humanish 0.22.0 → 0.24.0

package/dist/comms-email-catch.js

@@ -1,5 +1,5 @@
 // A VENDOR-NEUTRAL loopback catch server for email-send APIs (#297). An app hardwired to a hosted
-// email provider is redirected into the faux bus with ONE env var and no code change: point the app's
+// email provider is redirected into the fake bus with ONE env var and no code change: point the app's
 // API base URL at this server. The catch does not depend on, or name itself after, any one vendor —
 // it normalizes each provider's distinct wire shape (Resend's flat body, SendGrid's nested
 // personalizations, Postmark's TitleCase, a custom app's own JSON) to one shape via pluggable

package/dist/{comms-faux-inbox.d.ts → comms-fake-inbox.d.ts}

@@ -6,7 +6,7 @@ export declare function extractLinks(body: string): string[];
  *  "verification code 8A3F2K") are high-precision and preferred; if none are labeled, fall back to an
  *  isolated 4–8 digit run (a bare OTP). Pure; tokens are runtime-only literal-scrub targets. */
 export declare function extractOtpCodes(body: string): string[];
-export interface FauxInboxOptions {
+export interface FakeInboxOptions {
     /** "email" (default) or "sms" — the address shape + surface differ; machinery is identical. */
     channel?: CommsChannelKind;
     /** Email domain for minted addresses. Default example.test (an RFC 6761 reserved, unroutable test
@@ -15,17 +15,17 @@ export interface FauxInboxOptions {
     /** Injected clock (ms) for deterministic tests. Default Date.now. */
     now?: () => number;
 }
-/** The in-process faux adapter. Implements the same CommsChannel port a real provider adapter would. */
-export declare class FauxInbox implements CommsChannel {
+/** The in-process fake adapter. Implements the same CommsChannel port a real provider adapter would. */
+export declare class FakeInbox implements CommsChannel {
     readonly channel: CommsChannelKind;
-    readonly kind: "faux";
+    readonly kind: "fake";
     private readonly domain;
     private readonly clock;
     private readonly byActor;
     private readonly byValue;
     private readonly queues;
     private counter;
-    constructor(options?: FauxInboxOptions);
+    constructor(options?: FakeInboxOptions);
     provision(actorId: string): Promise<CommsAddress>;
     private route;
     send(message: OutboundMessage): Promise<CommsMessage>;

package/dist/{comms-faux-inbox.js → comms-fake-inbox.js}

@@ -1,4 +1,7 @@
-// The FAUX in-process email/SMS bus (#297 Stage 2). Deterministic, $0, offline, public-safe: a
+// The FAKE in-process email/SMS bus (#297 Stage 2). "Fake" in the precise test-double sense (Fowler):
+// a working, in-memory implementation of the CommsChannel port that takes a production shortcut — the
+// same slot as Kubernetes' `fake` clientset, distinct from a mock/stub. Deterministic, $0, offline,
+// public-safe: a
 // message an app-under-test "sends" (via an ingress like the vendor-neutral email catch) is routed to the
 // addressed actor inbox and read back through the same CommsChannel port a real provider adapter
 // would implement. Nothing leaves the process. See comms-types.ts for the port + public-safety notes.
@@ -73,10 +76,10 @@ function smsAddressFor(actorId) {
     const digits = digestText(actorId, 16).replace(/[a-f]/g, (c) => String(c.charCodeAt(0) % 10)).slice(0, 7);
     return `+1555${digits}`;
 }
-/** The in-process faux adapter. Implements the same CommsChannel port a real provider adapter would. */
-export class FauxInbox {
+/** The in-process fake adapter. Implements the same CommsChannel port a real provider adapter would. */
+export class FakeInbox {
     channel;
-    kind = "faux";
+    kind = "fake";
     domain;
     clock;
     byActor = new Map();
@@ -95,7 +98,7 @@ export class FauxInbox {
         const value = this.channel === "sms" ? smsAddressFor(actorId) : `${sanitizeLocalPart(actorId)}@${this.domain}`;
         // Address collision guard: two distinct actor ids can sanitize to the same local part. Reuse the
         // existing inbox rather than resetting its queue (which would drop already-delivered mail). Both
-        // actors then share it — a faux-world edge; declare distinct addresses to avoid it.
+        // actors then share it — a fake-world edge; declare distinct addresses to avoid it.
         const prior = this.byValue.get(value.toLowerCase());
         if (prior) {
             this.byActor.set(actorId, prior);
@@ -154,4 +157,4 @@ export class FauxInbox {
         return [...this.byActor.values()];
     }
 }
-//# sourceMappingURL=comms-faux-inbox.js.map
+//# sourceMappingURL=comms-fake-inbox.js.map

package/dist/comms-fake-inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms-fake-inbox.js","sourceRoot":"","sources":["../src/comms-fake-inbox.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,sGAAsG;AACtG,oGAAoG;AACpG,iBAAiB;AACjB,0GAA0G;AAC1G,iGAAiG;AACjG,sGAAsG;AAEtG,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAU5C;qFACqF;AACrF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAyB,CAAC;IAC9B,MAAM,IAAI,GAAG,+BAA+B,CAAC;IAC7C,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,4BAA4B,CAAC;IAC1C,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC;SACzC,OAAO,CAAC,6BAA6B,EAAE,GAAG,CAAC;SAC3C,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;gGAEgG;AAChG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,IAAY,EAAQ,EAAE;QAClD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,oGAAoG;IACpG,0FAA0F;IAC1F,MAAM,SAAS,GAAG,qNAAqN,CAAC;IACxO,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpD,+FAA+F;IAC/F,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,8CAA8C,CAAC;IAC9D,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;AACjG,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1G,OAAO,QAAQ,MAAM,EAAE,CAAC;AAC1B,CAAC;AAYD,wGAAwG;AACxG,MAAM,OAAO,SAAS;IACX,OAAO,CAAmB;IAC1B,IAAI,GAAG,MAAe,CAAC;IACf,MAAM,CAAS;IACf,KAAK,CAAe;IACpB,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC;IAEpB,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/G,iGAAiG;QACjG,iGAAiG;QACjG,oFAAoF;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,IAAY,EAAE,EAAkB,EAAE,OAA2B,EAAE,IAAY;QACvF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,OAAO,GAAiB;YAC5B,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAC9D,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI;YACJ,EAAE;YACF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,IAAI;YACJ,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC;YACzB,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;SAChB,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAwB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAmB;QAClC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;aAC1B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;aAChE,MAAM,CAAC,CAAC,OAAO,EAA2B,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,CAAC,uDAAuD;QACvF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAqB,EAAE,KAAK,GAAG,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,gFAAgF;IAChF,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/comms-sandbox-catch.d.ts

@@ -57,7 +57,7 @@ export declare function drainCommsCatch(desktop: E2BDesktopSandbox, deployed: Pi
 }>;
 /**
  * Parse drained raw sends with the host profiles and route them into the CommsChannel (the host-side
- * FauxInbox). Returns the number of inbox deliveries made. Same profiles as the host catch, so the
+ * FakeInbox). Returns the number of inbox deliveries made. Same profiles as the host catch, so the
  * in-sandbox and in-process routes normalize identically.
  */
 export declare function routeCapturedSends(sends: RawCapturedSend[], channel: CommsChannel, profiles?: EmailSendProfile[]): Promise<number>;

package/dist/comms-sandbox-catch.js

@@ -126,7 +126,7 @@ export async function drainCommsCatch(desktop, deployed, cursor = 0, requestTime
 }
 /**
  * Parse drained raw sends with the host profiles and route them into the CommsChannel (the host-side
- * FauxInbox). Returns the number of inbox deliveries made. Same profiles as the host catch, so the
+ * FakeInbox). Returns the number of inbox deliveries made. Same profiles as the host catch, so the
  * in-sandbox and in-process routes normalize identically.
  */
 export async function routeCapturedSends(sends, channel, profiles = DEFAULT_EMAIL_PROFILES) {

package/dist/comms-types.d.ts

@@ -18,7 +18,7 @@ export interface CommsMessage {
     /** Resolved recipient inboxes this message was delivered to. */
     to: CommsAddress[];
     subject?: string;
-    /** Runtime-only for real; local-only for faux (never a share path without redaction — #108). */
+    /** Runtime-only for real; local-only for fake (never a share path without redaction — #108). */
     body: string;
     /** Actionable links extracted from the body (magic-link / invite / reset). Runtime-only. */
     links: string[];
@@ -43,12 +43,12 @@ export interface InboundRaw {
     body: string;
 }
 /**
- * The port. Faux (in-process) + real-email + real-sms adapters implement it identically. Async so a
- * real (network) adapter fits without changing callers; the faux adapter just resolves immediately.
+ * The port. Fake (in-process) + real-email + real-sms adapters implement it identically. Async so a
+ * real (network) adapter fits without changing callers; the fake adapter just resolves immediately.
  */
 export interface CommsChannel {
     readonly channel: CommsChannelKind;
-    readonly kind: "faux" | "real";
+    readonly kind: "fake" | "real";
     /** Mint/allocate an inbox for an actor (address auto-generated). Idempotent per actor. */
     provision(actorId: string): Promise<CommsAddress>;
     /** Route a composed message from one actor to addressed inboxes. Returns the delivered record. */

package/dist/comms-types.js

@@ -1,6 +1,6 @@
 // The addressed message bus (#297) — the seam that makes "off-app" comms (email/SMS the persona
 // actually lives in) a first-class, persona-driven testable surface. A single port, addressed by
-// actor; faux (in-process) and real (provider-backed) adapters implement it identically, so the
+// actor; fake (in-process) and real (provider-backed) adapters implement it identically, so the
 // persona surface + evidence writer consume it without knowing which is behind it.
 //
 // PUBLIC-SAFETY: raw address values, message bodies, links, and codes are RUNTIME-ONLY. Only the

