humanish 0.106.0 → 0.106.1

package/dist/substrates/e2b/sandbox.js

@@ -7,7 +7,7 @@
 import { redactText, toErrorMessage } from "../../evidence/redaction.js";
 import { appendSandboxReceipt } from "../../run/sandbox-receipts.js";
 import { ownDesktopAllocation, } from "../desktop-session.js";
-import { E2BDesktopStartupError, isSandboxNotFoundError, } from "./sdk.js";
+import { E2B_DEBUG_KILL_DETAIL, E2BDesktopStartupError, e2bDebugMode, isSandboxNotFoundError, } from "./sdk.js";
 /** A desktop sandbox, on the stock `desktop` template or a named one. */
 export function acquireE2BDesktopSandbox(request) {
     return acquire(request, request.template);
@@ -56,13 +56,22 @@ function boundKill(module) {
  * The SDK resolves false for an id it no longer knows (a 404), and a SandboxNotFoundError,
  * recognized by type, means the same. Every other throw is unconfirmed, whatever its message
  * says: the SDK answers a 404 with false before it throws, so "not found" or "404" in a thrown
- * message comes from some other failure, such as a trace id. Never list the account.
+ * message comes from some other failure, such as a trace id. A true in debug mode sent no
+ * request, so it confirms nothing. Never list the account.
  */
 async function killById(kill, sandboxId, options) {
     if (kill === undefined)
         return { status: "unconfirmed", reason: "release_unavailable" };
+    // The SDK reads the variable when the call starts, so read it at the same point.
+    const debug = e2bDebugMode();
     try {
         const result = await kill(sandboxId, options);
+        if (result === true && debug)
+            return {
+                status: "unconfirmed",
+                reason: "release_unavailable",
+                detail: E2B_DEBUG_KILL_DETAIL,
+            };
         if (result === true)
             return { status: "released", reason: "terminated" };
         if (result === false)
@@ -105,7 +114,9 @@ export function readE2BRelease(result, options) {
         case "release_unavailable":
             return {
                 released: false,
-                warning: `Installed @e2b/desktop SDK does not expose Sandbox.kill; server-side kill-on-timeout will reclaim the ${label.toLowerCase()}.`,
+                warning: result.detail === undefined
+                    ? `Installed @e2b/desktop SDK does not expose Sandbox.kill; server-side kill-on-timeout will reclaim the ${label.toLowerCase()}.`
+                    : `${label} release is unconfirmed: ${result.detail}. If it exists, server-side kill-on-timeout will reclaim it.`,
             };
         case "release_failed":
             return {
@@ -119,6 +130,12 @@ export function readE2BRelease(result, options) {
             };
     }
 }
+/** A release_unavailable result as one lowercase line, for routes and reclaim that report it. */
+export function releaseUnavailableDetail(detail) {
+    return detail === undefined
+        ? "installed @e2b/desktop SDK does not expose Sandbox.kill; server-side kill-on-timeout will reclaim the sandbox"
+        : `${detail}; if the sandbox exists, server-side kill-on-timeout will reclaim it`;
+}
 /**
  * Kill one sandbox by its exact recorded id, for reclaim, and map the shared release result onto
  * reclaim's persisted outcome. It never lists the account.
@@ -129,10 +146,7 @@ export async function destroyE2BSandbox(module, sandboxId, options) {
         return { state: released.reason === "terminated" ? "killed" : "already-gone" };
     switch (released.reason) {
         case "release_unavailable":
-            return {
-                state: "kill-failed",
-                detail: "installed @e2b/desktop SDK does not expose Sandbox.kill; server-side kill-on-timeout will reclaim the sandbox",
-            };
+            return { state: "kill-failed", detail: releaseUnavailableDetail(released.detail) };
         case "invalid_result":
             return {
                 state: "kill-failed",

package/dist/substrates/e2b/sdk.d.ts

@@ -165,7 +165,8 @@ type DesktopCreateCleanup = "killed" | "already_gone" | "unconfirmed";
 /** Startup failed after this call acquired a handle. No credentials/options are included here. */
 export declare class E2BDesktopStartupError extends Error {
     readonly cleanup: DesktopCreateCleanup;
-    constructor(error: unknown, cleanup: DesktopCreateCleanup);
+    readonly cleanupDetail?: string | undefined;
+    constructor(error: unknown, cleanup: DesktopCreateCleanup, cleanupDetail?: string | undefined);
 }
 /**
  * Preserve ownership before the desktop SDK starts Xvfb/XFCE (#581). Its public generic create
@@ -191,4 +192,14 @@ export declare function guardDesktopSandboxCreate(module: E2BDesktopModule): E2B
  * that the exact sandbox humanish created is gone (confirmed reclaimed), never a re-list.
  */
 export declare function isSandboxNotFoundError(error: unknown): boolean;
+/** The variable that puts the E2B SDK in debug mode. */
+export declare const E2B_DEBUG_ENV = "E2B_DEBUG";
+/**
+ * Whether the E2B SDK runs in debug mode, read the way the SDK reads it when a call starts. In
+ * debug mode `Sandbox.kill` returns true without sending a request to E2B, so a true confirms
+ * nothing.
+ */
+export declare function e2bDebugMode(env?: NodeJS.ProcessEnv): boolean;
+/** Why a kill that returned true in debug mode is unconfirmed. */
+export declare const E2B_DEBUG_KILL_DETAIL = "E2B_DEBUG=true makes the E2B SDK return true from Sandbox.kill without contacting E2B";
 export {};

package/dist/substrates/e2b/sdk.js

@@ -29,15 +29,17 @@ export const DESKTOP_CREATE_CLEANUP_TIMEOUT_MS = 10_000;
 /** Startup failed after this call acquired a handle. No credentials/options are included here. */
 export class E2BDesktopStartupError extends Error {
     cleanup;
-    constructor(error, cleanup) {
+    cleanupDetail;
+    constructor(error, cleanup, cleanupDetail) {
         const detail = error instanceof Error ? error.message : String(error);
         const cleanupNote = cleanup === "killed"
             ? "the allocated sandbox was reclaimed"
             : cleanup === "already_gone"
                 ? "the allocated sandbox was already gone"
-                : "cleanup of the allocated sandbox was not confirmed; no retry is allowed and its provider timeout remains the backstop";
+                : `cleanup of the allocated sandbox was not confirmed${cleanupDetail === undefined ? "" : ` (${cleanupDetail})`}; no retry is allowed and its provider timeout remains the backstop`;
         super(`Desktop startup failed after allocation; ${cleanupNote}. ${detail}`, { cause: error });
         this.cleanup = cleanup;
+        this.cleanupDetail = cleanupDetail;
         this.name = "E2BDesktopStartupError";
     }
 }
@@ -78,7 +80,7 @@ export function guardDesktopSandboxCreate(module) {
                     // SDK 2.4 calls this method before create rejects. Keep its boolean contract while
                     // recording unconfirmed cleanup independently of the SDK's catch-and-discard path.
                     this.kill = async () => {
-                        const cleanup = await reclaim();
+                        const { cleanup } = await reclaim();
                         if (cleanup === "unconfirmed")
                             throw new Error("Desktop startup cleanup was not confirmed");
                         return cleanup === "killed";
@@ -103,8 +105,8 @@ export function guardDesktopSandboxCreate(module) {
             catch (error) {
                 if (cleanupOwned === undefined)
                     throw error;
-                const cleanup = await cleanupOwned();
-                throw new E2BDesktopStartupError(error, cleanup);
+                const { cleanup, detail } = await cleanupOwned();
+                throw new E2BDesktopStartupError(error, cleanup, detail);
             }
         }
     }
@@ -113,6 +115,8 @@ export function guardDesktopSandboxCreate(module) {
 async function reclaimFailedDesktopCreate(kill, timeoutMs) {
     const controller = new AbortController();
     let timer;
+    // The SDK reads the variable when the call starts, so read it at the same point.
+    const debug = e2bDebugMode();
     try {
         const result = await Promise.race([
             kill({ requestTimeoutMs: timeoutMs, signal: controller.signal }),
@@ -123,12 +127,17 @@ async function reclaimFailedDesktopCreate(kill, timeoutMs) {
                 }, timeoutMs);
             }),
         ]);
+        // A true in debug mode sent no request, so it confirms nothing.
+        if (result === true && debug)
+            return { cleanup: "unconfirmed", detail: E2B_DEBUG_KILL_DETAIL };
         // The installed SDK documents false as an exact-id 404: already absent is also reclaimed.
-        return result === true ? "killed" : result === false ? "already_gone" : "unconfirmed";
+        if (result === true)
+            return { cleanup: "killed" };
+        return { cleanup: result === false ? "already_gone" : "unconfirmed" };
     }
     catch {
         // Do not serialize cleanup options, connection state, or provider errors that may echo auth.
-        return "unconfirmed";
+        return { cleanup: "unconfirmed" };
     }
     finally {
         if (timer !== undefined)
@@ -166,3 +175,15 @@ export function isSandboxNotFoundError(error) {
     const value = error;
     return (value.name === "SandboxNotFoundError" || value.constructor?.name === "SandboxNotFoundError");
 }
+/** The variable that puts the E2B SDK in debug mode. */
+export const E2B_DEBUG_ENV = "E2B_DEBUG";
+/**
+ * Whether the E2B SDK runs in debug mode, read the way the SDK reads it when a call starts. In
+ * debug mode `Sandbox.kill` returns true without sending a request to E2B, so a true confirms
+ * nothing.
+ */
+export function e2bDebugMode(env = process.env) {
+    return env[E2B_DEBUG_ENV]?.toLowerCase() === "true";
+}
+/** Why a kill that returned true in debug mode is unconfirmed. */
+export const E2B_DEBUG_KILL_DETAIL = `${E2B_DEBUG_ENV}=true makes the E2B SDK return true from Sandbox.kill without contacting E2B`;

package/docs/architecture/restricted-codex-analysis.md

@@ -13,8 +13,10 @@ Linux x64 accepts 0.154.0, 0.157.1
 ([receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/codex-cli-0.157.1-requalification-2026-09-30.md))
 0.159.2
 ([receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/codex-cli-0.159.2-qualification-2026-09-30.md))
-and 0.159.3
-([receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/codex-cli-0.159.3-qualification-2026-10-01.md)).
+0.159.3
+([receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/codex-cli-0.159.3-qualification-2026-10-01.md))
+and 0.160.0
+([receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/codex-cli-0.160.0-qualification-2026-10-01.md)).
 Apple Silicon accepts 0.154.0, which passed installed participant/analysis studies and the
 native dispatch restriction check on an M5 Max; later releases need the same check on a Mac.
 Hosted participants on Linux arm64 and Intel macOS keep 0.154.0 as a pre-existing admission,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.106.0",
+  "version": "0.106.1",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "keywords": [
     "agent-harness",
@@ -92,7 +92,7 @@
     "format:check": "oxfmt --check",
     "lint": "node scripts/check-lint-cap.mjs --max-warnings=444",
     "knip": "knip",
-    "prose:check": "node scripts/check-code-prose.mjs --max-issue-refs=371 --max-fix-tags=23 --max-caps=1743",
+    "prose:check": "node scripts/check-code-prose.mjs --max-issue-refs=371 --max-fix-tags=23 --max-caps=1742",
     "vocabulary:check": "tsx scripts/check-retired-words.ts --max-lane=188 --max-seat=6 --max-role=52 --max-sim=51 --max-study=287"
   },
   "dependencies": {