humanish 0.106.0 → 0.106.1

package/AGENTS.md

@@ -35,7 +35,9 @@ diff.
 Three counts are held to caps in package.json: oxlint warnings (`lint`, `--max-warnings`), comment
 prose (`prose:check`) and the retired words lane, seat, role, sim and study in `src/` identifiers
 (`vocabulary:check`). Each checker fails when a count is above its cap or below it, so the PR that
-reduces a count lowers its cap to the new count; the failure names the flag and the value.
+reduces a count lowers its cap to the new count; the failure names the flag and the value. CI's
+`caps` workflow fails a PR that raises or removes a cap against the base branch, unless the PR has
+the `raise-cap` label and a `Cap raise:` line in its body that says why.
 
 ## Layout
 

package/CHANGELOG.md

@@ -8,6 +8,16 @@ The Unreleased section holds the full notes for the next version until it is tag
 
 ## Unreleased
 
+## 0.106.1: Codex CLI 0.160.0 and reclaim in E2B debug mode (2026-10-01)
+
+Codex participants, Codex-account analysis and `humanish doctor` admit Codex CLI 0.160.0 (published
+to npm 2026-10-01) on Linux x64, which 0.106.0 refused. Doctor's recovery for an unadmitted release
+suggests `npm install -g @openai/codex@0.160.0`. `humanish reclaim` refuses to run with
+`E2B_DEBUG=true`, where the E2B SDK reports kills it never sent, and a run's sandbox teardown in
+debug mode reads unconfirmed.
+
+[Release notes](https://github.com/danielgwilson/humanish/releases/tag/v0.106.1)
+
 ## 0.106.0: Node 22.19, a smaller library API and stricter share safety (2026-10-01)
 
 humanish needs Node 22.19.0 or later. The library entry point exports 83 names, down from 377:

package/CONTRIBUTING.md

@@ -72,8 +72,10 @@ comments (`prose:check`: issue references, `FIX-N` tags, all-caps emphasis), and
 `src/` outside the exempt contract modules that still say lane, seat, role, sim or study
 (`vocabulary:check`). Each check fails when its count rises above the cap and also when it falls
 below it, so the PR that reduces a count lowers the cap in the same commit; the failure message
-names the flag and the new value. `pnpm lint` prints the warnings that already exist, several
-hundred of them; that is expected. `pnpm knip` fails on unused files,
+names the flag and the new value. CI's `caps` workflow (`scripts/check-cap-direction.mjs`) also
+fails a PR that raises or removes a cap against the base branch, unless the PR has the `raise-cap`
+label and a `Cap raise:` line in its body that says why. `pnpm lint` prints the warnings that
+already exist, several hundred of them; that is expected. `pnpm knip` fails on unused files,
 dependencies and exports, and on any import cycle.
 
 ## Useful Commands

package/dist/actors/codex/qualified-versions.d.ts

@@ -10,7 +10,7 @@
  * of them.
  */
 export declare const QUALIFIED_CODEX_CLI_VERSIONS: {
-    readonly "linux-x64": readonly ["0.154.0", "0.157.1", "0.159.2", "0.159.3"];
+    readonly "linux-x64": readonly ["0.154.0", "0.157.1", "0.159.2", "0.159.3", "0.160.0"];
     readonly "darwin-arm64": readonly ["0.154.0"];
 };
 /**

package/dist/actors/codex/qualified-versions.js

@@ -10,7 +10,7 @@
  * of them.
  */
 export const QUALIFIED_CODEX_CLI_VERSIONS = {
-    "linux-x64": ["0.154.0", "0.157.1", "0.159.2", "0.159.3"],
+    "linux-x64": ["0.154.0", "0.157.1", "0.159.2", "0.159.3", "0.160.0"],
     "darwin-arm64": ["0.154.0"],
 };
 /**

