humanish 0.80.0 → 0.81.0

package/dist/run.d.ts

@@ -831,7 +831,7 @@ export interface RunCostLine {
     modelId?: string;
     /** null = NOT MEASURED / no rate; never coerced to 0. */
     estimatedCostUsd: number | null;
-    reason?: "no_rate_for_model" | "no_rate_for_desktop" | "no_token_usage" | "no_duration";
+    reason?: "no_rate_for_model" | "no_rate_for_desktop" | "no_token_usage" | "no_duration" | "closing_usage_unreported";
     /** Pricing provenance date; non-null iff estimatedCostUsd is non-null. */
     ratesAsOf: string | null;
     source?: string;

package/dist/terminal-node-bootstrap.d.ts

@@ -0,0 +1,4 @@
+export declare const TERMINAL_NODE_VERSION = "22.23.2";
+export declare const TERMINAL_NODE_NPM_PREFIX_SCRIPT: string;
+/** Unkeyed runtime prerequisite for stock Linux desktops. No apt repository refresh (#674). */
+export declare const TERMINAL_NODE_BOOTSTRAP_COMMAND: string;

package/dist/terminal-node-bootstrap.js

@@ -0,0 +1,58 @@
+// Node 22 remains a supported LTS line. Pin the official release and trusted archive hashes:
+// https://nodejs.org/en/about/previous-releases
+// https://nodejs.org/dist/v22.23.2/SHASUMS256.txt (checked 2026-09-05)
+// A checksum fetched alongside the archive at runtime would not pin what we trust.
+export const TERMINAL_NODE_VERSION = "22.23.2";
+// npm normally derives its global prefix from the real Node executable. This distribution
+// lives under /opt, while its public executables use /usr/local/bin. Set only a missing
+// built-in default; npm's environment, CLI, user and global config still take precedence.
+export const TERMINAL_NODE_NPM_PREFIX_SCRIPT = [
+    'const fs = require("node:fs");',
+    'const file = process.argv[1];',
+    'let existing = "";',
+    'try { existing = fs.readFileSync(file, "utf8"); } catch (error) { if (error.code !== "ENOENT") throw error; }',
+    'if (!/^[\\t ]*prefix[\\t ]*=/m.test(existing)) fs.appendFileSync(file, "\\nprefix=/usr/local\\n");'
+].join(" ");
+/** Unkeyed runtime prerequisite for stock Linux desktops. No apt repository refresh (#674). */
+export const TERMINAL_NODE_BOOTSTRAP_COMMAND = [
+    "set -eu",
+    "# humanish terminal-node-bootstrap",
+    "node_major=0",
+    `if command -v node >/dev/null 2>&1; then node_major=$(node -e 'console.log(Number(process.versions.node.split(".")[0]))' 2>/dev/null || echo 0); fi`,
+    `if command -v node >/dev/null 2>&1 && command -v npm >/dev/null 2>&1 && [ "$node_major" -ge 20 ] && npm --version >/dev/null 2>&1; then`,
+    // An explicit exit under set -e runs the stock login shell's failing clear_console logout hook
+    // and turns this successful fast path into exit 1. Finish the compound command naturally.
+    "  :",
+    "else",
+    `case "$(uname -s):$(uname -m)" in`,
+    `  Linux:x86_64) node_arch=x64; node_sha=b294a556e639d64338823920e5866c21c02741742d2e1529ee1a225c1ec9252a ;;`,
+    `  Linux:aarch64|Linux:arm64) node_arch=arm64; node_sha=013b59cfd2819703a6f4a14ab891fc46fc2a4e3f5bcd92de3fb4929b43e35b30 ;;`,
+    `  *) echo 'humanish: terminal runtime requires a supported Linux x64/arm64 desktop or working Node >=20 and npm' >&2; exit 1 ;;`,
+    "esac",
+    "for prerequisite in curl sha256sum tar gzip mktemp sudo; do",
+    `  command -v "$prerequisite" >/dev/null 2>&1 || { echo "humanish: terminal runtime bootstrap requires $prerequisite" >&2; exit 1; }`,
+    "done",
+    `node_archive="node-v${TERMINAL_NODE_VERSION}-linux-$node_arch.tar.gz"`,
+    `node_target="/opt/humanish/node-v${TERMINAL_NODE_VERSION}-linux-$node_arch"`,
+    `node_temp=$(mktemp -d /tmp/humanish-node.XXXXXX)`,
+    `trap 'rm -rf "$node_temp"' EXIT`,
+    `curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --connect-timeout 10 --max-time 90 --retry 1 --retry-max-time 120 --output "$node_temp/$node_archive" "https://nodejs.org/dist/v${TERMINAL_NODE_VERSION}/$node_archive"`,
+    `(cd "$node_temp" && printf '%s  %s\\n' "$node_sha" "$node_archive" | sha256sum --check --status) || { echo 'humanish: terminal Node archive checksum did not match the trusted release' >&2; exit 1; }`,
+    // Only a verified official archive reaches privileged extraction. The versioned install is
+    // root-owned; subsequent ordinary and sudo shells find it through standard /usr/local/bin.
+    "sudo -n mkdir -p /opt/humanish /usr/local/bin",
+    `sudo -n tar --extract --gzip --file "$node_temp/$node_archive" --directory /opt/humanish --no-same-owner`,
+    "for executable in node npm npx; do",
+    `  sudo -n ln -sfn "$node_target/bin/$executable" "/usr/local/bin/$executable"`,
+    "done",
+    // Keep global product executables on the existing ordinary/sudo PATH (#679). The new
+    // versioned distribution is the only config we modify; no user/global npmrc or profile.
+    `sudo -n "$node_target/bin/node" -e '${TERMINAL_NODE_NPM_PREFIX_SCRIPT}' "$node_target/lib/node_modules/npm/npmrc"`,
+    "hash -r",
+    `node -e 'process.exit(Number(process.versions.node.split(".")[0]) >= 20 ? 0 : 1)' && npm --version >/dev/null`,
+    // Product installation already uses sudo; detect a template whose sudo PATH cannot see Node
+    // rather than changing global PATH or permissions to make it look supported.
+    `sudo -n node -e 'process.exit(Number(process.versions.node.split(".")[0]) >= 20 ? 0 : 1)' && sudo -n npm --version >/dev/null`,
+    "fi"
+].join("\n");
+//# sourceMappingURL=terminal-node-bootstrap.js.map

