humanish 0.104.3 → 0.106.0

package/dist/telemetry.js

@@ -1,324 +0,0 @@
-// Anonymous usage telemetry, on the convention Next.js and the Vercel CLI established: collected by
-// default, disclosed the first time it happens, trivially switched off, and inspectable.
-//
-// WHY IT EXISTS: humanish shipped 61 releases without being able to answer "does anyone get to a
-// working first run". The funnel was broken at the first live run for months and we learned it from
-// an adoption post-mortem, not from data. A tool that cannot see its own activation is guessing.
-//
-// WHAT IT WILL NEVER SEND, and this is stricter than the convention because of what humanish is:
-// no paths, no cwd, no repo names, no URLs, no lab titles or ids that are not our own starter labs,
-// no persona or mission text, no run ids, no evidence, no key values, no key names. A study's
-// subject is the adopter's product and often unannounced; leaking a lab id would leak a roadmap.
-// The allowlist below is the whole vocabulary — anything not on it cannot be sent by construction.
-import { isCuaDiagnosticCategory, isCuaDiagnosticStopCause } from "./cua-diagnostics.js";
-import { randomUUID } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import path from "node:path";
-/** Write-only PostHog project key. Public by design — it can ingest, and can read nothing. */
-const INGEST_KEY = "phc_oeMeBqxDZhZ9tCHMSnuDFimLqHpU5Myc847WD33hAh4C";
-const INGEST_HOST = "https://us.i.posthog.com";
-/** The ONLY lab ids that may be named. Ours, shipped by `init`; everything else is "custom". */
-const STARTER_LABS = new Set(["first-run", "try-live", "cua-browser", "lobby-trivia-3player", "oss"]);
-export function telemetryStatePath(env = process.env, home = homedir()) {
-    const declared = env.XDG_CONFIG_HOME?.trim();
-    // Same XDG rule the key store uses: a relative value MUST be ignored, or state becomes
-    // cwd-relative and follows people between projects.
-    const configHome = declared !== undefined && declared !== "" && path.isAbsolute(declared)
-        ? declared
-        : path.join(home, ".config");
-    return path.join(configHome, "humanish", "telemetry.json");
-}
-/**
- * Off means off, from any of the three switches people already expect: the cross-tool
- * `DO_NOT_TRACK` standard, our own env var, and the persisted opt-out.
- */
-export function disabledByEnvironment(env) {
-    const truthy = (value) => value !== undefined && value.trim() !== "" && value.trim() !== "0" && value.trim().toLowerCase() !== "false";
-    return (truthy(env.DO_NOT_TRACK)
-        || truthy(env.HUMANISH_TELEMETRY_DISABLED)
-        // Our OWN development and test runs must never reach the adoption dataset. In the first two
-        // days after telemetry shipped, 82% of events (4,042 of 4,932, from 49 of 59 anonymous ids)
-        // came from humanish's own CI and suite: ~50 ids each running nearly every subcommand about
-        // once, which is the shape of a test matrix and not of people. That made the one number whose
-        // job is measuring adoption measure us instead.
-        //
-        // Deliberately NOT keyed on CI. An adopter running humanish in their pipeline is real usage
-        // and stays countable; the `ci` property already separates it, which is what Next.js does.
-        // This keys on being inside the humanish source tree, which only we ever are.
-        || truthy(env.HUMANISH_DEV));
-}
-/**
- * True when this process is running from a humanish SOURCE CHECKOUT rather than an install.
- *
- * Checked by walking up from cwd for a package.json whose name is `humanish` AND which carries
- * this repo's private marker. An adopter with a dependency named humanish in node_modules is not
- * matched: node_modules copies are skipped, and a consumer's own package.json has a different
- * name. Falls back to "not a checkout" on any read error, because the failure direction that
- * loses one event is better than the one that silently disables real telemetry.
- */
-export function inHumanishCheckout(startDir, readFileSyncFn) {
-    let dir = path.resolve(startDir);
-    // Any node_modules ANYWHERE in the path means this is an installed copy, not our checkout.
-    // Checking only the basename missed `/app/node_modules/humanish`, which is the single most
-    // likely real-world path to get wrong: it would silence a genuine adopter.
-    if (dir.split(path.sep).includes("node_modules"))
-        return false;
-    for (let depth = 0; depth < 12; depth += 1) {
-        try {
-            const parsed = JSON.parse(readFileSyncFn(path.join(dir, "package.json")));
-            if (parsed.name === "humanish")
-                return true;
-        }
-        catch {
-            // No package.json here, or unreadable. Keep walking up.
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    return false;
-}
-/**
- * Is this command one of OUR runs, whichever directory it was started from? Two walks: from the
- * cwd (catches `pnpm humanish ...` inside the repo) and from the running CLI's own directory
- * (catches a test, TUI smoke or release-dogfood host that spawns dist/cli.js into a temp
- * directory with a constructed env). The second walk is the one the 0.63.0 fix lacked: one
- * development box put 1,251 events into the adopter metric between 2026-08-31 and 09-03 through
- * exactly those spawns. An installed copy lives under node_modules and is never matched, so an
- * adopter running from their own project still reports.
- */
-export function isOwnCheckoutRun(cwd, cliDir, readFileSyncFn) {
-    return inHumanishCheckout(cwd, readFileSyncFn) || inHumanishCheckout(cliDir, readFileSyncFn);
-}
-export async function readTelemetryState(env = process.env, home = homedir()) {
-    try {
-        const raw = await readFile(telemetryStatePath(env, home), "utf8");
-        const parsed = JSON.parse(raw);
-        return {
-            enabled: parsed.enabled !== false,
-            anonymousId: typeof parsed.anonymousId === "string" ? parsed.anonymousId : randomUUID(),
-            noticed: parsed.noticed === true
-        };
-    }
-    catch {
-        return { enabled: true, anonymousId: randomUUID(), noticed: false };
-    }
-}
-export async function writeTelemetryState(state, env = process.env, home = homedir()) {
-    const file = telemetryStatePath(env, home);
-    await mkdir(path.dirname(file), { recursive: true });
-    await writeFile(file, `${JSON.stringify(state, null, 2)}\n`, "utf8");
-}
-/** Coarse enough that a duration cannot fingerprint a session. */
-export function durationBucket(ms) {
-    if (ms < 1_000)
-        return "<1s";
-    if (ms < 10_000)
-        return "1-10s";
-    if (ms < 60_000)
-        return "10-60s";
-    if (ms < 300_000)
-        return "1-5m";
-    if (ms < 900_000)
-        return "5-15m";
-    return ">15m";
-}
-/** A lab id only if it is one of ours. An adopter's lab id can name an unannounced product. */
-export function safeLabId(lab) {
-    if (lab === undefined)
-        return undefined;
-    return STARTER_LABS.has(lab) ? lab : "custom";
-}
-/**
- * The exact document that would be sent. Built separately from sending so that
- * `HUMANISH_TELEMETRY_DEBUG=1` can show it and so tests can assert on it — "you can read exactly
- * what we collect" is the part of this convention that makes it honest rather than merely legal.
