humanish 0.21.0 → 0.22.0

package/dist/comms-evidence.d.ts

@@ -0,0 +1,27 @@
+import type { CommsMessage } from "./comms-types.js";
+export declare const COMMS_THREAD_SCHEMA = "humanish.comms-thread.v1";
+export interface CommsThreadEntry {
+    id: string;
+    channel: CommsMessage["channel"];
+    /** sha256-16 of the raw sender address. */
+    fromDigest: string;
+    /** sha256-16 of each recipient inbox address. */
+    toDigests: string[];
+    /** sha256-16 of the subject (non-reversible for a PII subject; correlates identical subjects). */
+    subjectDigest?: string;
+    /** sha256-16 of each actionable link (high-entropy → non-reversible). */
+    linkDigests: string[];
+    /** COUNT ONLY — a short OTP's digest is reversible, so the code itself never lands here. */
+    codeCount: number;
+    sentAt: number;
+    deliveredAt: number;
+}
+export interface CommsThreadArtifact {
+    schema: typeof COMMS_THREAD_SCHEMA;
+    channel: CommsMessage["channel"];
+    count: number;
+    thread: CommsThreadEntry[];
+}
+/** Project polled inbox messages into the digest-only thread artifact. Pure; the caller writes it into
+ *  the run dir and registers it as an adapter-artifact. */
+export declare function buildCommsThreadArtifact(messages: CommsMessage[]): CommsThreadArtifact;

package/dist/comms-evidence.js

@@ -0,0 +1,31 @@
+// Digest-only evidence for a captured comms thread (#297). Proves "the verification mail arrived and
+// the persona could act on it" WITHOUT persisting raw PHI. Written as an adapter-artifact
+// (humanish.comms-thread.v1), so it inherits the bundle's existence-verify + public-safety scan.
+//
+// Digest discipline (deliberate, see below): addresses + links are digested (high entropy → the digest
+// is not reversible). The subject is DIGESTED too, not stored as text — redactText only scrubs
+// secret-SHAPED tokens/paths, not free-form PII (the #108 gap), so a subject like "results for <name>"
+// would pass through verbatim; a sha256-16 keeps a PII subject non-reversible while still letting you
+// correlate identical subjects. OTP CODES are a COUNT ONLY, never digested — a sha256 of a 6-digit code
+// has ~10^6 preimages and is trivially brute-forced back to the code, so a "code digest" would leak it.
+// Net: NO raw address/subject/link/OTP text ever lands in the artifact. Same caution as the lobby code.
+import { digestText } from "./redaction.js";
+export const COMMS_THREAD_SCHEMA = "humanish.comms-thread.v1";
+/** Project polled inbox messages into the digest-only thread artifact. Pure; the caller writes it into
+ *  the run dir and registers it as an adapter-artifact. */
+export function buildCommsThreadArtifact(messages) {
+    const channel = messages[0]?.channel ?? "email";
+    const thread = messages.map((message) => ({
+        id: message.id,
+        channel: message.channel,
+        fromDigest: digestText(message.from, 16),
+        toDigests: message.to.map((address) => address.digest),
+        ...(message.subject === undefined ? {} : { subjectDigest: digestText(message.subject, 16) }),
+        linkDigests: message.links.map((link) => digestText(link, 16)),
+        codeCount: message.codes.length,
+        sentAt: message.sentAt,
+        deliveredAt: message.deliveredAt
+    }));
+    return { schema: COMMS_THREAD_SCHEMA, channel, count: thread.length, thread };
+}
+//# sourceMappingURL=comms-evidence.js.map

package/dist/comms-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms-evidence.js","sourceRoot":"","sources":["../src/comms-evidence.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,0FAA0F;AAC1F,iGAAiG;AACjG,EAAE;AACF,uGAAuG;AACvG,+FAA+F;AAC/F,uGAAuG;AACvG,sGAAsG;AACtG,wGAAwG;AACxG,wGAAwG;AACxG,wGAAwG;AAGxG,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AA0B9D;2DAC2D;AAC3D,MAAM,UAAU,wBAAwB,CAAC,QAAwB;IAC/D,MAAM,OAAO,GAA4B,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC;IACzE,MAAM,MAAM,GAAuB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5D,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACtD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC5F,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9D,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;AAChF,CAAC"}