package/dist/terminal-node-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-node-bootstrap.js","sourceRoot":"","sources":["../src/terminal-node-bootstrap.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gDAAgD;AAChD,uEAAuE;AACvE,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAE/C,0FAA0F;AAC1F,wFAAwF;AACxF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gCAAgC;IAChC,+BAA+B;IAC/B,oBAAoB;IACpB,+GAA+G;IAC/G,oGAAoG;CACrG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,+FAA+F;AAC/F,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,SAAS;IACT,oCAAoC;IACpC,cAAc;IACd,qJAAqJ;IACrJ,yIAAyI;IACzI,+FAA+F;IAC/F,0FAA0F;IAC1F,KAAK;IACL,MAAM;IACN,mCAAmC;IACnC,6GAA6G;IAC7G,4HAA4H;IAC5H,iIAAiI;IACjI,MAAM;IACN,6DAA6D;IAC7D,qIAAqI;IACrI,MAAM;IACN,uBAAuB,qBAAqB,2BAA2B;IACvE,oCAAoC,qBAAqB,oBAAoB;IAC7E,kDAAkD;IAClD,iCAAiC;IACjC,wNAAwN,qBAAqB,iBAAiB;IAC9P,wMAAwM;IACxM,2FAA2F;IAC3F,2FAA2F;IAC3F,+CAA+C;IAC/C,0GAA0G;IAC1G,oCAAoC;IACpC,+EAA+E;IAC/E,MAAM;IACN,qFAAqF;IACrF,wFAAwF;IACxF,uCAAuC,+BAA+B,6CAA6C;IACnH,SAAS;IACT,+GAA+G;IAC/G,4FAA4F;IAC5F,6EAA6E;IAC7E,+HAA+H;IAC/H,IAAI;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/dist/terminal-runtime-auth.d.ts

