humanish 0.135.0 → 0.136.0

package/dist/verify/screenshot-reads.js

@@ -35,7 +35,7 @@ export async function readScreenshot(runPaths, relativePath) {
     const facts = {
         state: "read",
         size: read.bytes.length,
-        error: screenshotEvidenceError(relativePath, read.bytes),
+        error: await screenshotEvidenceError(relativePath, read.bytes),
         redactedShape: isRedactedFrameShape(read.bytes),
     };
     if (read.stamp.ctimeNs <= startedNs - RACY_WINDOW_NS)

package/docs/architecture/state-driven-executor.md

@@ -110,9 +110,10 @@ action**, not a fatal error:
 
 Public-safety: the notice text carries only the substrate's own stderr (tailed +
 whitespace-collapsed) and a numeric exit code, and is still run through the loop's
-`redactNarration` (known-value scrub + pattern redaction). Raw typed text, secret
-values, and machine paths never appear. The action label comes from
-`describeCuaAction`, which never includes typed text.
+`redactNarration` (known-value scrub, then pattern redaction of keys as written, base64- or
+percent-encoded, then the known-value scrub again). Raw typed text, secret values, and machine
+paths never appear. The action label comes from `describeCuaAction`, which never includes typed
+text.
 
 ## You need a non-vision provider too
 

package/docs/contracts/study-analysis.md

@@ -191,8 +191,9 @@ from run.json before any trace is read, and the first 80 captures selection may
 read. Beside the one trace it is reading, analysis holds at most 800 entries for
 each request and 80 for each participant; their size grows with each trace
 item's text. A run.json past 16 MiB is refused as `ANALYSIS_SOURCE_TOO_LARGE`, and
-a run.json or trace without the fields analysis reads as `ANALYSIS_SOURCE_INVALID`;
-each message names the file, says why, and says no request was sent. Analysis
+a run.json or trace without the fields analysis reads, or a run.json with two of a
+participant's run events sharing an id, as `ANALYSIS_SOURCE_INVALID`; each message
+names the file, says why, and says no request was sent. Analysis
 verifies the run before it reads a trace, so a trace that does not match its
 index in run.json fails verify and `humanish analyze` reports
 `ANALYSIS_VERIFY_FAILED`. A trace past 32 MiB leaves the run `local_only`, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.135.0",
+  "version": "0.136.0",
   "description": "Synthetic user research for apps, CLIs, and agent-facing product flows.",
   "keywords": [
     "cli",