package/dist/comms-sandbox-catch.d.ts

@@ -0,0 +1,63 @@
+import type { CommsChannel } from "./comms-types.js";
+import { type EmailSendProfile } from "./comms-email-catch.js";
+import { type DetachedTimers } from "./e2b-detached.js";
+import type { E2BDesktopSandbox } from "./e2b-desktop-launch.js";
+/** The default in-sandbox loopback port for the catch. Fixed (not ephemeral) so the injected base-URL
+ *  env is known before `createDesktopSandbox`. 8025 is the conventional local-mail-UI port and is
+ *  unlikely to collide with a subject app; override via config if it does. */
+export declare const DEFAULT_SANDBOX_CATCH_PORT = 8025;
+/**
+ * The self-contained in-sandbox capture server (a plain node ESM string — runs on the sandbox's own
+ * node, imports nothing from humanish). It is DELIBERATELY dumb: it records each POST verbatim as an
+ * NDJSON line `{t, path, body}` and returns a plausible provider success — all normalization/profile
+ * parsing happens host-side on the drained lines, so the typed, tested profiles stay in one place.
+ * argv: <port> <deliveriesFile>.
+ */
+export declare const SANDBOX_CATCH_SCRIPT: string;
+export interface DeployCommsCatchOptions {
+    /** Fixed loopback port the catch listens on (default 8025). Must be free inside the sandbox. */
+    port?: number;
+    /** In-sandbox working dir for the script + NDJSON (default /tmp/humanish-comms). */
+    dir?: string;
+    /** Detached-process name ([a-z0-9-]); default "comms-catch". */
+    name?: string;
+    /** Readiness-probe budget (ms) for the catch's /health (default 15000). */
+    readyTimeoutMs?: number;
+    requestTimeoutMs?: number;
+    timers?: DetachedTimers;
+}
+export interface DeployedCommsCatch {
+    port: number;
+    /** Inject THIS as the app's email-API base URL (e.g. RESEND_API_URL) — the sandbox's own loopback. */
+    baseUrl: string;
+    deliveriesPath: string;
+    /** Whether the catch's /health returned OUR service marker within the readiness budget. Callers MUST
+     *  treat `ready === false` as fatal (do not inject baseUrl into a dead catch — the app's sends would
+     *  silently fail with nothing captured). */
+    ready: boolean;
+}
+/** A raw send the in-sandbox catch captured (host-side parsing happens in routeCapturedSends). */
+export interface RawCapturedSend {
+    path: string;
+    body: string;
+    t: number;
+}
+/**
+ * Write + launch the in-sandbox catch (detached), then probe it ready. Call AFTER the subject sandbox
+ * is created and BEFORE the subject app's serve.start, so the base URL resolves at the app's boot.
+ */
+export declare function deployCommsCatch(desktop: E2BDesktopSandbox, options?: DeployCommsCatchOptions): Promise<DeployedCommsCatch>;
+/**
+ * Drain new captured sends from the in-sandbox NDJSON since `cursor` (a line count). Returns the fresh
+ * sends and the new cursor. Cheap `cat` over commands.run; NDJSON is small for a run.
+ */
+export declare function drainCommsCatch(desktop: E2BDesktopSandbox, deployed: Pick<DeployedCommsCatch, "deliveriesPath">, cursor?: number, requestTimeoutMs?: number): Promise<{
+    sends: RawCapturedSend[];
+    cursor: number;
+}>;
+/**
+ * Parse drained raw sends with the host profiles and route them into the CommsChannel (the host-side
+ * FauxInbox). Returns the number of inbox deliveries made. Same profiles as the host catch, so the
+ * in-sandbox and in-process routes normalize identically.
+ */
+export declare function routeCapturedSends(sends: RawCapturedSend[], channel: CommsChannel, profiles?: EmailSendProfile[]): Promise<number>;