@@ -0,0 +1,13 @@
+import type { E2BNetworkOptions } from "./e2b-desktop-launch.js";
+export declare const OPENAI_EGRESS_HOST = "api.openai.com";
+/** E2B envd installs the sandbox-specific proxy CA into this system bundle before routing. */
+export declare const E2B_SYSTEM_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+/** An inert nonsecret value satisfies Codex exec's auth prerequisite. E2B replaces the header. */
+export declare const OPENAI_EGRESS_PLACEHOLDER = "humanish-egress-auth-placeholder";
+/**
+ * Keep the runtime key in the host-side E2B request, outside sandbox env/files. The installed
+ * E2B SDK declares that transform headers override existing request headers. This adds no routing
+ * restrictions: every sandbox process can still spend via the provider proxy. Never log the
+ * returned options. An adopter's existing exact-host rule must not be silently overwritten.
+ */
+export declare function buildOpenAiEgressNetwork(keyValue: string, existing?: E2BNetworkOptions): E2BNetworkOptions;

package/dist/terminal-runtime-auth.js

@@ -0,0 +1,24 @@
+export const OPENAI_EGRESS_HOST = "api.openai.com";
+/** E2B envd installs the sandbox-specific proxy CA into this system bundle before routing. */
+export const E2B_SYSTEM_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+/** An inert nonsecret value satisfies Codex exec's auth prerequisite. E2B replaces the header. */
+export const OPENAI_EGRESS_PLACEHOLDER = "humanish-egress-auth-placeholder";
+/**
+ * Keep the runtime key in the host-side E2B request, outside sandbox env/files. The installed
+ * E2B SDK declares that transform headers override existing request headers. This adds no routing
+ * restrictions: every sandbox process can still spend via the provider proxy. Never log the
+ * returned options. An adopter's existing exact-host rule must not be silently overwritten.
+ */
+export function buildOpenAiEgressNetwork(keyValue, existing) {
+    if (Object.keys(existing?.rules ?? {}).some((host) => host.toLowerCase().replace(/\.$/, "") === OPENAI_EGRESS_HOST)) {
+        throw new Error("openai-egress conflicts with an existing api.openai.com network rule; refusing to overwrite it.");
+    }
+    return {
+        ...existing,
+        rules: {
+            ...existing?.rules,
+            [OPENAI_EGRESS_HOST]: [{ transform: { headers: { Authorization: `Bearer ${keyValue}` } } }]
+        }
+    };
+}
+//# sourceMappingURL=terminal-runtime-auth.js.map

package/dist/terminal-runtime-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-runtime-auth.js","sourceRoot":"","sources":["../src/terminal-runtime-auth.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AACzE,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,kCAAkC,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,QAA4B;IAE5B,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,kBAAkB,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACrH,CAAC;IACD,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE;YACL,GAAG,QAAQ,EAAE,KAAK;YAClB,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;SAC5F;KACF,CAAC;AACJ,CAAC"}

package/docs/architecture/actor-contract.md

@@ -293,6 +293,28 @@ not cost — a live scripted run drives a real browser against a real running ap
 declaration as spend. "Live" on this route must never silently come to mean "costs money";
 this paragraph is the record of that decision.
 