- */
-export function buildPayload(args) {
-    const env = args.env ?? process.env;
-    const properties = {
-        // Ask the receiver not to derive a location from the request. "Anonymous" and "tied to
-        // nothing" are only true if the collector honours them too: PostHog enriches every event
-        // with GeoIP city/coordinates from the source address unless told not to, and the project
-        // is additionally set to discard the client IP at ingestion (`anonymize_ips`). Both, so that
-        // neither a default nor a console setting decides what the doc promised.
-        $geoip_disable: true,
-        // No person profile. PostHog builds one per distinct_id by default and attaches $set /
-        // $set_once properties to it (before 2026-09-01 those carried a city and coordinates). An
-        // anonymous machine id has nothing to profile, and PostHog's own docs name this flag as the
-        // way to say so.
-        $process_person_profile: false,
-        version: args.version,
-        os: args.platform ?? process.platform,
-        node: (args.nodeVersion ?? process.version).split(".")[0].replace("v", ""),
-        ci: env.CI !== undefined && env.CI !== "" && env.CI !== "0",
-        // A humanish study participant is a real cold install on a machine we do not own, so it emits
-        // like any other new adopter and is indistinguishable from one. It is also the exact
-        // population we are trying to count, so a busy self-study day reads as an adoption spike.
-        // Stamped rather than suppressed, the same shape as `ci`: participant runs stay visible and
-        // stay separable, and we keep a genuine measurement of what a cold install does (#546).
-        studyParticipant: env.HUMANISH_STUDY_PARTICIPANT !== undefined
-            && env.HUMANISH_STUDY_PARTICIPANT !== ""
-            && env.HUMANISH_STUDY_PARTICIPANT !== "0"
-    };
-    const given = args.properties ?? {};
-    if (given.command !== undefined)
-        properties.command = given.command;
-    if (given.lab !== undefined)
-        properties.lab = given.lab;
-    if (given.mode !== undefined)
-        properties.mode = given.mode;
-    if (given.outcome !== undefined)
-        properties.outcome = given.outcome;
-    if (given.durationBucket !== undefined)
-        properties.duration = given.durationBucket;
-    if (given.brain !== undefined)
-        properties.brain = given.brain;
-    if (given.ok !== undefined)
-        properties.ok = given.ok;
-    if (given.exitCode !== undefined)
-        properties.exit_code = given.exitCode;
-    if (given.errorCode !== undefined && OWN_ERROR_CODE.test(given.errorCode))
-        properties.error_code = given.errorCode;
-    if (isCuaDiagnosticCategory(given.diagnosticCategory))
-        properties.diagnostic_category = given.diagnosticCategory;
-    if (isCuaDiagnosticStopCause(given.stopCause))
-        properties.stop_cause = given.stopCause;
-    return { event: args.event, distinct_id: args.anonymousId, properties };
-}
-/** Our own codes only. A provider's or the OS's message is free text and never travels. */
-const OWN_ERROR_CODE = /^HUMANISH_[A-Z0-9_]{1,80}$/;
-/**
- * The closed vocabulary an outcome may take. Actor statuses (src/actor-contract.ts), the two
- * shared-world extras, a fan-out roll-up, and the two shapes a non-study command has. Anything
- * else — a provider's reason string, a scorer's verdict text — is dropped, never forwarded.
- */
-const OUTCOMES = new Set([
-    "passed", "abandoned", "incomplete", "blocked", "timed_out", "failed",
-    "contract_proof_only",
-    "all_passed", "some_passed", "none_passed",
-    "ok", "error"
-]);
-const BRAINS_BY_ACTOR = {
-    "local-agent": "local-agent",
-    "openai-computer-use": "provider-key",
-    "codex-exec": "provider-key",
-    "codex-tui": "provider-key",
-    "codex-app-server": "provider-key",
-    "scripted-browser": "none"
-};
-function asRecord(value) {
-    return typeof value === "object" && value !== null ? value : undefined;
-}
-/**
- * Read the study facts off a command's result document: mode, outcome, starter lab, brain route,
- * and our own error code. Duck-typed over every result shape the CLI writes, because the point is
- * ONE derivation at the one seam every command already passes through (writeResult), so that a
- * backend added later cannot forget to report. Returns {} for results that carry no study.
- *
- * The first two days of 0.62.0 data had 1,359 `run`/`lab run` events and not one carried a mode
- * or an outcome — the vocabulary existed, nothing populated it — so the one question telemetry
- * was added to answer ("does anyone get to a working LIVE first run") had no answer in the data.
- */
-export function deriveStudyFacts(result) {
-    const r = asRecord(result);
-    if (!r)
-        return {};
-    const facts = {};
-    if (r.dryRun === true)
-        facts.mode = "dry-run";
-    else if (r.dryRun === false)
-        facts.mode = "live";
-    else if (r.mode === "dry-run" || r.mode === "live")
-        facts.mode = r.mode;
-    const labRecord = asRecord(r.lab);
-    const labId = typeof r.labId === "string" ? r.labId
-        : typeof labRecord?.id === "string" ? labRecord.id
-            : typeof r.lab === "string" ? r.lab
-                : undefined;
-    const lab = safeLabId(labId);
-    if (lab !== undefined)
-        facts.lab = lab;
-    const error = asRecord(r.error);
-    if (typeof error?.code === "string" && OWN_ERROR_CODE.test(error.code))
-        facts.errorCode = error.code;
-    const cuaResult = r.schema === "humanish.cua-lab-result.v2";
-    const diagnostics = cuaResult ? asRecord(r.diagnostics) : undefined;
-    if (isCuaDiagnosticCategory(diagnostics?.category))
-        facts.diagnosticCategory = diagnostics.category;
-    if (isCuaDiagnosticStopCause(diagnostics?.stopCause))
-        facts.stopCause = diagnostics.stopCause;
-    const session = asRecord(r.session);
-    const laneSummary = asRecord(r.laneSummary);
-    let outcome;
-    if (cuaResult && facts.mode === "dry-run") {
-        outcome = r.ok === true ? "contract_proof_only" : "error";
-    }
-    else if (laneSummary && typeof laneSummary.total === "number" && typeof laneSummary.passed === "number" && laneSummary.total > 1) {
-        outcome = laneSummary.passed === laneSummary.total ? "all_passed"
-            : laneSummary.passed === 0 ? "none_passed"
-                : "some_passed";
-    }
-    else if (typeof session?.status === "string") {
-        outcome = session.status;
-    }
-    else if (typeof r.status === "string") {
-        outcome = r.status;
-    }
-    else if (r.error !== undefined && r.error !== null) {
-        outcome = "error";
-    }
-    else if (r.ok === true && facts.mode !== undefined) {
-        outcome = "ok";
-    }
-    if (outcome !== undefined && OUTCOMES.has(outcome))
-        facts.outcome = outcome;
-    else if (outcome !== undefined && facts.errorCode !== undefined)
-        facts.outcome = "error";
-    if (typeof r.actor === "string") {
-        const brain = facts.mode === "dry-run" ? "none" : BRAINS_BY_ACTOR[r.actor];
-        if (brain !== undefined)
-            facts.brain = brain;
-    }
-    return facts;
-}
-/** The notice, shown once, before anything is sent. */