package/dist/comms-sandbox-catch.js

@@ -0,0 +1,157 @@
+// Deploy the vendor-neutral email catch INSIDE the subject E2B sandbox and bridge captured sends back
+// to the host bus (#297 config-block core). The host `startEmailCatchServer` binds the HOST's loopback,
+// which a sandboxed app cannot reach — `127.0.0.1:PORT` from the app is the SANDBOX's loopback. So the
+// listener must live in the sandbox: we write a tiny self-contained capture server (no deps, no host
+// import) into the sandbox, launch it detached (the same substrate that serves the subject app), and
+// each poll `cat` its append-only NDJSON of captured sends back to the host, where the real profiles
+// parse them and route into the CommsChannel. A FIXED loopback port is chosen up front so the app's
+// injected base-URL env (`http://127.0.0.1:<port>`) is known before the sandbox is created.
+import { DEFAULT_EMAIL_PROFILES } from "./comms-email-catch.js";
+import { startDetachedProcess } from "./e2b-detached.js";
+/** The default in-sandbox loopback port for the catch. Fixed (not ephemeral) so the injected base-URL
+ *  env is known before `createDesktopSandbox`. 8025 is the conventional local-mail-UI port and is
+ *  unlikely to collide with a subject app; override via config if it does. */
+export const DEFAULT_SANDBOX_CATCH_PORT = 8025;
+const DEFAULT_CATCH_DIR = "/tmp/humanish-comms";
+/** Single-quote for safe shell interpolation. */
+function shq(value) {
+    return `'${value.replaceAll("'", "'\\''")}'`;
+}
+/**
+ * The self-contained in-sandbox capture server (a plain node ESM string — runs on the sandbox's own
+ * node, imports nothing from humanish). It is DELIBERATELY dumb: it records each POST verbatim as an
+ * NDJSON line `{t, path, body}` and returns a plausible provider success — all normalization/profile
+ * parsing happens host-side on the drained lines, so the typed, tested profiles stay in one place.
+ * argv: <port> <deliveriesFile>.
+ */
+export const SANDBOX_CATCH_SCRIPT = [
+    'import { createServer } from "node:http";',
+    'import { appendFileSync, mkdirSync } from "node:fs";',
+    'import { dirname } from "node:path";',
+    'const port = Number(process.argv[2] || 8025);',
+    'const outFile = process.argv[3] || "/tmp/humanish-comms/deliveries.ndjson";',
+    'try { mkdirSync(dirname(outFile), { recursive: true }); } catch {}',
+    'const MAX = 5 * 1024 * 1024;',
+    'createServer((req, res) => {',
+    '  const path = (req.url || "/").split("?")[0];',
+    '  if (req.method === "GET" && (path === "/" || path === "/health")) { res.writeHead(200, { "content-type": "application/json" }); res.end(JSON.stringify({ ok: true, service: "humanish-comms-catch" })); return; }',
+    '  if (req.method !== "POST") { res.writeHead(404, { "content-type": "application/json" }); res.end(JSON.stringify({ error: "not found" })); return; }',
+    '  let size = 0; const chunks = [];',
+    '  req.on("data", (c) => { size += c.length; if (size > MAX) { req.destroy(); } else { chunks.push(c); } });',
+    '  req.on("end", () => {',
+    '    const body = Buffer.concat(chunks).toString("utf8");',
+    '    try { appendFileSync(outFile, JSON.stringify({ t: Date.now(), path, body }) + "\\n"); } catch {}',
+    '    const id = "humanish-catch-" + Date.now().toString(36) + Math.random().toString(36).slice(2, 8);',
+    '    if (path === "/v3/mail/send") { res.writeHead(202, { "x-message-id": id }); res.end(); }',
+    '    else if (path.endsWith("/batch")) { res.writeHead(200, { "content-type": "application/json" }); res.end(JSON.stringify({ data: [{ id }] })); }',
+    '    else { res.writeHead(200, { "content-type": "application/json" }); res.end(JSON.stringify({ id })); }',
+    '  });',
+    '  req.on("error", () => { try { res.writeHead(400); res.end(); } catch {} });',
+    '}).listen(port, "127.0.0.1");'
+].join("\n");
+/** Readiness probe that asserts OUR service marker in the /health body (not merely any 2xx) — so a
+ *  process squatting on the fixed port cannot produce a false "ready" while the app's sends bypass us. */
+async function catchHealthy(desktop, port, options) {
+    const now = options.now ?? Date.now;
+    const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const deadline = now() + options.timeoutMs;
+    for (;;) {
+        const result = await desktop.commands
+            .run(`curl -s --max-time 5 http://127.0.0.1:${port}/health 2>/dev/null || true`, { requestTimeoutMs: options.requestTimeoutMs })
+            .catch(() => ({ stdout: "" }));