+## Optional closing report
+
+`CuaProvider.debrief` is an optional read-only request after a structured
+`stopWhen` or dwell stop. It returns a `CuaTurn` with `closingReport` containing
+`summary` and `frictionReports`; an empty friction list is valid. The loop rejects
+actions, pending safety checks, and invalid report shapes. It redacts accepted
+reports, records them in `ActorTrace.debrief`, and projects one readable message
+without invoking action or communication callbacks.
+
+This request uses the final observation and retained provider history. It does
+not expose the hidden stop criterion or change the original task outcome. It is
+skipped before any participant turn, after natural completion, without provider
+support, or without remaining time and known budget. An attempted request's
+unreported usage remains an unknown cost line. `counts.debriefCalls` is separate
+from interaction turns, and reported usage contributes to aggregate cost.
+
+The OpenAI implementation makes one request with tools disabled and structured
+output; no HTTP or policy retries. Stateless/ZDR mode does not offer retrospective
+reporting because it does not retain the required session history. The
+[paired live receipt](../goals/computer-use-actor/receipts/structured-closing-report-2026-09-05.md)
+records both report recovery and control failures in the separate legacy parser.
+
 ## The state-driven executor seam (shipped — the transport-agnostic intent, made real)
 
 The `CuaExecutor` / `CuaProvider` ports are the concrete realization of the "plural harnesses /

package/docs/architecture/terminal-product-lane.md

@@ -1,6 +1,6 @@
 # Terminal-product real-agent lane (issue #154)
 
-Date: 2026-06-16 (current-state note updated 2026-07-14)
+Date: 2026-06-16 (runtime-auth contract updated 2026-09-05)
 
 Status: live terminal-product route shipped in `0.8.0`. The in-sandbox backend,
 command-scoped credential placement, exact-id cleanup proof, an interventions ledger,
@@ -16,8 +16,8 @@ for the full slice plan and the safety contract.
 
 A lab lane for **terminal-product real-agent studies**: a real autonomous coding
 agent (Codex) discovering and using a CLI/product from its **public surfaces
-only**, running **inside an E2B shell** with command-scoped runtime auth, capped
-at no-spend, emitting durable terminal/substrate/cost/no-spend/cleanup/
+only**, running **inside an E2B shell** with declared runtime-auth placement and
+spend/time caps, emitting durable terminal/substrate/cost/no-spend/cleanup/
 intervention proof that verifies fail-closed. This is distinct from the browser
 lanes: it is not testing whether a browser can click a local web app — it tests
 whether an autonomous agent can discover and use a CLI/product surface from
@@ -36,7 +36,7 @@ fail-closed cross-validation, and forward-declared warnings.
 | `subject.product` | `{ name, publicSurfaces[] }` — the only world the agent sees |
 | `execution.target` | `e2b-terminal` (or absent → implied) |
 | `execution.terminal` | `{ transport: exec-stream, stdin: disabled }` |
-| `execution.runtimeAuth` | `openai-env` (names-only durable evidence) |
+| `execution.runtimeAuth` | `openai-env` (default) or opt-in `openai-egress`; names-only durable evidence |
 | `scenario.caps` | `{ maxUsd, maxJobs, maxMinutes }` — the blast-radius budget |
 | `policies` | `allowPrivateRepoAccess` / `allowProviderCredentials` / `allowPaymentCredentials` / `allowGitHubMutation`, all DEFAULT FALSE |
 | `actors[0].type` | `codex-exec` — a registered terminal actor (`keyPlacement: in-sandbox-command-scoped`) |
@@ -46,9 +46,110 @@ Routing is `routesToTerminalProduct(config)` — the single source of truth that
 both `selectLabBackend` and the forward-declared-warning logic consume, mirroring
 `routesToComputerUse` / `routesToScriptedBrowser`.
 