package/dist/actors/contract.d.ts

@@ -140,7 +140,7 @@ export interface ActorTokenUsage {
  * Codex CLI releases a recorded account profile may name. Append-only: a release can leave the
  * launch lists in codex/qualified-versions.ts, but saved bundles naming it stay readable.
  */
-export declare const RECORDED_CODEX_CLI_VERSIONS: readonly ["0.154.0", "0.157.1", "0.159.2", "0.159.3"];
+export declare const RECORDED_CODEX_CLI_VERSIONS: readonly ["0.154.0", "0.157.1", "0.159.2", "0.159.3", "0.160.0"];
 export type RecordedCodexCliVersion = (typeof RECORDED_CODEX_CLI_VERSIONS)[number];
 export declare function isRecordedCodexCliVersion(value: unknown): value is RecordedCodexCliVersion;
 /** Requested execution profile; per-request verification is recorded separately. */

package/dist/actors/contract.js

@@ -58,7 +58,13 @@ export const ACTOR_STOP_CAUSES = [
  * Codex CLI releases a recorded account profile may name. Append-only: a release can leave the
  * launch lists in codex/qualified-versions.ts, but saved bundles naming it stay readable.
  */
-export const RECORDED_CODEX_CLI_VERSIONS = ["0.154.0", "0.157.1", "0.159.2", "0.159.3"];
+export const RECORDED_CODEX_CLI_VERSIONS = [
+    "0.154.0",
+    "0.157.1",
+    "0.159.2",
+    "0.159.3",
+    "0.160.0",
+];
 export function isRecordedCodexCliVersion(value) {
     return RECORDED_CODEX_CLI_VERSIONS.some((version) => version === value);
 }

package/dist/lab/composition-rules.d.ts

@@ -3,3 +3,5 @@ import type { LabConfig } from "./types.js";
 export declare function compositionReason(config: LabConfig): string | null;
 /** Why a this-repo lab cannot run live. The parser and the preview planner both refuse with it. */
 export declare const THIS_REPO_DRY_RUN_ONLY = "this-repo labs are dry-run only; use a clone or app-url subject for a live run.";
+/** A desktop-cli subject with no product to study. The computer-use planner checks this too. */
+export declare function desktopCliProductReason(config: LabConfig): string | null;

package/dist/lab/composition-rules.js

@@ -1,7 +1,10 @@
 // Which subject, target and actor compositions a lab may declare. Each rule returns the refusal
 // message for the first thing its composition gets wrong, or null. compositionReason runs them in
-// the parser's order; parseLabConfig calls it after the structural parse, and the planLab design
-// has library callers go through the same function.
+// the parser's order, and only parseLabConfig calls it. planLab does not: each route planner checks
+// a library caller's config itself, under its route's error codes. The planners call the shared
+// checks in lab/validation.ts and desktopCliProductReason below. The other subject rules here have
+// planner counterparts whose conditions and wording differ (clone serve and repo, local-tree
+// target, in-process fan-out, loopback targets, scripted scenario.ref).
 import { isLoopbackUrl } from "./parse/subject.js";
 import { REPO_SLUG_PATTERN } from "./parse/values.js";
 import { declaredTargets } from "./plan-participants.js";
@@ -221,11 +224,17 @@ function localTreeValidationReason(config) {
 //
 // Fail-closed on the pairing (invariant 6): a hosted desktop and a computer-use actor, because
 // "watch a person use a terminal" is not something the other substrates can do.
+/** A desktop-cli subject with no product to study. The computer-use planner checks this too. */
+export function desktopCliProductReason(config) {
+    return config.subject.source === "desktop-cli" && config.subject.product?.name === undefined
+        ? "desktop-cli subjects need `subject.product.name` — the CLI the participant is being asked to use."
+        : null;
+}
 function desktopCliValidationReason(config) {
-    if (config.subject.source === "desktop-cli") {
-        if (config.subject.product?.name === undefined) {
-            return "desktop-cli subjects need `subject.product.name` — the CLI the participant is being asked to use.";
-        }
+    const productReason = desktopCliProductReason(config);
+    if (productReason)
+        return productReason;
+    if (config.subject.source === "desktop-cli" && config.subject.product !== undefined) {
         if (config.execution?.target !== undefined && config.execution.target !== "e2b-desktop") {
             return "desktop-cli subjects are studied at a hosted desktop — set `execution.target: e2b-desktop` or omit it.";
         }

package/dist/lab/plan-base.d.ts

@@ -13,6 +13,12 @@ export declare function desktopRequirements(config: LabConfig, args: {
     externalCatch: boolean;
 }): Requirement[];
 export declare function brainOf(config: LabConfig, callerProvider: boolean): Brain;
+/** The brain of a run whose provider the library caller supplies. */
+export declare function callerBrainOf(config: LabConfig): Extract<Brain, {
+    kind: "caller";
+}>;
+/** The model a participant's spend is priced at when its provider reports none. */
+export declare function pricedModel(brain: Brain): string;
 /** The fields every plan shares, from a config whose analysis already resolved. */
 export declare function planBase(config: LabConfig, input: {
     readonly dryRun: boolean;

package/dist/lab/plan-base.js

@@ -85,10 +85,23 @@ export function desktopRequirements(config, args) {
 export function brainOf(config, callerProvider) {
     const actor = config.actors[0];
     if (callerProvider)
-        return { kind: "caller" };
+        return callerBrainOf(config);
+    const declared = declaredModelOf(config);
     if (actor?.type === "local-agent")
-        return { kind: "local-agent", agent: actor.localAgent ?? "codex" };
-    return { kind: "openai", model: actor?.model ?? DEFAULT_OPENAI_CU_MODEL };
+        return { kind: "local-agent", agent: actor.localAgent ?? "codex", ...declared };
+    return { kind: "openai", model: actor?.model ?? DEFAULT_OPENAI_CU_MODEL, ...declared };
+}
+/** The brain of a run whose provider the library caller supplies. */
+export function callerBrainOf(config) {
+    return { kind: "caller", ...declaredModelOf(config) };
+}
+function declaredModelOf(config) {
+    const model = config.actors[0]?.model;
+    return model === undefined ? {} : { declaredModel: model };
+}
+/** The model a participant's spend is priced at when its provider reports none. */
+export function pricedModel(brain) {
+    return brain.declaredModel ?? DEFAULT_OPENAI_CU_MODEL;
 }
 /** The fields every plan shares, from a config whose analysis already resolved. */
 export function planBase(config, input) {

package/dist/lab/plan-types.d.ts

@@ -73,15 +73,23 @@ interface PreviewPlan extends PlanBase {
     /** A safe integer of at least 1. */
     readonly participantCount: number;
 }
-/** The model driving a desktop participant. `caller` is the library caller's buildProvider. */
+/**
+ * The model driving a desktop participant. `caller` is the library caller's buildProvider.
+ * `declaredModel` is actors[0].model as the lab wrote it, absent when undeclared: the providers
+ * take it as written, and spend is priced at it, else the default (pricedModel). An openai
+ * brain's `model` is the one its provider runs, with that default applied.
+ */
 export type Brain = {
     readonly kind: "openai";
     readonly model: string;
+    readonly declaredModel?: string;
 } | {
     readonly kind: "local-agent";
     readonly agent: LocalAgentId;
+    readonly declaredModel?: string;
 } | {
     readonly kind: "caller";
+    readonly declaredModel?: string;
 };
 export type ProvisionedSubject = {
     readonly kind: "clone";
@@ -121,9 +129,9 @@ export type ComputerUseRunner = {
 /** The caller's executor and provider together; one participant. */
  | {
     readonly desktop: "in-process";
-    readonly brain: {
-        readonly kind: "caller";
-    };
+    readonly brain: Extract<Brain, {
+        kind: "caller";
+    }>;
     readonly participants: readonly [ComputerUseParticipant];
     readonly subject: AppUrlSubject | {
         readonly kind: "local-app";