-export const TELEMETRY_NOTICE = [
-    "humanish collects anonymous usage data (which command ran, whether it worked, how long it took).",
-    "It never sends your labs, subjects, personas, paths, or evidence. Opt out any time:",
-    "  humanish telemetry disable        (or set DO_NOT_TRACK=1)",
-    "  humanish telemetry status         shows exactly what is collected"
-].join("\n");
-/**
- * Fire and forget, bounded, and incapable of affecting the command that triggered it. A tool whose
- * telemetry can slow down or fail a run has made its users pay for its metrics.
- */
-export async function sendTelemetry(payload, deps = {}) {
-    const fetchFn = deps.fetchFn ?? globalThis.fetch;
-    if (typeof fetchFn !== "function" || INGEST_KEY.length === 0)
-        return;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), 2_000);
-    try {
-        await fetchFn(`${INGEST_HOST}/i/v0/e/`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({
-                api_key: INGEST_KEY,
-                event: payload.event,
-                distinct_id: payload.distinct_id,
-                properties: payload.properties
-            }),
-            signal: controller.signal
-        });
-    }
-    catch {
-        // Never surfaces. Metrics are our problem, not the operator's.
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-//# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,yFAAyF;AACzF,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,iGAAiG;AACjG,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,8FAA8F;AAC9F,iGAAiG;AACjG,mGAAmG;AAEnG,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,8FAA8F;AAC9F,MAAM,UAAU,GAAG,kDAAkD,CAAC;AACtE,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C,gGAAgG;AAChG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC;AAoCtG,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,EAAE;IACvF,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC7C,uFAAuF;IACvF,oDAAoD;IACpD,MAAM,UAAU,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QACvF,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAsB;IAC1D,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAW,EAAE,CACpD,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IAC/G,OAAO,CACL,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;WACrB,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC1C,4FAA4F;QAC5F,4FAA4F;QAC5F,4FAA4F;QAC5F,8FAA8F;QAC9F,gDAAgD;QAChD,EAAE;QACF,4FAA4F;QAC5F,2FAA2F;QAC3F,8EAA8E;WAC3E,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,cAAqC;IACxF,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,2FAA2F;IAC3F,2FAA2F;IAC3F,2EAA2E;IAC3E,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAGvE,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,MAAc,EACd,cAAqC;IAErC,OAAO,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAyB,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,EAAE;IAEhB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;YACjC,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE;YACvF,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;SACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,EAAE;IAEhB,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,EAAE,GAAG,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,EAAE,GAAG,MAAM;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,EAAE,GAAG,MAAM;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,EAAE,GAAG,OAAO;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,EAAE,GAAG,OAAO;QAAE,OAAO,OAAO,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAC,GAAuB;IAC/C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAQ5B;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,UAAU,GAA8C;QAC5D,uFAAuF;QACvF,yFAAyF;QACzF,0FAA0F;QAC1F,6FAA6F;QAC7F,yEAAyE;QACzE,cAAc,EAAE,IAAI;QACpB,uFAAuF;QACvF,0FAA0F;QAC1F,4FAA4F;QAC5F,iBAAiB;QACjB,uBAAuB,EAAE,KAAK;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,EAAE,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QACrC,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3E,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG;QAC3D,8FAA8F;QAC9F,qFAAqF;QACrF,0FAA0F;QAC1F,4FAA4F;QAC5F,wFAAwF;QACxF,gBAAgB,EAAE,GAAG,CAAC,0BAA0B,KAAK,SAAS;eACzD,GAAG,CAAC,0BAA0B,KAAK,EAAE;eACrC,GAAG,CAAC,0BAA0B,KAAK,GAAG;KAC5C,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACpE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,UAAU,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACxD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACpE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC;IACnF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;QAAE,UAAU,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,UAAU,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;IACxE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;IACnH,IAAI,uBAAuB,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAAE,UAAU,CAAC,mBAAmB,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACjH,IAAI,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;IACvF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED,2FAA2F;AAC3F,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD;;;;GAIG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ;IACrE,qBAAqB;IACrB,YAAY,EAAE,aAAa,EAAE,aAAa;IAC1C,IAAI,EAAE,OAAO;CACd,CAAC,CAAC;AAEH,MAAM,eAAe,GAA8D;IACjF,aAAa,EAAE,aAAa;IAC5B,qBAAqB,EAAE,cAAc;IACrC,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,cAAc;IAC3B,kBAAkB,EAAE,cAAc;IAClC,kBAAkB,EAAE,MAAM;CAC3B,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAwB,EAAE,CAAC;IAEtC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC;SACzC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC;SAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAExE,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;QACjD,CAAC,CAAC,OAAO,SAAS,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;YAClD,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;gBACnC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;IAEvC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;IAErG,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,KAAK,4BAA4B,CAAC;IAC5D,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC;QAAE,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC;IACpG,IAAI,wBAAwB,CAAC,WAAW,EAAE,SAAS,CAAC;QAAE,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IAE9F,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,OAA2B,CAAC;IAChC,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5D,CAAC;SAAM,IAAI,WAAW,IAAI,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACnI,OAAO,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;YAC/D,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa;gBAC1C,CAAC,CAAC,aAAa,CAAC;IACpB,CAAC;SAAM,IAAI,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;SAAM,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;SACvE,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IAEzF,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,kGAAkG;IAClG,qFAAqF;IACrF,6DAA6D;IAC7D,qEAAqE;CACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAOb;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAyB,EAAE,OAAiB,EAAE;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,IAAI,OAAO,OAAO,KAAK,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,WAAW,UAAU,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;YACF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/terminal-agent-actor.d.ts

@@ -1,41 +0,0 @@
-import type { ActorPersonaRef, ActorStatus, ActorCompletionReason, ActorTrace } from "./actor-contract.js";
-/**
- * Backward-compatible fail-closed marker for the intentionally unsupported direct runner.
- * The name is retained because it is already exported public API.
- */
-export declare const TERMINAL_AGENT_NOT_IMPLEMENTED_CODE: "HUMANISH_TERMINAL_AGENT_NOT_IMPLEMENTED";
-/**
- * Options the engine hands the terminal agent session. The transport is the captured
- * non-interactive exec stream (stdin disabled), NOT an interactive PTY — see ActorProtocol
- * "terminal-exec" and the goal packet's PTY ruling. This compatibility shape documents the
- * descriptor boundary; the route-owned live implementation composes equivalent inputs with the
- * additional provider, policy, cap, and cleanup controls it needs.
- */
-export interface TerminalAgentSessionOptions {
-    /** Where the session writes its native trace/transcript/event-stream artifacts. */
-    artifactRoot: string;
-    /** The composed prompt the agent runs (mission + persona + public-surface manifest). */
-    prompt: string;
-    /** Public-safe persona reference (id + composed-prompt digest); no plaintext beyond the mission. */
-    persona: ActorPersonaRef;
-    /** The product's declared PUBLIC surfaces (http(s) URLs / refs) — the only world the agent sees. */
-    publicSurfaces: string[];
-    /** Session wall-clock budget (the route also requires scenario.caps.maxMinutes). */
-    timeoutMs: number;
-    /** Per-run verdict nonce: the agent must echo it so replayed text can't forge the verdict. */
-    verdictNonce: string;
-}
-export interface TerminalAgentSessionResult {
-    status: ActorStatus;
-    completionReason: ActorCompletionReason;
-    reason: string;
-    /** The provider-neutral evidence projection (humanish.actor-trace.v1, lane "terminal"). */
-    trace: ActorTrace;
-}
-/**
- * Backward-compatible registry entry. Direct execution is intentionally unsupported: only the
- * terminal-product lab route owns enough context to enforce command-scoped auth, caps, evidence
- * capture, and by-id cleanup together. Fail closed instead of implying that the descriptor method
- * itself runs the shipped live route.
- */
-export declare function runTerminalAgentSession(_options: TerminalAgentSessionOptions): Promise<TerminalAgentSessionResult>;

package/dist/terminal-agent-actor.js

@@ -1,25 +0,0 @@
-// Registry contract for the terminal-product lane. The shipped live implementation is
-// intentionally route-owned by `runTerminalProductLab` in `e2b-terminal-lab.ts`: that route must
-// coordinate sandbox creation, command-scoped runtime auth, caps, evidence capture, and by-id
-// cleanup as one fail-closed lifecycle.
-//
-// `runTerminalAgentSession` remains exported because it was part of the public actor-descriptor
-// shape before the route-owned lifecycle shipped. Its options cannot carry the host/provider
-// controls needed to enforce that lifecycle, so direct calls are intentionally unsupported and
-// fail closed. Use `runTerminalProductLab` (or `runLab` with a terminal-product config) for both
-// dry-run and live execution.
-/**
- * Backward-compatible fail-closed marker for the intentionally unsupported direct runner.
- * The name is retained because it is already exported public API.
- */
-export const TERMINAL_AGENT_NOT_IMPLEMENTED_CODE = "HUMANISH_TERMINAL_AGENT_NOT_IMPLEMENTED";
-/**
- * Backward-compatible registry entry. Direct execution is intentionally unsupported: only the
- * terminal-product lab route owns enough context to enforce command-scoped auth, caps, evidence
- * capture, and by-id cleanup together. Fail closed instead of implying that the descriptor method
- * itself runs the shipped live route.
- */
-export async function runTerminalAgentSession(_options) {
-    throw new Error(`${TERMINAL_AGENT_NOT_IMPLEMENTED_CODE}: direct runTerminalAgentSession calls are intentionally unsupported. Terminal execution is route-owned so the lab can enforce command-scoped runtime auth, caps, evidence capture, and by-id cleanup together. Use runTerminalProductLab or runLab with a terminal-product config.`);
-}
-//# sourceMappingURL=terminal-agent-actor.js.map

package/dist/terminal-agent-actor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-agent-actor.js","sourceRoot":"","sources":["../src/terminal-agent-actor.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,iGAAiG;AACjG,8FAA8F;AAC9F,wCAAwC;AACxC,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,iGAAiG;AACjG,8BAA8B;AAI9B;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,yCAAkD,CAAC;AAgCtG;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAqC;IAErC,MAAM,IAAI,KAAK,CACb,GAAG,mCAAmC,qRAAqR,CAC5T,CAAC;AACJ,CAAC"}

package/dist/terminal-encoding.js

@@ -1,80 +0,0 @@
-// Whether this terminal can render the characters we write to it.
-//
-// FOUND BY A PARTICIPANT, not by us (labs/tui-self-study.yaml): a computer-use participant sitting
-// at a stock desktop ran `humanish` and read back `humanish ��� run realistic synthetic personas`.
-// The em dash is three bytes of UTF-8, and a terminal whose locale is not UTF-8 renders each byte
-// as a replacement glyph. Every ASCII character on the same screen was fine, which is exactly the
-// signature.
-//
-// The honest fix is not "stop using em dashes" — it is to ask what the terminal can render and mean
-// it. A surface that emits characters its own terminal cannot decode is not being expressive, it is
-// producing garbage that reads as a bug in the tool.
-const UTF8 = /utf-?8/i;
-/**
- * Does this environment declare a UTF-8 locale? The POSIX variables are checked in the order the C
- * library resolves them (LC_ALL overrides LC_CTYPE overrides LANG).
- *
- * Windows terminals declare none of these and are handled as UTF-8: modern Windows Terminal and
- * PowerShell render it, and the failure this guards against is a Unix locale that says C/POSIX.
- */
-export function terminalRendersUnicode(env = process.env) {
-    if (process.platform === "win32")
-        return true;
-    const declared = env.LC_ALL ?? env.LC_CTYPE ?? env.LANG;
-    if (declared === undefined || declared.trim().length === 0) {
-        // Nothing declared at all. A bare login shell on a stock image lands here, and that is the
-        // case the participant hit — assume it cannot, because the failure is silent and ugly while
-        // the fallback is merely plainer.
-        return false;
-    }
-    return UTF8.test(declared);
-}
-/**
- * The ASCII stand-in for a character, when the terminal cannot render the real one. Anything with
- * no entry here is already ASCII and passes through.
- */
-const ASCII_FALLBACKS = new Map([
-    ["—", "--"],
-    ["–", "-"],
-    ["’", "'"],
-    ["‘", "'"],
-    ["“", '"'],
-    ["”", '"'],
-    ["…", "..."],
-    ["·", "-"],
-    ["❯", ">"],
-    ["‹", "<"],
-    ["▸", ">"],
-    ["✓", "+"],
-    ["⚑", "!"],
-    ["⏎", "Enter"],
-    ["↑", "^"],
-    ["↓", "v"],
-    ["←", "<-"],
-    ["→", "->"],
-    ["×", "x"],
-    ["≈", "~"],
-    ["✗", "x"]
-]);
-/**
- * Rewrite a string so a non-UTF-8 terminal can read it. A no-op when the terminal handles Unicode,
- * so the good case keeps every glyph it was designed with.
- *
- * Characters with no declared fallback are replaced with `?` rather than passed through: passing
- * them through is what produced `���` in the first place, and one `?` is at least legible as
- * "something did not survive".
- */
-export function forTerminal(text, env = process.env) {
-    if (terminalRendersUnicode(env))
-        return text;
-    let out = "";
-    for (const character of text) {
-        if (character.codePointAt(0) < 128) {
-            out += character;
-            continue;
-        }
-        out += ASCII_FALLBACKS.get(character) ?? "?";
-    }
-    return out;
-}
-//# sourceMappingURL=terminal-encoding.js.map

package/dist/terminal-encoding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-encoding.js","sourceRoot":"","sources":["../src/terminal-encoding.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,aAAa;AACb,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,qDAAqD;AAErD,MAAM,IAAI,GAAG,SAAS,CAAC;AAEvB;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,2FAA2F;QAC3F,4FAA4F;QAC5F,kCAAkC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAiB;IAC9C,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,KAAK,CAAC;IACZ,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,OAAO,CAAC;IACd,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;CACX,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC5E,IAAI,sBAAsB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,GAAG,GAAG,EAAE,CAAC;YACpC,GAAG,IAAI,SAAS,CAAC;YACjB,SAAS;QACX,CAAC;QACD,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/terminal-node-bootstrap.d.ts

@@ -1,4 +0,0 @@
-export declare const TERMINAL_NODE_VERSION = "22.23.2";
-export declare const TERMINAL_NODE_NPM_PREFIX_SCRIPT: string;
-/** Unkeyed runtime prerequisite for stock Linux desktops. No apt repository refresh (#674). */
-export declare const TERMINAL_NODE_BOOTSTRAP_COMMAND: string;

package/dist/terminal-node-bootstrap.js

@@ -1,58 +0,0 @@
-// Node 22 remains a supported LTS line. Pin the official release and trusted archive hashes:
-// https://nodejs.org/en/about/previous-releases
-// https://nodejs.org/dist/v22.23.2/SHASUMS256.txt (checked 2026-09-05)
-// A checksum fetched alongside the archive at runtime would not pin what we trust.
-export const TERMINAL_NODE_VERSION = "22.23.2";
-// npm normally derives its global prefix from the real Node executable. This distribution
-// lives under /opt, while its public executables use /usr/local/bin. Set only a missing
-// built-in default; npm's environment, CLI, user and global config still take precedence.
-export const TERMINAL_NODE_NPM_PREFIX_SCRIPT = [
-    'const fs = require("node:fs");',
-    'const file = process.argv[1];',
-    'let existing = "";',
-    'try { existing = fs.readFileSync(file, "utf8"); } catch (error) { if (error.code !== "ENOENT") throw error; }',
-    'if (!/^[\\t ]*prefix[\\t ]*=/m.test(existing)) fs.appendFileSync(file, "\\nprefix=/usr/local\\n");'
-].join(" ");
-/** Unkeyed runtime prerequisite for stock Linux desktops. No apt repository refresh (#674). */
-export const TERMINAL_NODE_BOOTSTRAP_COMMAND = [
-    "set -eu",
-    "# humanish terminal-node-bootstrap",
-    "node_major=0",
-    `if command -v node >/dev/null 2>&1; then node_major=$(node -e 'console.log(Number(process.versions.node.split(".")[0]))' 2>/dev/null || echo 0); fi`,
-    `if command -v node >/dev/null 2>&1 && command -v npm >/dev/null 2>&1 && [ "$node_major" -ge 20 ] && npm --version >/dev/null 2>&1; then`,
-    // An explicit exit under set -e runs the stock login shell's failing clear_console logout hook
-    // and turns this successful fast path into exit 1. Finish the compound command naturally.
-    "  :",
-    "else",
-    `case "$(uname -s):$(uname -m)" in`,
-    `  Linux:x86_64) node_arch=x64; node_sha=b294a556e639d64338823920e5866c21c02741742d2e1529ee1a225c1ec9252a ;;`,
-    `  Linux:aarch64|Linux:arm64) node_arch=arm64; node_sha=013b59cfd2819703a6f4a14ab891fc46fc2a4e3f5bcd92de3fb4929b43e35b30 ;;`,
-    `  *) echo 'humanish: terminal runtime requires a supported Linux x64/arm64 desktop or working Node >=20 and npm' >&2; exit 1 ;;`,
-    "esac",
-    "for prerequisite in curl sha256sum tar gzip mktemp sudo; do",
-    `  command -v "$prerequisite" >/dev/null 2>&1 || { echo "humanish: terminal runtime bootstrap requires $prerequisite" >&2; exit 1; }`,
-    "done",
-    `node_archive="node-v${TERMINAL_NODE_VERSION}-linux-$node_arch.tar.gz"`,
-    `node_target="/opt/humanish/node-v${TERMINAL_NODE_VERSION}-linux-$node_arch"`,
-    `node_temp=$(mktemp -d /tmp/humanish-node.XXXXXX)`,
-    `trap 'rm -rf "$node_temp"' EXIT`,
-    `curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --connect-timeout 10 --max-time 90 --retry 1 --retry-max-time 120 --output "$node_temp/$node_archive" "https://nodejs.org/dist/v${TERMINAL_NODE_VERSION}/$node_archive"`,
-    `(cd "$node_temp" && printf '%s  %s\\n' "$node_sha" "$node_archive" | sha256sum --check --status) || { echo 'humanish: terminal Node archive checksum did not match the trusted release' >&2; exit 1; }`,
-    // Only a verified official archive reaches privileged extraction. The versioned install is
-    // root-owned; subsequent ordinary and sudo shells find it through standard /usr/local/bin.
-    "sudo -n mkdir -p /opt/humanish /usr/local/bin",
-    `sudo -n tar --extract --gzip --file "$node_temp/$node_archive" --directory /opt/humanish --no-same-owner`,
-    "for executable in node npm npx; do",
-    `  sudo -n ln -sfn "$node_target/bin/$executable" "/usr/local/bin/$executable"`,
-    "done",
-    // Keep global product executables on the existing ordinary/sudo PATH (#679). The new
-    // versioned distribution is the only config we modify; no user/global npmrc or profile.
-    `sudo -n "$node_target/bin/node" -e '${TERMINAL_NODE_NPM_PREFIX_SCRIPT}' "$node_target/lib/node_modules/npm/npmrc"`,
-    "hash -r",
-    `node -e 'process.exit(Number(process.versions.node.split(".")[0]) >= 20 ? 0 : 1)' && npm --version >/dev/null`,
-    // Product installation already uses sudo; detect a template whose sudo PATH cannot see Node
-    // rather than changing global PATH or permissions to make it look supported.
-    `sudo -n node -e 'process.exit(Number(process.versions.node.split(".")[0]) >= 20 ? 0 : 1)' && sudo -n npm --version >/dev/null`,
-    "fi"
-].join("\n");
-//# sourceMappingURL=terminal-node-bootstrap.js.map

package/dist/terminal-node-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-node-bootstrap.js","sourceRoot":"","sources":["../src/terminal-node-bootstrap.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gDAAgD;AAChD,uEAAuE;AACvE,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAE/C,0FAA0F;AAC1F,wFAAwF;AACxF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gCAAgC;IAChC,+BAA+B;IAC/B,oBAAoB;IACpB,+GAA+G;IAC/G,oGAAoG;CACrG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,+FAA+F;AAC/F,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,SAAS;IACT,oCAAoC;IACpC,cAAc;IACd,qJAAqJ;IACrJ,yIAAyI;IACzI,+FAA+F;IAC/F,0FAA0F;IAC1F,KAAK;IACL,MAAM;IACN,mCAAmC;IACnC,6GAA6G;IAC7G,4HAA4H;IAC5H,iIAAiI;IACjI,MAAM;IACN,6DAA6D;IAC7D,qIAAqI;IACrI,MAAM;IACN,uBAAuB,qBAAqB,2BAA2B;IACvE,oCAAoC,qBAAqB,oBAAoB;IAC7E,kDAAkD;IAClD,iCAAiC;IACjC,wNAAwN,qBAAqB,iBAAiB;IAC9P,wMAAwM;IACxM,2FAA2F;IAC3F,2FAA2F;IAC3F,+CAA+C;IAC/C,0GAA0G;IAC1G,oCAAoC;IACpC,+EAA+E;IAC/E,MAAM;IACN,qFAAqF;IACrF,wFAAwF;IACxF,uCAAuC,+BAA+B,6CAA6C;IACnH,SAAS;IACT,+GAA+G;IAC/G,4FAA4F;IAC5F,6EAA6E;IAC7E,+HAA+H;IAC/H,IAAI;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/dist/terminal-participant-activity.d.ts

@@ -1,6 +0,0 @@
-/** Count distinct participant items in the retained Codex JSON stdout stream.
- * The caller supplies stdout only, after transport reconciliation and redaction.
- * Lifecycle, usage, launcher diagnostics, and nested command output are not activity.
- * Zero means no recognized item was retained, not that the participant succeeded.
- */
-export declare function countTerminalParticipantItems(stdout: string): number;

package/dist/terminal-participant-activity.js

@@ -1,34 +0,0 @@
-const itemEvents = new Set(["item.started", "item.updated", "item.completed"]);
-const nonempty = (value) => typeof value === "string" && value.trim().length > 0;
-const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-/** Count distinct participant items in the retained Codex JSON stdout stream.
- * The caller supplies stdout only, after transport reconciliation and redaction.
- * Lifecycle, usage, launcher diagnostics, and nested command output are not activity.
- * Zero means no recognized item was retained, not that the participant succeeded.
- */
-export function countTerminalParticipantItems(stdout) {
-    const ids = new Set();
-    for (const line of stdout.split("\n")) {
-        let event;
-        try {
-            event = JSON.parse(line);
-        }
-        catch {
-            continue;
-        }
-        if (!object(event) || typeof event.type !== "string" || !itemEvents.has(event.type) || !object(event.item))
-            continue;
-        const item = event.item;
-        if (!nonempty(item.id))
-            continue;
-        const active = ((item.type === "agent_message" || item.type === "reasoning") && nonempty(item.text))
-            || (item.type === "command_execution" && nonempty(item.command))
-            || (item.type === "web_search" && (nonempty(item.query) || (object(item.action) && nonempty(item.action.type))))
-            || (item.type === "file_change" && Array.isArray(item.changes)
-                && item.changes.some(change => object(change) && nonempty(change.path) && nonempty(change.kind)));
-        if (active)
-            ids.add(item.id);
-    }
-    return ids.size;
-}
-//# sourceMappingURL=terminal-participant-activity.js.map

package/dist/terminal-participant-activity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-participant-activity.js","sourceRoot":"","sources":["../src/terminal-participant-activity.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC/E,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3G,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE1I;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACrH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;eAC/F,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAmB,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;eAC7D,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;eAC7G,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;mBACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC"}

package/dist/terminal-runtime-auth.d.ts

@@ -1,13 +0,0 @@
-import type { E2BNetworkOptions } from "./e2b-desktop-launch.js";
-export declare const OPENAI_EGRESS_HOST = "api.openai.com";
-/** E2B envd installs the sandbox-specific proxy CA into this system bundle before routing. */
-export declare const E2B_SYSTEM_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
-/** An inert nonsecret value satisfies Codex exec's auth prerequisite. E2B replaces the header. */
-export declare const OPENAI_EGRESS_PLACEHOLDER = "humanish-egress-auth-placeholder";
-/**
- * Keep the runtime key in the host-side E2B request, outside sandbox env/files. The installed
- * E2B SDK declares that transform headers override existing request headers. This adds no routing
- * restrictions: every sandbox process can still spend via the provider proxy. Never log the
- * returned options. An adopter's existing exact-host rule must not be silently overwritten.
- */
-export declare function buildOpenAiEgressNetwork(keyValue: string, existing?: E2BNetworkOptions): E2BNetworkOptions;