precision and retained recording limits.
 

package/docs/release/0.104.3-local-smtp-catch.md

@@ -0,0 +1,15 @@
+# 0.104.3 — SMTP capture for local app studies
+
+`humanish comms catch --smtp-port 1025` now opens the documented loopback
+SMTP listener. Previously, the host CLI rejected the option even though the
+shared catch already supported SMTP. Apps that send verification mail over SMTP
+can use the same recipient inbox and evidence pipeline as HTTP-based apps.
+
+The optional SMTP port must be valid and distinct from the HTTP capture and
+read-only inbox ports. A busy SMTP port now stops startup before HTTP health
+can report success; previously its background thread failed while HTTP stayed
+healthy. SMTP remains bound to loopback, and omitting the option preserves
+HTTP-only capture. No mailbox provider or runtime image change is needed.
+
+See [the inbox setup guide](../architecture/comms-inbox.md) for app and lab
+configuration. Fixes #878.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.104.2",
+  "version": "0.104.3",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [