humanish 0.105.0 → 0.106.0

package/dist/serve-exposure.js

@@ -1,129 +0,0 @@
-// Shared fail-closed exposure validation + tunnel orchestration for BOTH `serve` (a library of
-// finished runs) and `watch` (one live run). Exposure auth is TUNNEL-EDGE only: humanish carries no
-// in-process auth. Exposure is admitted only behind edge auth (ngrok --oauth google, or an operator
-// --public-url they secure) OR, for serve, behind --safe (share_ready runs only). A live watch run
-// is never share_ready (raw, unverified screenshots), so watch --expose ALWAYS requires edge auth.
-//
-// This module is pure with respect to the fail-closed matrix (validateExposure) and thin over the
-// tunnel launcher (startExposedObserver), so the CLI just maps flags in and results out.
-import { parsePublicOrigin } from "./serve-http.js";
-import { startNgrokTunnel } from "./serve-tunnel.js";
-function code(surface, suffix) {
-    return `HUMANISH_${surface.toUpperCase()}_${suffix}`;
-}
-export function validateExposure(surface, request, live) {
-    const fail = (suffix, message) => ({
-        ok: false,
-        error: { code: code(surface, suffix), message }
-    });
-    // Structural guards (both surfaces), in the fail-closed order documented in the matrix. These run
-    // before any bind/spawn so a mis-configured exposure aborts before sandbox/provider spend.
-    if ((request.allowEmails.length > 0 || request.allowDomains.length > 0) && !request.oauth) {
-        return fail("ALLOW_REQUIRES_OAUTH", "--allow-email/--allow-domain configure the ngrok edge OAuth allow-list; they require --oauth google.");
-    }
-    if (request.oauth && !request.tunnel) {
-        return fail("OAUTH_REQUIRES_TUNNEL", "--oauth turns on edge OAuth on the ngrok tunnel; it requires --tunnel ngrok (a --public-url operator brings their own edge auth).");
-    }
-    if (request.tunnel && request.publicUrl !== undefined) {
-        return fail("OPTION_CONFLICT", "Use either --tunnel or --public-url as the public origin, not both.");
-    }
-    if (request.tunnelDomain !== undefined && !request.tunnel) {
-        return fail("OPTION_CONFLICT", "--tunnel-domain requires --tunnel.");
-    }
-    const publicOrigin = request.publicUrl !== undefined ? parsePublicOrigin(request.publicUrl) : null;
-    if (request.publicUrl !== undefined && !publicOrigin) {
-        return fail("OPTION_CONFLICT", "--public-url must be an http(s) origin like https://observer.example.com.");
-    }
-    if (!request.expose) {
-        // Exposure flags without --expose are refused (no silent wide-open). --safe is orthogonal and
-        // stays valid without --expose (a loopback share_ready filter).
-        if (request.tunnel) {
-            return fail("TUNNEL_REQUIRES_EXPOSE", "--tunnel exposes the surface; declare that intent with --expose.");
-        }
-        if (request.publicUrl !== undefined) {
-            return fail("OPTION_CONFLICT", "--public-url only applies with --expose.");
-        }
-        return {
-            ok: true,
-            plan: { exposed: false, edgeAuthed: false, mode: "loopback", safe: request.safe, warnings: [] }
-        };
-    }
-    const oauth = request.oauth
-        ? { provider: "google", allowEmails: request.allowEmails, allowDomains: request.allowDomains }
-        : undefined;
-    const edgeAuthed = Boolean(request.oauth) || Boolean(publicOrigin);
-    const warnings = [];
-    if (surface === "watch") {
-        // A live, in-progress run is never share_ready (raw screenshots, unverified), so --safe would
-        // admit nothing and expose nothing: watch --expose ALWAYS requires edge auth, and the live-follow
-        // preconditions are checked first so `--dry-run`/`--detach`/`--json` fail with the clearer reason.
-        if (live && (live.dryRun || live.detach || live.json)) {
-            return fail("EXPOSE_REQUIRES_LIVE_FOLLOW", "watch --expose streams a live desktop over an attached follow channel; it cannot combine with --dry-run, --detach, or --json.");
-        }
-        // --safe is a share_ready LIBRARY filter for `serve`; watch streams a single live run that is
-        // never share_ready, so --safe would silently do nothing here. Reject it rather than ignore it.
-        if (request.safe) {
-            return fail("SAFE_NOT_APPLICABLE", "watch streams a single live run that is never share_ready; --safe (a share_ready library filter) applies to `serve`, not `watch`. Restrict viewers with edge auth: --allow-email / --allow-domain.");
-        }
-        if (!edgeAuthed) {
-            return fail("EXPOSE_REQUIRES_EDGE_AUTH", "watch --expose serves a live run that is never share_ready, so --safe cannot gate it; require edge auth: --tunnel ngrok --oauth google, or an operator-secured --public-url.");
-        }
-    }
-    else {
-        // serve: --expose must ALWAYS resolve to a reachable public origin (a tunnel or a --public-url),
-        // even under --safe. Without one the exposed server is an unreachable loopback no-op, so fail
-        // closed before the origin-less bind. When an origin IS present, keep the edge-auth-OR-safe gate.
-        if (!request.tunnel && !publicOrigin) {
-            return fail("EXPOSE_REQUIRES_ORIGIN", "--expose needs a declared public origin: pass --tunnel ngrok or --public-url <origin>.");
-        }
-        if (!edgeAuthed && !request.safe) {
-            return fail("EXPOSE_REQUIRES_EDGE_AUTH_OR_SAFE", "--expose opens a public URL to local run bundles; require edge auth (--oauth google with --tunnel, or a --public-url you secure) OR --safe (share_ready runs only).");
-        }
-    }
-    if (request.oauth && request.allowEmails.length === 0 && request.allowDomains.length === 0) {
-        warnings.push("ngrok --oauth google with NO --allow-email/--allow-domain lets ANY Google account that reaches the URL in; add at least one allow rule to restrict who can watch.");
-    }
-    const mode = edgeAuthed ? "exposed" : "share-safe-open";
-    return {
-        ok: true,
-        plan: {
-            exposed: true,
-            edgeAuthed,
-            mode,
-            safe: request.safe,
-            ...(request.tunnel ? { tunnel: request.tunnel } : {}),
-            ...(request.tunnelDomain ? { tunnelDomain: request.tunnelDomain } : {}),
-            ...(oauth ? { oauth } : {}),
-            ...(publicOrigin ? { publicOrigin } : {}),
-            warnings
-        }
-    };
-}
-// Orchestrate the edge in front of an already-bound loopback server: spawn the ngrok tunnel (with
-// oauth/allow args) or declare the operator's --public-url, then extend the server's Host allowlist.
-// May throw a ServeTunnelError (ngrok missing/failed); callers close the loopback server on throw.
-export async function startExposedObserver(server, plan, deps = {}) {
-    const warnings = [...plan.warnings];
-    if (plan.tunnel === "ngrok") {
-        const startTunnel = deps.startTunnel ?? startNgrokTunnel;
-        const tunnel = await startTunnel({
-            port: server.port,
-            ...(plan.tunnelDomain ? { domain: plan.tunnelDomain } : {}),
-            ...(plan.oauth
-                ? {
-                    oauthProvider: plan.oauth.provider,
-                    oauthAllowEmails: plan.oauth.allowEmails,
-                    oauthAllowDomains: plan.oauth.allowDomains
-                }
-                : {})
-        });
-        server.addPublicOrigin(tunnel.url);
-        return { tunnel, publicUrl: tunnel.url.replace(/\/$/, ""), warnings };
-    }
-    if (plan.publicOrigin) {
-        server.addPublicOrigin(plan.publicOrigin.origin);
-        return { publicUrl: plan.publicOrigin.origin, warnings };
-    }
-    return { warnings };
-}
-//# sourceMappingURL=serve-exposure.js.map

package/dist/serve-exposure.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-exposure.js","sourceRoot":"","sources":["../src/serve-exposure.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,oGAAoG;AACpG,oGAAoG;AACpG,mGAAmG;AACnG,mGAAmG;AACnG,EAAE;AACF,kGAAkG;AAClG,yFAAyF;AAEzF,OAAO,EAAE,iBAAiB,EAAkB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAkD,MAAM,mBAAmB,CAAC;AAyDrG,SAAS,IAAI,CAAC,OAAwB,EAAE,MAAc;IACpD,OAAO,YAAY,OAAO,CAAC,WAAW,EAAE,IAAI,MAAM,EAAuB,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAwB,EACxB,OAAwB,EACxB,IAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAAe,EAAsB,EAAE,CAAC,CAAC;QACrE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE;KAChD,CAAC,CAAC;IAEH,kGAAkG;IAClG,2FAA2F;IAC3F,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,sBAAsB,EAAE,sGAAsG,CAAC,CAAC;IAC9I,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,uBAAuB,EAAE,mIAAmI,CAAC,CAAC;IAC5K,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,iBAAiB,EAAE,qEAAqE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnG,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,iBAAiB,EAAE,2EAA2E,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,8FAA8F;QAC9F,gEAAgE;QAChE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,wBAAwB,EAAE,kEAAkE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;QACzB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAiB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;QACvG,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,8FAA8F;QAC9F,kGAAkG;QAClG,mGAAmG;QACnG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,OAAO,IAAI,CACT,6BAA6B,EAC7B,+HAA+H,CAChI,CAAC;QACJ,CAAC;QACD,8FAA8F;QAC9F,gGAAgG;QAChG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,IAAI,CACT,qBAAqB,EACrB,oMAAoM,CACrM,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CACT,2BAA2B,EAC3B,8KAA8K,CAC/K,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iGAAiG;QACjG,8FAA8F;QAC9F,kGAAkG;QAClG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO,IAAI,CACT,wBAAwB,EACxB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,IAAI,CACT,mCAAmC,EACnC,qKAAqK,CACtK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CACX,mKAAmK,CACpK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAc,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACnE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI;YACb,UAAU;YACV,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,QAAQ;SACT;KACF,CAAC;AACJ,CAAC;AAgBD,kGAAkG;AAClG,qGAAqG;AACrG,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAuB,EACvB,IAAkB,EAClB,OAAqF,EAAE;IAEvF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC;oBACE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;oBAClC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;oBACxC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;iBAC3C;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/serve-http.js

@@ -1,45 +0,0 @@
-// Shared HTTP hardening primitives for the serve surfaces. Extracted here so BOTH the live
-// Observer server (src/observer.ts) and the run-library server
-// (src/observer-serve.ts) can enforce the identical Host allowlist + security-header posture
-// without a module cycle. This file imports nothing from the serve modules.
-export function buildServeSecurityHeaders() {
-    return {
-        "cache-control": "no-store",
-        "referrer-policy": "no-referrer",
-        "x-content-type-options": "nosniff",
-        "x-frame-options": "DENY",
-        "content-security-policy": "frame-ancestors 'none'",
-        "x-robots-tag": "noindex, nofollow"
-    };
-}
-/** Saved artifacts may contain active HTML, SVG or XML. Give raw documents an
- * opaque origin even on direct navigation, while preserving self-contained scripts.
- * Generated Observer pages use buildServeSecurityHeaders instead. */
-export function buildArtifactSecurityHeaders() {
-    const headers = buildServeSecurityHeaders();
-    return { ...headers, "content-security-policy": `${headers["content-security-policy"]}; sandbox allow-scripts` };
-}
-export function hostAllowed(hostHeader, allowlist) {
-    return typeof hostHeader === "string" && allowlist.has(hostHeader.trim().toLowerCase());
-}
-export function parsePublicOrigin(value) {
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        return null;
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-        return null;
-    }
-    if ((parsed.pathname !== "/" && parsed.pathname !== "") || parsed.search || parsed.hash || !parsed.host) {
-        return null;
-    }
-    return {
-        origin: parsed.origin,
-        host: parsed.host.toLowerCase(),
-        scheme: parsed.protocol === "https:" ? "https" : "http"
-    };
-}
-//# sourceMappingURL=serve-http.js.map

package/dist/serve-http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-http.js","sourceRoot":"","sources":["../src/serve-http.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,+DAA+D;AAC/D,6FAA6F;AAC7F,4EAA4E;AAS5E,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,eAAe,EAAE,UAAU;QAC3B,iBAAiB,EAAE,aAAa;QAChC,wBAAwB,EAAE,SAAS;QACnC,iBAAiB,EAAE,MAAM;QACzB,yBAAyB,EAAE,wBAAwB;QACnD,cAAc,EAAE,mBAAmB;KACpC,CAAC;AACJ,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,4BAA4B;IAC1C,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC5C,OAAO,EAAE,GAAG,OAAO,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,yBAAyB,EAAE,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE,SAA8B;IACxF,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACxD,CAAC;AACJ,CAAC"}

package/dist/serve-tunnel.js

@@ -1,113 +0,0 @@
-import { spawn } from "node:child_process";
-export class ServeTunnelError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.name = "ServeTunnelError";
-        this.code = code;
-    }
-}
-export async function startNgrokTunnel(options) {
-    const spawnImpl = options.spawnImpl ?? spawn;
-    const timeoutMs = options.timeoutMs ?? 15_000;
-    const oauthArgs = options.oauthProvider
-        ? [
-            "--oauth",
-            options.oauthProvider,
-            ...(options.oauthAllowEmails ?? []).flatMap((email) => ["--oauth-allow-email", email]),
-            ...(options.oauthAllowDomains ?? []).flatMap((domain) => ["--oauth-allow-domain", domain])
-        ]
-        : [];
-    const args = [
-        "http",
-        "--log",
-        "stdout",
-        "--log-format",
-        "json",
-        ...(options.domain ? ["--url", options.domain] : []),
-        ...oauthArgs,
-        String(options.port)
-    ];
-    const child = spawnImpl("ngrok", args, { stdio: ["ignore", "pipe", "ignore"] });
-    const url = await new Promise((resolve, reject) => {
-        let settled = false;
-        let buffered = "";
-        const settle = (outcome) => {
-            if (settled) {
-                return;
-            }
-            settled = true;
-            clearTimeout(timer);
-            if ("url" in outcome) {
-                resolve(outcome.url);
-            }
-            else {
-                killChild(child);
-                reject(outcome.error);
-            }
-        };
-        const timer = setTimeout(() => {
-            settle({
-                error: new ServeTunnelError("HUMANISH_SERVE_TUNNEL_START_FAILED", `ngrok did not report a started tunnel within ${timeoutMs}ms.`)
-            });
-        }, timeoutMs);
-        child.once("error", (error) => {
-            settle({
-                error: error.code === "ENOENT"
-                    ? new ServeTunnelError("HUMANISH_SERVE_TUNNEL_NOT_FOUND", "ngrok binary not found on PATH. Install ngrok, or run your own tunnel and pass --public-url <origin>.")
-                    : new ServeTunnelError("HUMANISH_SERVE_TUNNEL_START_FAILED", `ngrok failed to start: ${error.message}`)
-            });
-        });
-        child.once("exit", (code) => {
-            settle({
-                error: new ServeTunnelError("HUMANISH_SERVE_TUNNEL_START_FAILED", `ngrok exited (${code ?? "signal"}) before reporting a started tunnel.`)
-            });
-        });
-        child.stdout?.setEncoding("utf8");
-        child.stdout?.on("data", (chunk) => {
-            buffered += chunk;
-            const lines = buffered.split("\n");
-            buffered = lines.pop() ?? "";
-            for (const line of lines) {
-                let parsed;
-                try {
-                    parsed = JSON.parse(line);
-                }
-                catch {
-                    continue;
-                }
-                if (typeof parsed === "object"
-                    && parsed !== null
-                    && parsed.msg === "started tunnel"
-                    && typeof parsed.url === "string") {
-                    settle({ url: parsed.url });
-                    return;
-                }
-            }
-        });
-    });
-    return {
-        url,
-        close: async () => {
-            await killChild(child);
-        }
-    };
-}
-function killChild(child) {
-    return new Promise((resolve) => {
-        if (child.exitCode !== null || child.signalCode !== null) {
-            resolve();
-            return;
-        }
-        child.once("exit", () => resolve());
-        // Reclamation stays scoped to the exact child this call created.
-        child.kill("SIGTERM");
-        setTimeout(() => {
-            if (child.exitCode === null && child.signalCode === null) {
-                child.kill("SIGKILL");
-            }
-            resolve();
-        }, 2_000).unref();
-    });
-}
-//# sourceMappingURL=serve-tunnel.js.map

package/dist/serve-tunnel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-tunnel.js","sourceRoot":"","sources":["../src/serve-tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAO3C,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAuB;IAEpC,YAAY,IAA0B,EAAE,OAAe;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAsBD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa;QACrC,CAAC,CAAC;YACE,SAAS;YACT,OAAO,CAAC,aAAa;YACrB,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YACtF,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;SAC3F;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG;QACX,MAAM;QACN,OAAO;QACP,QAAQ;QACR,cAAc;QACd,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,SAAS;QACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;KACrB,CAAC;IAEF,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEhF,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,CAAC,OAAsD,EAAE,EAAE;YACxE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,KAAK,CAAC,CAAC;gBACjB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC;gBACL,KAAK,EAAE,IAAI,gBAAgB,CACzB,oCAAoC,EACpC,gDAAgD,SAAS,KAAK,CAC/D;aACF,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACnD,MAAM,CAAC;gBACL,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAC5B,CAAC,CAAC,IAAI,gBAAgB,CACpB,iCAAiC,EACjC,uGAAuG,CACxG;oBACD,CAAC,CAAC,IAAI,gBAAgB,CACpB,oCAAoC,EACpC,0BAA0B,KAAK,CAAC,OAAO,EAAE,CAC1C;aACJ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,MAAM,CAAC;gBACL,KAAK,EAAE,IAAI,gBAAgB,CACzB,oCAAoC,EACpC,iBAAiB,IAAI,IAAI,QAAQ,sCAAsC,CACxE;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,QAAQ,IAAI,KAAK,CAAC;YAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IACE,OAAO,MAAM,KAAK,QAAQ;uBACvB,MAAM,KAAK,IAAI;uBACd,MAA4B,CAAC,GAAG,KAAK,gBAAgB;uBACtD,OAAQ,MAA4B,CAAC,GAAG,KAAK,QAAQ,EACxD,CAAC;oBACD,MAAM,CAAC,EAAE,GAAG,EAAG,MAA0B,CAAC,GAAG,EAAE,CAAC,CAAC;oBACjD,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG;QACH,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,iEAAiE;QACjE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shared-world-lab.d.ts

@@ -1,269 +0,0 @@
-import { type AutomaticAnalysisHooks, type AutomaticAnalysisResult } from "./automatic-analysis-completion.js";
-import { type RunLabProvenance } from "./run-status.js";
-import type { ActorCompletionReason, ActorPersonaRef, ActorStatus } from "./actor-contract.js";
-import { type BrowserLabAdapterHooks } from "./adapter-extension.js";
-import { type CuaActorDescriptor } from "./actor-registry.js";
-import type { CuaActorSessionOptions } from "./computer-use-actor.js";
-import type { CuaLoopResult } from "./computer-use.js";
-import type { ReasoningEffort } from "./reasoning-effort.js";
-import { type DesktopBrowserEvidence, type SubjectPhaseEvent } from "./cua-actor-lab.js";
-import { type E2BDesktopModule, type E2BDesktopSandbox } from "./e2b-desktop-launch.js";
-import { type DetachedTimers } from "./e2b-detached.js";
-import type { DevicePreset } from "./device-presets.js";
-import { type LabConfig, type LabSubjectStateCheckpoint } from "./lab-config.js";
-import { renderObserver, type ObserverResult } from "./observer.js";
-import type { LocalTreeArchive } from "./source-archive.js";
-import type { DwellWindow, StopWhen } from "./stop-conditions.js";
-import { type RunBundle, type RunDesktopGeometry, type RunScorerProvenance, type RunStream, type RunSubjectProvenance, type SharedWorldCheckpoint } from "./run.js";
-export declare const SHARED_WORLD_LAB_SCHEMA = "humanish.shared-world-lab-result.v1";
-export declare const SHARED_WORLD_LAB_PROVIDER_METADATA: {
-    readonly mode: "shared-world-lab";
-    readonly tool: "humanish";
-};
-/**
- * Library-level hooks mirroring CuaActorLabHooks — the DI seams that let CI drive the FULL
- * orchestration with fakes at $0/zero-network. The fake desktop module records create/kill BY id
- * and exposes NO `list` method (the by-id teardown rail is then provable by construction).
- */
-export interface SharedWorldLabHooks extends BrowserLabAdapterHooks {
-    /** Lazy-load the E2B desktop module (tests inject a fake; default loadE2BDesktopModule). */
-    loadDesktopModule?: () => Promise<E2BDesktopModule>;
-    /** Runs once after sandbox creation, before subject provisioning (library setup seam). */
-    prepareDesktop?: (desktop: E2BDesktopSandbox) => Promise<void>;
-    /** The per-seat computer-use session runner (default: the resolved actor descriptor's). */
-    runSession?: (options: CuaActorSessionOptions) => Promise<CuaLoopResult>;
-    /** The operator environment (keys + subject env values). Defaults to process.env. */
-    env?: Record<string, string | undefined>;
-    renderObserverFn?: typeof renderObserver;
-    /** Injected clock/sleep for the detached-step polling (tests only). */
-    detachedTimers?: DetachedTimers;
-    /**
-     * Subject-provisioning phase sink (mirrors CuaActorLabHooks.onPhase): one call per
-     * started/completed boundary during the ONE shared-plane provision (clone route: clone, install,
-     * build, serve start, ready, subject.state seed-step groups; local-tree route: upload, extract,
-     * install, build, serve start, ready, seed-step groups - no clone phase). Defaults to one stderr
-     * line per event. Override in tests to capture instead of writing to real stderr.
-     */
-    onPhase?: (event: SubjectPhaseEvent) => void;
-    /**
-     * CONCURRENT route only (#164 phase 2): the harness clock used to MEASURE each actor's laneWindow
-     * [start,end] (default Date.now). The deterministic heart test does NOT override this — overlap is
-     * produced by a rendezvous latch in the fake runSession + measured by the REAL clock (FIX-1), so
-     * the windows are real, not injected. (A test may override only for non-overlap assertions.)
-     */
-    now?: () => number;
-    /** CONCURRENT route only: the background stateSeries prober cadence (ms). Default 1000. */
-    proberCadenceMs?: number;
-    /**
-     * EXTERNAL-PUBLIC concurrent route only (#164 phase 2): the host-first handoff barrier deadline
-     * (ms). The host seat must surface a shared-session (/lobby/CODE) URL within this budget or the run
-     * fails closed with HUMANISH_CONCURRENT_SHARED_WORLD_LAB_HANDOFF_TIMEOUT and no follower opens.
-     * Default 120000 (also capped by execution.timeoutMs). Tests inject a short value to exercise the
-     * fail-closed path deterministically.
-     */
-    handoffDeadlineMs?: number;
-    /**
-     * EXTERNAL-PUBLIC concurrent route only: the vision reader that extracts a /lobby/CODE off a seat's
-     * screenshot frame (the CDP-independent handoff relay + per-seat convergence observation). Defaults to
-     * the real single-frame OpenAI read (readLobbyCodeFromFrame). Tests inject a fake so the barrier's
-     * handoff + convergence proof can be exercised deterministically without a live vision call.
-     */
-    readLobbyCodeFromFrame?: (frame: Buffer, apiKey: string) => Promise<string | undefined>;
-    /**
-     * Local-tree packing DI seam (tests only, no npm dependency needed to exercise the route):
-     * defaults to createLocalTreeArchive(root, opts) plus a host-side read of the produced archive
-     * file into an ArrayBuffer (the SAME default cua-actor-lab.ts uses). Called ONCE per run, before
-     * the ONE shared-plane sandbox is created, on the live local-tree route.
-     */
-    packLocalTree?: (args: {
-        root: string;
-        extraExclude?: string[];
-        maxArchiveBytes?: number;
-    }) => Promise<{
-        archive: LocalTreeArchive;
-        buffer: ArrayBuffer;
-    }>;
-}
-export interface RunSharedWorldLabOptions {
-    automaticAnalysis?: AutomaticAnalysisHooks;
-    /** Which manifest produced this run (#455); threaded into the status record + bundle. */
-    lab?: RunLabProvenance;
-    cwd: string;
-    config: LabConfig;
-    /** Resolved upstream (scenario.mode + CLI override); defaults safe (dry-run). */
-    dryRun: boolean;
-    open?: boolean;
-    runId?: string;
-    hooks?: SharedWorldLabHooks;
-    /** Present only when the browser-route scorer hooks were CONFIG-DECLARED and loaded by the CLI
-     *  (#316); core-stamped onto the bundle as evidence. Absent for library callers. */
-    scorerProvenance?: RunScorerProvenance;
-}
-export type SharedWorldLabErrorCode = "HUMANISH_LAB_ANALYSIS_INVALID" | "HUMANISH_LAB_TASKS_UNSUPPORTED" | "HUMANISH_SHARED_WORLD_LAB_FAILED" | "HUMANISH_SHARED_WORLD_LAB_ACTOR_UNSUPPORTED" | "HUMANISH_SHARED_WORLD_LAB_INVALID" | "HUMANISH_SHARED_WORLD_LAB_KEYS_MISSING" | "HUMANISH_SHARED_WORLD_LAB_SUBJECT_ENV_MISSING";
-/** One role seat's terminal outcome in the result projection. */
-export interface SharedWorldRoleResult {
-    id: string;
-    index: number;
-    persona: string;
-    /** Terminal role status; "blocked" = fail-fast skipped it; "contract_proof_only" = dry-run. */
-    status: ActorStatus | "blocked" | "contract_proof_only";
-    ok: boolean;
-    session?: {
-        status: ActorStatus;
-        completionReason: ActorCompletionReason;
-        reason: string;
-        screenshots: number;
-    };
-    /** The user-data-dir profile this seat drove (proves per-seat isolation). */
-    profileDir: string;
-    /** Set when the role was skipped by fail-fast (a pinned reason string). */
-    skippedReason?: string;
-    error?: {
-        code: SharedWorldLabErrorCode;
-        message: string;
-    };
-}
-export interface SharedWorldLabResult extends AutomaticAnalysisResult {
-    schema: typeof SHARED_WORLD_LAB_SCHEMA;
-    /** True when the bundle verified AND (dry-run, or every role reached a terminal, engaged
-     * verdict without a harness error). The roles' pass/fail is evidence, not the lab's exit code. */
-    ok: boolean;
-    cwd: string;
-    labId: string;
-    /** The registry-resolved actor id that ran (or would run) the seats. */
-    actor: string;
-    topology: "shared-world";
-    /** The DECLARED number of role seats. */
-    roleCount: number;
-    /** The role ids that actually took a turn, in declared order. */
-    sequence: string[];
-    dryRun: boolean;
-    runId: string;
-    /** Live-only: the ONE shared sandbox's lifecycle proof (the stream/key value is never surfaced). */
-    sandbox?: {
-        sandboxId: string;
-        killed: boolean;
-    };
-    /** Subject provenance (invariant 5): the ONE shared plane. */
-    subject?: RunSubjectProvenance;
-    roles: SharedWorldRoleResult[];
-    observer?: ObserverResult;
-    warnings: string[];
-    error?: {
-        code: SharedWorldLabErrorCode;
-        message: string;
-    };
-}
-/** A fully-resolved role seat (internal). */
-interface RoleSpec {
-    roleId: string;
-    /** 0-based. */
-    roleIndex: number;
-    simId: string;
-    streamId: string;
-    persona: ActorPersonaRef;
-    instructions: string;
-    /** Redacted original composed prompt for legacy study context; execution uses instructions. */
-    evidenceInstructions?: string;
-    assignment?: RunStream["assignment"];
-    /** The role's declared device (a PROMPT SIGNAL — see the file's FIDELITY NOTE). */
-    deviceName: string;
-    /** Lane override, then actor default; omitted preserves the provider default. */
-    reasoningEffort?: ReasoningEffort;
-    /** Deterministic harness-owned completion guard. Lane-level override, else actor default. */
-    stopWhen?: StopWhen;
-    /** A declared observation window (#510). Lane-level override, else actor default. */
-    dwell?: DwellWindow;
-    entry?: string;
-    seatUrl: string;
-    screenshotDir: string;
-    traceArtifactPath: string;
-    profileDir: string;
-}
-/** One role seat's end-to-end run outcome (internal; projected into the result + the bundle). */
-interface RoleOutcome {
-    spec: RoleSpec;
-    session?: CuaLoopResult;
-    sessionError?: string;
-    screenshots: string[];
-    desktopBrowser?: DesktopBrowserEvidence;
-    desktopGeometry?: RunDesktopGeometry;
-    /** Set when fail-fast skipped this role before it ran. */
-    skippedReason?: string;
-    noEngagement: boolean;
-    harnessError: boolean;
-    /** The checkpoint snapshot taken AFTER this role's turn (absent for skipped roles). */
-    afterCheckpoint?: SharedWorldCheckpoint;
-}
-/**
- * Self-match-proof pkill/pgrep -f pattern for a seat's unique profile dir: bracket the first
- * character so the in-sandbox shell running the termination script (whose own command line
- * carries this pattern) can never match itself. Exported (pure) for contract tests.