+        if ((result.stdout ?? "").includes("humanish-comms-catch"))
+            return true;
+        if (now() >= deadline)
+            return false;
+        await sleep(1000);
+    }
+}
+/**
+ * Write + launch the in-sandbox catch (detached), then probe it ready. Call AFTER the subject sandbox
+ * is created and BEFORE the subject app's serve.start, so the base URL resolves at the app's boot.
+ */
+export async function deployCommsCatch(desktop, options = {}) {
+    // Validate the port to an integer before it reaches the shell command (defense-in-depth: a future
+    // caller might cast a config value; the value is typed `number` but this makes injection impossible).
+    const port = Math.trunc(Number(options.port ?? DEFAULT_SANDBOX_CATCH_PORT));
+    if (!Number.isInteger(port) || port <= 0 || port > 65_535) {
+        throw new Error(`deployCommsCatch: invalid port ${JSON.stringify(options.port)}`);
+    }
+    const dir = options.dir ?? DEFAULT_CATCH_DIR;
+    const name = options.name ?? "comms-catch";
+    const requestTimeoutMs = options.requestTimeoutMs ?? 30_000;
+    const scriptPath = `${dir}/catch.mjs`;
+    const deliveriesPath = `${dir}/deliveries.ndjson`;
+    await desktop.commands.run(`mkdir -p ${shq(dir)}`, { requestTimeoutMs });
+    await desktop.files.write(scriptPath, SANDBOX_CATCH_SCRIPT);
+    await startDetachedProcess(desktop, {
+        name,
+        command: `node ${shq(scriptPath)} ${port} ${shq(deliveriesPath)}`,
+        requestTimeoutMs
+    });
+    const ready = await catchHealthy(desktop, port, {
+        timeoutMs: options.readyTimeoutMs ?? 15_000,
+        requestTimeoutMs,
+        ...(options.timers ?? {})
+    });
+    return { port, baseUrl: `http://127.0.0.1:${port}`, deliveriesPath, ready };
+}
+/**
+ * Drain new captured sends from the in-sandbox NDJSON since `cursor` (a line count). Returns the fresh
+ * sends and the new cursor. Cheap `cat` over commands.run; NDJSON is small for a run.
+ */
+export async function drainCommsCatch(desktop, deployed, cursor = 0, requestTimeoutMs = 30_000) {
+    const result = await desktop.commands.run(`cat ${shq(deployed.deliveriesPath)} 2>/dev/null || true`, { requestTimeoutMs });
+    const stdout = result.stdout ?? "";
+    let lines = stdout.split("\n").filter((line) => line.trim().length > 0);
+    // If the file doesn't end in a newline, the last line may be a PARTIAL append (the host `cat` raced
+    // an in-sandbox append of a large body). Drop it and don't advance the cursor past it — it re-reads
+    // complete on the next poll, so a captured send is never lost to the race (the script only ever emits
+    // valid JSON, so an incomplete line is the only cause of a parse miss).
+    if (!stdout.endsWith("\n") && lines.length > 0)
+        lines = lines.slice(0, -1);
+    const sends = [];
+    for (const line of lines.slice(cursor)) {
+        try {
+            const parsed = JSON.parse(line);
+            if (typeof parsed.path === "string" && typeof parsed.body === "string") {
+                sends.push({ path: parsed.path, body: parsed.body, t: typeof parsed.t === "number" ? parsed.t : 0 });
+            }
+        }
+        catch {
+            // skip a malformed line
+        }
+    }
+    return { sends, cursor: lines.length };
+}
+/**
+ * Parse drained raw sends with the host profiles and route them into the CommsChannel (the host-side
+ * FauxInbox). Returns the number of inbox deliveries made. Same profiles as the host catch, so the
+ * in-sandbox and in-process routes normalize identically.
+ */
+export async function routeCapturedSends(sends, channel, profiles = DEFAULT_EMAIL_PROFILES) {
+    let delivered = 0;
+    for (const send of sends) {
+        let parsed;
+        try {
+            parsed = JSON.parse(send.body.length > 0 ? send.body : "{}");
+        }
+        catch {
+            continue;
+        }
+        const profile = profiles.find((candidate) => candidate.sendPaths.includes(send.path)) ?? profiles[0];
+        if (profile === undefined)
+            continue;
+        for (const normalized of profile.parse(send.path, parsed)) {
+            const messages = await channel.deliverRaw({
+                from: normalized.from,
+                to: normalized.to,
+                ...(normalized.subject === undefined ? {} : { subject: normalized.subject }),
+                body: normalized.body
+            });
+            delivered += messages.length;
+        }
+    }
+    return delivered;
+}
+//# sourceMappingURL=comms-sandbox-catch.js.map

package/dist/comms-sandbox-catch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms-sandbox-catch.js","sourceRoot":"","sources":["../src/comms-sandbox-catch.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,wGAAwG;AACxG,uGAAuG;AACvG,qGAAqG;AACrG,qGAAqG;AACrG,qGAAqG;AACrG,oGAAoG;AACpG,4FAA4F;AAG5F,OAAO,EAAE,sBAAsB,EAAyB,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mBAAmB,CAAC;AAG9E;;8EAE8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAC/C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,iDAAiD;AACjD,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,2CAA2C;IAC3C,sDAAsD;IACtD,sCAAsC;IACtC,+CAA+C;IAC/C,6EAA6E;IAC7E,oEAAoE;IACpE,8BAA8B;IAC9B,8BAA8B;IAC9B,gDAAgD;IAChD,qNAAqN;IACrN,uJAAuJ;IACvJ,oCAAoC;IACpC,6GAA6G;IAC7G,yBAAyB;IACzB,0DAA0D;IAC1D,sGAAsG;IACtG,sGAAsG;IACtG,8FAA8F;IAC9F,oJAAoJ;IACpJ,2GAA2G;IAC3G,OAAO;IACP,+EAA+E;IAC/E,+BAA+B;CAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AA0Bb;0GAC0G;AAC1G,KAAK,UAAU,YAAY,CACzB,OAA0B,EAC1B,IAAY,EACZ,OAAyE;IAEzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAC3C,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ;aAClC,GAAG,CAAC,yCAAyC,IAAI,6BAA6B,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;aAC/H,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA0B,EAC1B,UAAmC,EAAE;IAErC,kGAAkG;IAClG,sGAAsG;IACtG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,0BAA0B,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,iBAAiB,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC;IAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;IAC5D,MAAM,UAAU,GAAG,GAAG,GAAG,YAAY,CAAC;IACtC,MAAM,cAAc,GAAG,GAAG,GAAG,oBAAoB,CAAC;IAElD,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAC5D,MAAM,oBAAoB,CAAC,OAAO,EAAE;QAClC,IAAI;QACJ,OAAO,EAAE,QAAQ,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,EAAE;QACjE,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE;QAC9C,SAAS,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM;QAC3C,gBAAgB;QAChB,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;KAC1B,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA0B,EAC1B,QAAoD,EACpD,MAAM,GAAG,CAAC,EACV,gBAAgB,GAAG,MAAM;IAEzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,sBAAsB,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,oGAAoG;IACpG,oGAAoG;IACpG,sGAAsG;IACtG,wEAAwE;IACxE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAwB,EACxB,OAAqB,EACrB,WAA+B,sBAAsB;IAErD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrG,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACxC,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,GAAG,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;gBAC5E,IAAI,EAAE,UAAU,CAAC,IAAI;aACtB,CAAC,CAAC;YACH,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -21,6 +21,10 @@ export { FauxInbox, extractLinks, extractOtpCodes } from "./comms-faux-inbox.js"
 export type { FauxInboxOptions } from "./comms-faux-inbox.js";
 export { DEFAULT_EMAIL_PROFILES, genericEmailProfile, sendgridEmailProfile, startEmailCatchServer } from "./comms-email-catch.js";
 export type { EmailCatchOptions, EmailCatchServer, EmailSendProfile, NormalizedSend } from "./comms-email-catch.js";
+export { DEFAULT_SANDBOX_CATCH_PORT, SANDBOX_CATCH_SCRIPT, deployCommsCatch, drainCommsCatch, routeCapturedSends } from "./comms-sandbox-catch.js";
+export type { DeployCommsCatchOptions, DeployedCommsCatch, RawCapturedSend } from "./comms-sandbox-catch.js";
+export { COMMS_THREAD_SCHEMA, buildCommsThreadArtifact } from "./comms-evidence.js";
+export type { CommsThreadArtifact, CommsThreadEntry } from "./comms-evidence.js";
 export type { CommsAddress, CommsChannel, CommsChannelKind, CommsMessage, InboundRaw, OutboundMessage } from "./comms-types.js";
 export { DESKTOP_RATE, MODEL_RATES, PRICING_SCHEMA, estimateActorCost, estimateDesktopCost } from "./pricing.js";
 export type { ActorEstimatedCost, DesktopCostEstimate, DesktopRate, ModelRate } from "./pricing.js";

package/dist/index.js

@@ -13,6 +13,10 @@ export { adapterScoreFailureMessage, applyAdapterScoreFailureToReview, applyBrow
 // same CommsChannel port.
 export { FauxInbox, extractLinks, extractOtpCodes } from "./comms-faux-inbox.js";
 export { DEFAULT_EMAIL_PROFILES, genericEmailProfile, sendgridEmailProfile, startEmailCatchServer } from "./comms-email-catch.js";
+// In-sandbox deployment of the catch + the host-side delivery bridge (the config-block core: the
+// listener must live inside the subject sandbox, since 127.0.0.1 from the app is the sandbox loopback).
+export { DEFAULT_SANDBOX_CATCH_PORT, SANDBOX_CATCH_SCRIPT, deployCommsCatch, drainCommsCatch, routeCapturedSends } from "./comms-sandbox-catch.js";
+export { COMMS_THREAD_SCHEMA, buildCommsThreadArtifact } from "./comms-evidence.js";
 export { DESKTOP_RATE, MODEL_RATES, PRICING_SCHEMA, estimateActorCost, estimateDesktopCost } from "./pricing.js";
 export { normalizeCliArgv } from "./argv.js";
 export { CODEX_APP_SERVER_UI_SCHEMA, startCodexAppServerUi } from "./codex-app-server-ui.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAa7B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEjJ,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAY3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAOhC,6FAA6F;AAC7F,iGAAiG;AACjG,iGAAiG;AACjG,0BAA0B;AAC1B,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEjF,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAUlI,OAAO,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAOtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,cAAc,EACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,SAAS,EACT,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,wBAAwB,EACxB,QAAQ,EACR,6BAA6B,EAC7B,UAAU,EACV,SAAS,EACT,SAAS,EACV,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAsC/C,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACf,MAAM,oBAAoB,CAAC;AAa5B,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,6BAA6B,CAAC;AAWrC,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAOnC,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAe/B,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,yCAAyC,EACzC,kCAAkC,EAClC,kBAAkB,EAClB,gCAAgC,EAChC,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAQ1C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAErG,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,uBAAuB,EACvB,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,qCAAqC,EACrC,yCAAyC,EACzC,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,6BAA6B,EAC7B,iCAAiC,EACjC,8BAA8B,EAC9B,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,iBAAiB,CAAC;AAqBzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAU3E,OAAO,EACL,mBAAmB,EACnB,aAAa,EACd,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAa7B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEjJ,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAY3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAOhC,6FAA6F;AAC7F,iGAAiG;AACjG,iGAAiG;AACjG,0BAA0B;AAC1B,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEjF,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAElI,iGAAiG;AACjG,wGAAwG;AACxG,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnJ,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAUpF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAOtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,cAAc,EACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,SAAS,EACT,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,wBAAwB,EACxB,QAAQ,EACR,6BAA6B,EAC7B,UAAU,EACV,SAAS,EACT,SAAS,EACV,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAsC/C,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACf,MAAM,oBAAoB,CAAC;AAa5B,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,6BAA6B,CAAC;AAWrC,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAOnC,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAe/B,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,yCAAyC,EACzC,kCAAkC,EAClC,kBAAkB,EAClB,gCAAgC,EAChC,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAQ1C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAErG,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,uBAAuB,EACvB,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,qCAAqC,EACrC,yCAAyC,EACzC,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,6BAA6B,EAC7B,iCAAiC,EACjC,8BAA8B,EAC9B,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,iBAAiB,CAAC;AAqBzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAU3E,OAAO,EACL,mBAAmB,EACnB,aAAa,EACd,MAAM,cAAc,CAAC"}

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.21.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.22.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -16,7 +16,7 @@ Humanish should be the open-source CLI that lets a maintainer ask:
 The answer should be observable, verifiable, public-safe, and easy to turn into
 actionable feedback.
 
-## Current Program Truth (source `0.21.0`)
+## Current Program Truth (source `0.22.0`)
 
 The package source and repository implementation in this tree agree on these
 points:

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.21.0` (2026-08-04). The containment boundary introduced in
+Package/source version in this tree: `0.22.0` (2026-08-04). The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [