humanish 0.46.0 → 0.48.0

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.46.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.48.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.
@@ -724,7 +724,11 @@ Core-owned fields:
   budget AFTER productive activity — status `passed`, a NON-FAILURE completion,
   distinct from `timed_out`, which stays reserved for a zero-progress deadline
   hit and remains a failure)
-- `ids`, `counts`, `items[]`, optional `tokenUsage`, `capabilities`
+- `ids`, `counts`, `items[]`, optional `tokenUsage`, `capabilities`. Items may
+  carry `at` (ISO-8601 recording stamp from the loop's clock) and, on
+  click-like `ui_action` items, structured `coord` (`x`/`y`) — both additive
+  (#441): absent on older bundles and non-stamping producers, and absence means
+  "timing/position unrecorded", never zero
 - optional `affordanceUse` (`humanish.affordance-use.v1`): which KIND of route this
   actor took (see Affordance Use below)
 - optional `estimatedCost` (`humanish.actor-estimated-cost.v1`): a token-derived

package/docs/goals/current.md

@@ -29,7 +29,7 @@ study completed, reproduced, and produced a real accessibility finding via a
 keyboard-first participant
 ([docs/goals/email-gated-signup/receipts/](email-gated-signup/receipts/)).
 
-## Current Program Truth (source `0.46.0`)
+## Current Program Truth (source `0.48.0`)
 
 The package source and repository implementation in this tree agree on these
 points:
@@ -467,34 +467,38 @@ Observer hero from a commit-pinned public application (drawDB) shipped in
 `0.16.0`. That run treats the application as a study subject, not a Humanish
 adopter, and does not imply endorsement; it does not satisfy the depth gate.
 
-The operator-pinned train-of-thought capture (#427) landed its stage 1 in
-`0.46.0`: the computer-use path requests provider-sanctioned reasoning
-summaries every turn (with a session latch that degrades to the old wire
-shape if the account rejects them), the trace records them as ordered
-redacted `reasoning` items, and the player feed renders them as thought rows
-(`N actions · M thoughts`). Live-proven on a real run whose first recorded
-thought immediately exposed a persona defect (#452, fixed same release):
-both flagship personas had been opening every study prompt with a
-dogfood-era "evaluating Humanish" summary. Stage 2 — the card live ticker —
-rides the #441 incremental-flush work and stays with #427. The same run
-also surfaced #453: the credible-pass guard reads a post-success defect
-report as a self-reported blocker, an incentive inversion against the
-richest participant behavior.
-
-The standing queue behind it, in rough order:
-
-1. the #441 capture-side set: per-action timestamps, structured coordinates,
-   incremental item flush during live runs, a live-shaped golden, then deep
-   links (a declared parity regression from the renderer cutover);
-2. registry promotions: the wordmark (#431), the participant card, and the two
+The operator-pinned train-of-thought thread (#427, both stages) and the
+#441 queue head are done as of `0.47.0`, live-proven the same day they
+shipped: trace items carry recording stamps and structured click
+coordinates; the live path flushes `liveActor` partials mid-run so the
+attached Observer's timeline grows while a study runs; playback runs at
+the participant's recorded pace when stamps exist (and the transport says
+which clock it is on); the participant card's decide-line ticks the
+newest reported thought during a live lane; and a live-shaped golden cut
+from a kept receipt run pins the whole shape (`?fixture=live`). On the way
+the capture exposed and closed two evidence-quality defects: the persona
+identity leak (#452) and the credible-pass guard's incentive inversion
+against post-success defect reports (#453 — the verdict scan and the
+friction tally are now separate reads of the same narrative). Shared-world
+roll-up honesty (#364) closed via an external contribution that separates
+credibility, mission endpoint, and convergence into three explicit claims.
+
+Deep links landed in `0.48.0` (#464): every participant and frame is
+addressable (`#/lane/<id>/f/<n>`), Back/Forward restore the view, and a
+reload or shared link lands on the exact moment — #441 closed entirely.
+
+The standing queue, in rough order:
+
+1. registry promotions: the wordmark (#431), the participant card, and the two
    vendored Base UI wrappers (drawer, popover) once a second surface consumes
    them;
-3. the adoption cluster: vendor-native key resolution (#436) and the optional
+2. the adoption cluster: vendor-native key resolution (#436) and the optional
    desktop peer-dep gap (#346) — the two biggest remaining "npx works
    first-try" violations;
-4. shared-world honesty: per-action evidence (#365), roll-up truthfulness
-   (#364), exposure-flag coverage (#446), and the pre-barrier "stream ended"
-   mislabel found during the 2026-08-16 live games.
+3. shared-world honesty, remaining half: per-action evidence (#365) and
+   exposure-flag coverage (#446);
+4. the stakeholder TUI (#455): research + token-translated mocks on the
+   operator review surface, design sign-off gated before any code.
 
 The depth-axis deletion front (an adopter's bespoke terminal-product sim,
 comparator contract posted on the adopter's tracker) is paused awaiting the

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.46.0` (2026-08-17). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.48.0` (2026-08-17). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.46.0",
+  "version": "0.48.0",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [
@@ -58,7 +58,7 @@
     "release:check": "pnpm check && pnpm public-surface:scan && pnpm skill:check && npm pack --dry-run",
     "skill:check": "DISABLE_TELEMETRY=1 npx skills add . --list",
     "test": "vitest run",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck": "tsc -p tsconfig.json --noEmit && pnpm --filter humanish-observer typecheck",
     "humanish:doctor": "pnpm humanish -- doctor",
     "humanish:run": "pnpm humanish -- run --dry-run",
     "humanish:watch": "pnpm humanish -- watch",