- */
-export declare function seatProfilePkillPattern(profileDir: string): string;
-/**
- * Build the in-sandbox command that ends ONE seat's browser when its turn ends (pure; exported
- * for contract tests). All roles share the ONE desktop, so a prior seat's browser left alive
- * could keep polling/holding websockets and mutating the shared plane during a later role's
- * turn, with its authenticated window one Alt-Tab away from the current actor. The recorded
- * launch PID (a setsid session leader) is the primary kill (its process group takes the whole
- * browser tree); pkill -f on the seat's unique profile dir is the fallback; a short bounded
- * wait escalates to SIGKILL. Exit is always 0: a termination failure degrades to the caller's
- * warning, never a failed run.
- */
-export declare function buildSeatBrowserTerminationCommand(processId: string | undefined, profileDir: string): string;
-/** Combine a snapshot's per-probe digests into ONE sha256-16 (digest-only; no raw value). */
-export declare function combineCheckpointDigest(parts: string[]): string;
-/**
- * Run ONE checkpoint snapshot LIVE: each declared probe runs read-only via the detached
- * primitive; its stdout is literal-scrubbed (provisioned values + the probe's declared redact
- * literals, folded into `scrub`) then pattern-redacted, then digested. Only the COMBINED digest
- * persists — never the raw value (the seed-step lockdown). Unique step names per snapshot prevent
- * stale-status reuse across snapshots.
- */
-export declare function runCheckpointSnapshot(args: {
-    desktop: E2BDesktopSandbox;
-    snapshotIndex: number;
-    name: string;
-    checkpoints: LabSubjectStateCheckpoint[];
-    prevDigest: string | undefined;
-    scrub: (text: string) => string;
-    requestTimeoutMs: number;
-    timers: DetachedTimers;
-}): Promise<SharedWorldCheckpoint>;
-/** The DECLARED (dry-run) checkpoint snapshot: digest the probe RECIPE (command digests), no run. */
-export declare function declaredCheckpointSnapshot(name: string, checkpoints: LabSubjectStateCheckpoint[]): SharedWorldCheckpoint;
-/** sha256-16 over the ordered seed-step command digests — the seeded-state RECIPE identity. */
-export declare function seedRecipeDigest(config: LabConfig): string;
-/**
- * Wrapped so a DIRECT library caller gets the same status-record lifetime the CLI does: returning
- * from this function finalizes any record the run opened, whichever of its fail-closed exits it
- * took. `runLab` establishes a scope too and nesting is harmless — the inner scope owns what it
- * opened. Without this a test or an adopter calling the backend directly leaves the 5s cadence
- * ticking into a directory something else is deleting, which surfaces as an unrelated ENOTEMPTY.
- */
-export declare function runSharedWorldLab(options: RunSharedWorldLabOptions): Promise<SharedWorldLabResult>;
-/** Project the shared-world run into a humanish.run-bundle.v1 with the sharedWorld evidence block. */
-export declare function buildSharedWorldBundle(args: {
-    /** Lab provenance for the bundle\'s own `lab` field (#455). */
-    lab?: RunLabProvenance;
-    config: LabConfig;
-    descriptor: CuaActorDescriptor;
-    createdAt: string;
-    dryRun: boolean;
-    runId: string;
-    source: RunBundle["source"];
-    roleSpecs: RoleSpec[];
-    roleOutcomes: RoleOutcome[];
-    baselineCheckpoint: SharedWorldCheckpoint;
-    subject: RunSubjectProvenance;
-    sandboxResolution: [number, number];
-    sandboxPreset: DevicePreset;
-    desktopGeometry?: RunDesktopGeometry;
-    seedDigest: string;
-    subjectCommit?: string;
-    failFastReason?: string;
-    desktopAllocated?: boolean;
-    desktopLifetimeComplete?: boolean;
-}): RunBundle;
-export {};