humanish 0.110.1 → 0.110.3

package/docs/contracts/schemas.md

@@ -279,7 +279,7 @@ instruction?, target?, entry?, host?, reasoningEffort?, stopWhen?, dwell? }` bec
   an interactive PTY would overstate the mechanism (a duplex PTY
   transport does not ship). `terminal.stdin` defaults to `disabled`
   (`sent`/assisted input is rejected until the interventions ledger + a
-  non-comparable marker exist). `runtimeAuth` (`openai-env`, the default, or `openai-egress`)
+  non-comparable marker exist). `runtimeAuth` (`openai-egress`, the default, or `openai-env`)
   declares the agent's runtime-auth channel, recorded as names only. On a live run, the engine
   resolves the registered terminal descriptor and requires
   `keyPlacement: in-sandbox-command-scoped` before creating a sandbox. With `openai-env`
@@ -1068,9 +1068,9 @@ contract.
 ## Terminal Cost Ledger And No-Spend Proof
 
 The terminal-product route (`src/routes/terminal/route.ts`), under the default
-`runtimeAuth: openai-env`, passes a real provider key only to the in-sandbox agent
-command; `openai-egress` gives the command a placeholder and keeps the key in an
-external E2B header transform. Neither mode puts it in sandbox-global env or
+`runtimeAuth: openai-egress`, gives the in-sandbox agent command a placeholder and
+keeps the key in an external E2B header transform; `openai-env` passes a real
+provider key only to that command. Neither mode puts it in sandbox-global env or
 metadata, so the no-spend claim must be derived from a ledger, never asserted. The
 live run writes both to `terminal-ledgers.json` (a `cost` block + a
 `noSpendProof` block, additive to `humanish.terminal-ledgers.v1`).
@@ -1186,7 +1186,8 @@ the CLI's run command when that signal stops a live run outside post-run
 analysis. It first prints one line saying it is stopping and refuses any further sandbox
 create. It then kills the E2B sandboxes the run's `sandbox-receipts.ndjson` names, each sandbox
 a create in flight reports as its id arrives, and each one E2B lists with the run's owner tags,
-writes `reclaim-receipt.json` as `humanish reclaim` does, and exits
+writes `reclaim-receipt.json` as `humanish reclaim` does, rewrites each run file that names one of
+the run's raw sandbox ids with the marker and digest, as a finished run's publish does, and exits
 128+n. The bundle is not finished: run.json keeps its last live flush, with
 `outcome: { state: interrupted, ok: false, signal, at }` when the run had
 flushed one, and status.json gets no `outcome`. A `running` record that stopped refreshing still reads as

package/docs/contracts/study-analysis.md

@@ -321,10 +321,13 @@ The states without findings:
 
 - `running`: the automatic analysis is queued or running. `next` is `review` again.
 - `skipped`: the automatic analysis was skipped or refused, for example without
-  `OPENAI_API_KEY`. `next` is `analyze --max-cost 3`.
+  `OPENAI_API_KEY`, or the run's study file sets `review.analysis: false`
+  (`AUTOMATIC_ANALYSIS_DISABLED`, read from the file when the view is built). `next` is
+  `analyze --max-cost 3`, which runs an analysis anyway.
 - `failed`: the latest attempt failed or was cancelled and no usable version exists. `next`
   reruns it with the same analyst, `--provider codex` for the Codex account analyst.
-- `none`: no analysis ran for this live run, for example with `review.analysis: false`.
+- `none`: no analysis ran for this live run and nothing records why, for example a run that
+  started from a library call, or one whose study file has moved or changed id.
 - `dry_run`: a dry run has no participant evidence to analyze.
 - `unavailable`: the run or its analysis records could not be read or checked, or the analysis
   text matched a sensitive-text pattern (`ANALYSIS_SENSITIVE_TEXT_QUARANTINED`), which the