package/dist/concurrent-shared-world-lab.js

@@ -919,7 +919,7 @@ export async function runConcurrentSharedWorld(options) {
         //
         // TEMPORARY SHIM (tracked by #296): this CDP URL-relay handoff — reading the host's /lobby/CODE off
         // its own browser and threading it into the follower missions — is a temporary coordination shim.
-        // It is to be augmented/replaced by the actor message bus (faux SMS/email invite) in #297: the
+        // It is to be augmented/replaced by the actor message bus (fake SMS/email invite) in #297: the
         // human-realistic version is the HOST SENDING the invite link and followers RECEIVING and tapping
         // it, rather than the orchestrator relaying the code out-of-band.
         const lobbyCodeLatch = deferred();

package/dist/cua-actor-lab.js

@@ -31,6 +31,7 @@ import { CHROMIUM_EVIDENCE_HYGIENE_FLAGS, chromiumEvidenceProfilePreferencesJson
 import { DEFAULT_OPENAI_CU_MODEL } from "./openai-responses-cu.js";
 import { createDesktopSandbox, loadE2BDesktopModule } from "./e2b-desktop-launch.js";
 import { probeUrl, readDetachedLog, runDetachedStep, startDetachedProcess } from "./e2b-detached.js";
+import { DEFAULT_SANDBOX_CATCH_PORT, deployCommsCatch } from "./comms-sandbox-catch.js";
 import { DEFAULT_DEVICE_PRESET, isDevicePresetName, resolveDevicePreset } from "./device-presets.js";
 import { cuaLaneValidationReason, isHttpUrl, isLoopbackUrl, MAX_CUA_LANES, subjectStateInvalidReason } from "./lab-config.js";
 import { mapWithConcurrency } from "./concurrency.js";
@@ -987,6 +988,15 @@ export async function runCuaLane(spec, deps) {
     const { config, appUrl, cloneRoute, localTreeRoute, serve, subjectRepo, subjectEnvNames } = deps;
     const targetUrl = spec.targetUrl ?? appUrl;
     const env = deps.env;
+    // Off-app comms (#297): on an in-sandbox subject route, redirect the app's email-API sends into an
+    // in-sandbox catch (loopback) so its verification mail is CAPTURED, not sent to the internet. Gated
+    // ENTIRELY on config.comms — no comms declared → zero change. The base-URL env is injected at
+    // sandbox-create (below, so the app reads it at boot); the catch is started right after create.
+    const commsEmail = (cloneRoute || localTreeRoute) ? config.comms?.email : undefined;
+    const commsPort = commsEmail ? (commsEmail.port ?? DEFAULT_SANDBOX_CATCH_PORT) : undefined;
+    const commsEnv = commsEmail && commsPort !== undefined
+        ? { [commsEmail.injectEnv]: `http://127.0.0.1:${commsPort}` }
+        : {};
     const warnings = [];
     const screenshots = [];
     const writeScreenshot = makeLaneWriteScreenshot(deps.artifactRoot, spec, screenshots);
@@ -1055,8 +1065,8 @@ export async function runCuaLane(spec, deps) {
             },
             // Env placement per the doctrine: the ACTOR's key never enters the sandbox (the model drives
             // from outside). The SUBJECT's declared env NAMES are provisioned here on the clone route.
-            ...(subjectEnvNames.length > 0
-                ? { envs: Object.fromEntries(subjectEnvNames.map((name) => [name, env[name]])) }
+            ...(subjectEnvNames.length > 0 || Object.keys(commsEnv).length > 0
+                ? { envs: { ...Object.fromEntries(subjectEnvNames.map((name) => [name, env[name]])), ...commsEnv } }
                 : {}),
             resolution: spec.resolution,
             dpi: 96,
@@ -1068,6 +1078,15 @@ export async function runCuaLane(spec, deps) {
         if (deps.hooks.prepareDesktop) {
             await deps.hooks.prepareDesktop(desktop, { laneId: spec.laneId, laneIndex: spec.laneIndex, laneCount: deps.laneCount });
         }
+        // Start the in-sandbox email catch BEFORE the subject serve, so the app's send-API base URL (injected
+        // into its env at create) resolves the moment it boots. A comms-declared lab that can't stand the
+        // catch up is a setup failure (fail closed) rather than silently sending real mail.
+        if (commsEmail && commsPort !== undefined) {
+            const deployedComms = await deployCommsCatch(desktop, { port: commsPort, requestTimeoutMs: deps.requestTimeoutMs });
+            if (!deployedComms.ready) {
+                throw new Error(`comms email catch did not become ready on 127.0.0.1:${commsPort} in the subject sandbox`);
+            }
+        }
         // Per-lane geometry assertion (fail-closed) — the device claim is verified in-sandbox.
         const screenGeometry = await inspectDesktopScreenGeometry({
             desktop,