package/docs/product/automatic-analysis.md

@@ -127,7 +127,7 @@ outcomes and the deterministic review verdict are never rewritten by analysis.
 | `AUTOMATIC_ANALYSIS_SOURCE_CHANGED`           | `failed`                  | The run directory changed after the run published its bundle          |
 | `AUTOMATIC_ANALYSIS_KEY_MISSING`              | `skipped`                 | No OpenAI API key                                                     |
 | `AUTOMATIC_ANALYSIS_NO_PARTICIPANT_EVIDENCE`  | `skipped`                 | A default analysis found no participant evidence                      |
-| `AUTOMATIC_ANALYSIS_ACTOR_CANCELLED`          | `skipped`                 | The harness cancelled the participants                                |
+| `AUTOMATIC_ANALYSIS_ACTOR_CANCELLED`          | `skipped`                 | The harness cancelled the participants, or a signal stopped the run   |
 | `AUTOMATIC_ANALYSIS_CLEANUP_UNCONFIRMED`      | `skipped`                 | A local VM study could not confirm its cleanup; the command exits 2   |
 | `AUTOMATIC_ANALYSIS_ALREADY_REQUESTED`        | `skipped`                 | Another request already claimed this run's analysis                   |
 | `AUTOMATIC_ANALYSIS_BUSY`                     | `skipped`                 | Another analysis is running                                           |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.110.1",
+  "version": "0.110.3",
   "description": "Synthetic user research for apps, CLIs, and agent-facing product flows.",
   "keywords": [
     "cli",
@@ -56,11 +56,12 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && pnpm --filter humanish-observer build && pnpm --filter humanish-tui build && node scripts/finish-build.mjs",
-    "check": "pnpm format:check && pnpm lint && pnpm knip && pnpm prose:check && pnpm vocabulary:check && pnpm docs:check && pnpm site-css:check && pnpm typecheck && pnpm test && pnpm tui:test && pnpm build && pnpm guest-media:startup:proof && pnpm cli:startup:test && pnpm cli:preflight:test && pnpm cli:dotenv:test && pnpm cli:peer:test && pnpm tui:smoke",
+    "check": "pnpm format:check && pnpm lint && pnpm knip && pnpm prose:check && pnpm vocabulary:check && pnpm docs:check && pnpm site-css:check && pnpm typecheck && pnpm test && pnpm tui:test && pnpm build && pnpm guest-media:startup:proof && pnpm cli:startup:test && pnpm cli:preflight:test && pnpm cli:dotenv:test && pnpm cli:peer:test && pnpm cli:skill:test && pnpm tui:smoke",
     "cli:startup:test": "node scripts/terminal-startup-exit-proof.mjs",
     "cli:preflight:test": "node scripts/task-route-preflight-proof.mjs",
     "cli:dotenv:test": "node scripts/dotenv-proof.mjs",
     "cli:peer:test": "node scripts/peer-install-proof.mjs",
+    "cli:skill:test": "node scripts/skill-first-run-proof.mjs",
     "humanish": "tsx src/cli.ts",
     "pack:dry-run": "npm pack --dry-run",
     "prepack": "pnpm build",
@@ -74,6 +75,7 @@
     "tui:smoke": "node scripts/tui-smoke.mjs",
     "tui:test": "pnpm --filter humanish-tui test",
     "release:dogfood": "node scripts/release-dogfood.mjs",
+    "bench": "tsx bench/run.ts",
     "browser-control:proof": "node scripts/browser-control-proof.mjs",
     "docs:generate": "tsx scripts/generate-cli-docs.ts",
     "docs:check": "tsx scripts/generate-cli-docs.ts --check && tsx scripts/check-doc-paths.ts && tsx scripts/check-doc-symbols.ts && tsx scripts/check-doc-comments.ts && tsx scripts/check-doc-study-fields.ts",

package/skills/humanish/SKILL.md

@@ -289,7 +289,6 @@ Useful commands:
 ```bash
 npx humanish study list
 npx humanish study show first-run
-npx humanish watch first-run
 npx humanish run first-run --json --no-open
 ```
 
@@ -377,25 +376,30 @@ inbox page. See `docs/contracts/schemas.md` for the full `comms:` shape and
 ## First Proof Run
 
 Run the no-credentials path first. It is a dry run: humanish writes a synthetic
-run bundle and tests no target app behavior:
+run bundle and tests no target app behavior. Every command in this block
+finishes and exits, needs no key and spends nothing; lines marked
+`# live only` need keys and spend money, so run them only when the user has
+approved a live run. `run` prints the run id; use it in place of `<id>`.
 
 ```bash
-npx humanish doctor
-npx humanish watch
-npx humanish verify --run latest --json
-npx humanish feedback issue --run latest --repo example/app --format markdown
-```
-
-For CI or non-interactive proof:
-
-```bash
-npx humanish watch --json --no-open
+npx humanish doctor --json
 npx humanish run first-run --json --no-open
+npx humanish verify --run <id> --json
+npx humanish review --run <id> --json
+npx humanish observe --run <id>
+npx humanish run try-live --json --no-open  # live only
+npx humanish feedback issue --run <id> --repo example/app --format markdown  # live only
 ```
 
-The feedback command prints a public-safe Markdown draft. It must not call the
-GitHub API, require a token, update Projects, use provider credits, or claim
-product behavior proof from a dry run.
+`observe` prints the path of the run's Observer page for the person you are
+working for. Without an interactive terminal, `observe` and `watch` print the
+result and exit; at a person's terminal they serve the Observer until Ctrl-C.
+
+`feedback issue` drafts from a live run only and refuses a dry run with
+`HUMANISH_FEEDBACK_REQUIRES_LIVE_RUN`. Its Markdown draft is checked for
+secret, key, token and local-path shapes; it is not checked for personal data. It
+must not call the GitHub API, require a token, update Projects, use provider
+credits, or claim product behavior proof from a dry run.
 
 When the target app can run locally, prove a known browser path with a
 scripted-browser study after starting the app on loopback. The study replays a
@@ -414,8 +418,8 @@ no browser.
 # in another terminal, start the target app on 127.0.0.1 or localhost
 npx humanish study show <study> --json
 npx humanish run <study> --json --no-open
-npx humanish verify --run latest --json
-npx humanish observe --run latest --open   # for a person; it serves until Ctrl-C
+npx humanish verify --run <id> --json
+npx humanish observe --run <id> --open   # for a person; at their terminal it serves until Ctrl-C
 ```
 
 Do not use `humanish watch --count ...` as a substitute for a scripted-browser
@@ -442,7 +446,7 @@ Do not paste values into files, prompts, run bundles, issue drafts, or logs.
 Load local values only at invocation time:
 
 ```bash
-npx humanish watch .humanish/studies/local-live.yaml --dotenv .humanish/local/provider.env
+npx humanish run .humanish/studies/local-live.yaml --dotenv .humanish/local/provider.env --json --no-open
 ```
 
 When choosing dogfood targets, prefer apps, CLIs, or agent-facing tools with a