-## The safety contract (the lane's reason to exist)
-
-This lane **inverts** the credential-placement default of every other E2B route.
+## Runtime auth: raw-key placement and remaining provider access
+
+`execution.runtimeAuth: openai-env` remains the compatible default. It supplies
+`CODEX_API_KEY` command-scoped to Codex, with `OPENAI_API_KEY` also supplied when
+that was the host source. Child processes can read and use the raw key.
+
+Opt in to keeping the raw key outside the sandbox:
+
+```yaml
+execution:
+  target: e2b-terminal
+  runtimeAuth: openai-egress
+  terminal:
+    transport: exec-stream
+    stdin: disabled
+```
+
+`openai-egress` resolves the same host key (`CODEX_API_KEY` first, otherwise
+`OPENAI_API_KEY`) and supplies it only to E2B's host-side network rule for
+`api.openai.com`. The rule sets the HTTPS `Authorization` header. The sandbox's
+Codex command receives the nonsecret value `humanish-egress-auth-placeholder`
+under `CODEX_API_KEY`, plus `CODEX_CA_CERTIFICATE` pointing at E2B's existing
+system CA bundle (`/etc/ssl/certs/ca-certificates.crt`) so TLS verification trusts
+the platform's proxy CA. Humanish does not disable TLS verification or download
+an unauthenticated CA. The sandbox receives no raw runtime key in command env, sandbox env,
+files, metadata, or captured evidence. The host still scrubs the actual key from
+output and errors, including errors during sandbox creation.
+
+This mode supports the default OpenAI endpoint only. Humanish explicitly sets
+Codex's built-in `openai` provider and `openai_base_url` to
+`https://api.openai.com/v1` for that invocation. It does not support a custom
+provider, proxy base URL, or regional endpoint under this mode. `openai-env`
+retains its existing command behavior. E2B header rules are a public-beta
+capability; the local contract is checked against the installed Desktop SDK
+(`@e2b/desktop` 2.3.3, resolving `e2b` 2.46.1).
+
+**The sandbox still has a spendable OpenAI proxy capability.** Every process can
+make authenticated requests to that host from sandbox creation until teardown,
+including bootstrap/setup commands and commands launched outside Codex. Calls
+made outside Codex may be absent from its usage ledger. This mode does not impose
+a provider-side spending limit, restrict models/API paths, or make
+`scenario.caps.maxUsd` a preventive provider budget. A hard provider budget needs
+a separately enforced control; do not infer zero spend from an unmeasured ledger
+line.
+
+Public internet discovery stays unrestricted unless the lab already declares
+`execution.egressAllow`. The mode preserves that allowlist and its deny-all
+fallback without adding hosts. If an allowlist omits `api.openai.com`, provider
+requests can fail. E2B domain allowlists are routing controls rather than strict
+destination isolation on shared infrastructure. An existing exact OpenAI host
+rule is rejected instead of silently overwritten.
+
+Evidence records the selected auth mode and the residual proxy capability.
+Resolved live actor traces use `keyPlacement: external` in `openai-egress`; the
+actor registry continues to describe the default `in-sandbox-command-scoped`
+placement. Dry runs record declarations and prove no live proxy behavior.
+
+The upstream contracts are documented in [E2B internet access and network
+rules](https://docs.e2b.dev/network/internet-access) and [Codex advanced
+configuration](https://developers.openai.com/codex/config-advanced),
+[Codex custom CA bundles](https://developers.openai.com/codex/auth#custom-ca-bundles),
+and [E2B's CA installer](https://github.com/e2b-dev/infra/blob/main/packages/envd/internal/host/cacerts.go).
+E2B's installed
+SDK documents that transformed headers override request headers. Deterministic
+request/redaction tests do not establish live wire behavior. The [2026-09-05
+transport receipt](../goals/terminal-product-lane/receipts/2026-09-05-runtime-egress-auth.md)
+records the controlled live header/auth checks and their scope.
+
+## Runtime prerequisite
+
+The terminal route reuses a working Node >=20 and npm from the calling shell.
+Otherwise it installs the pinned official Node 22.23.2 Linux x64 or arm64 archive,
+downloaded over verified HTTPS and checked against an architecture-specific
+SHA256 committed in the bootstrap. It does not refresh apt repositories or fetch
+an unpinned checksum beside the archive. Node 22 is a supported LTS line on the
+[official release schedule](https://nodejs.org/en/about/previous-releases); the
+trusted hashes come from its [release manifest](https://nodejs.org/dist/v22.23.2/SHASUMS256.txt).
+
+Installation requires `curl`, `sha256sum`, `tar`, `gzip`, `mktemp`, and passwordless
+`sudo`. Only a verified archive is extracted into a root-owned versioned directory
+under `/opt/humanish`; `/usr/local/bin` links make Node/npm/npx available to later
+shells. In that new distribution only, a missing built-in npm `prefix` defaults
+to `/usr/local`, so global product executables use the existing PATH. Existing
+distribution settings and higher-priority npm overrides are preserved; an adopter
+override can still choose a bin directory outside PATH. The installer changes no
+user/global npm configuration, global permissions, or shell startup files. It
+checks Node/npm in both ordinary and sudo shells after installation. The existing
+runtime fast path preserves user-specific installations; a later sudo product
+install can still fail if that installation is absent from sudo's PATH.
+
+The [global executable receipt](../goals/terminal-product-lane/receipts/2026-09-05-global-npm-prefix.md)
+records the regression found after the initial runtime-only proof and its stock
+desktop checks. npm documents [global executable locations](https://docs.npmjs.com/cli/v10/configuring-npm/folders#executables)
+and the [distribution built-in configuration](https://docs.npmjs.com/cli/v10/configuring-npm/npmrc#built-in-config-file).
+
+An egress allowlist must permit `nodejs.org` if the runtime needs installation,
+as well as the registries and product surfaces the study uses. Missing tools,
+unsupported architectures, a failed download or checksum, and a failed runtime
+check stop the lane before Codex. Downloads have finite connection, transfer, and
+retry bounds within the existing five-minute bootstrap deadline.
+
+## The original command-scoped safety contract
+
+The default mode **inverts** the credential-placement default of every other E2B route.
 On the computer-use route the model's key stays *outside* the sandbox; here the
 agent-under-test runs *inside* with a real `OPENAI_API_KEY`/`CODEX_API_KEY` and
 is **presumed exfiltratable**. The doctrine (invariants-and-defaults.md, the

package/docs/contracts/feedback.md

@@ -52,6 +52,20 @@ setup-quality gap, ceremonial/absent study quality, target-app blocker, or
 Humanish CLI blocker. The OSS
 meta-lab is one maintainer dogfood example, not the only candidate source.
 
+For completed computer-use sessions, participant-reported friction comes from
+the redacted closing report and observed-report clauses in earlier messages.
+Matching `stopWhen` or ending a dwell window does not discard an earlier
+report or change the successful completion verdict. Exact repeated reports
+appear once in the lane's candidate. Harness notices, reasoning, and observed
+page content do not become participant findings; quoted app copy and negated
+reports retain the existing exclusions. Code excerpts are treated as quoted
+material. Interim matching requires an observation-shaped clause and filters
+common plans, questions, and hypotheticals; a report followed by a retry plan
+can still qualify. This text
+heuristic does not establish that a reported defect is real or independently
+confirmed. A custom session's closing `reason` remains eligible even when it
+was not repeated in the message trace.
+
 ### `draft`
 
 Builds structured feedback from the strongest run candidate first. If no

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.80.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.81.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -29,11 +29,19 @@ study completed, reproduced, and produced a real accessibility finding via a
 keyboard-first participant
 ([docs/goals/email-gated-signup/receipts/](email-gated-signup/receipts/)).
 
-## Current Program Truth (source `0.80.0`)
+## Current Program Truth (source `0.81.0`)
 
 The package source and repository implementation in this tree agree on these
 points:
 
+**Mobile input correction, 2026-09-05 (#676).** The historical 4/4 TodoMVC phone-lane rename
+failures describe the shipped desktop pointer-to-touch conversion path. In two new hosted
+conformance probes, SDK double click emitted two single clicks; direct touch opened the same
+original editor in both. A separate local native-X control reproduced the difference by toggling
+conversion. Mobile viewport and touch flags do not certify gesture equivalence or establish a
+physical-device app defect. Mobile lanes using touch conversion now carry that advisory in run
+warnings. [Method, traces summary and limits](computer-use-actor/receipts/mobile-input-conformance-2026-09-05.md).
+
 The immutable 2026-06-10 proof-roadmap packet is paired with a
 [current implementation checkpoint](https://github.com/danielgwilson/humanish/blob/main/docs/goals/proof-roadmap/README.md).
 
@@ -463,6 +471,23 @@ Stop and correct course if:
 
 ## Best Next Work
 
+**2026-09-05 (0.81.0).** First use now distinguishes the free evidence preview
+from a live participant study, with concise successful setup output and complete JSON details
+(#660). The website has runnable docs and a generated CLI reference (#661, #668). Retained participant
+reports survive automatic stops. Supported providers with retained history can add one closing
+report when time and known budget remain; clean reports such as “no confusion or hesitation”
+stay clean (#658, #670, #671). Desktop startup cleanup retains acquired handles and records
+confirmed or unknown reclamation. The SDK's detached screenshot-file cleanup rejection is
+handled (#665, #666).
+Terminal output reconciles SDK callbacks with returned aggregates, preserving legitimate
+repeated lines and usage turns while avoiding doubled capture (#672). Opt-in `openai-egress`
+auth keeps the raw OpenAI runtime key outside the sandbox; every sandbox process can still
+spend through the proxy, so this is not a provider spending limit (#663). Stock terminal
+startup installs a checksum-verified Node archive without refreshing unrelated package mirrors
+and gives newly installed npm a default global prefix on the standard PATH (#677, #680). Mobile studies warn that desktop pointer-to-touch conversion can change repeated-tap
+behavior; gesture failures require direct or native touch confirmation before app attribution
+(#678).
+
 **2026-09-04, night (0.80.0).** The observation window reaches every desktop route: the
 sequential and concurrent shared-world seats forward `dwell` the way they forward `stopWhen`
 (#645), with a plumbing test per route and two live receipts, three participants holding together
@@ -490,8 +515,9 @@ gives a hosted Chrome lane a capture device (ffmpeg's test pattern generated in
 `desktopBrowser.media`; a microphone is refused without an image that has an audio stack, before
 any spend. Live, Chrome raised its real dialog with a preview of the feed, the participant chose
 "Allow this time" and read back 640x480 (`receipts/participant-camera-2026-09-04.md`). Under
-mobile emulation the TodoMVC rename now blocks 3 of 3 phone participants; Excalidraw stays clean
-at 12 of 12.
+the then-shipped mobile-emulation input path, TodoMVC rename had stopped 3 of 3 phone
+participants at this checkpoint; Excalidraw read 12 of 12. The 2026-09-05 input-conformance
+correction above qualifies attribution of those mobile failures.
 
 **2026-09-04, later (0.78.0).** `@e2b/desktop` moved from 2.2.3 to 2.3.3 (#638): its 2.3.1
 changelog names the socket #581 found today, a background command's event stream the SDK kept
@@ -526,10 +552,10 @@ mobile-emulated browser: `execution.desktop.fidelity.mobileEmulation: true` appl
 CSS viewport, the preset's device pixel ratio, touch events and a mobile user agent before the
 participant's first observation, and the bundle records what the page then reported about itself
 under `desktopGeometry.fidelity` (#221, `docs/goals/computer-use-actor/receipts/mobile-emulation-2026-09-03.md`).
-On the published 0.76.0, with touch emulated, neither phone participant on TodoMVC could rename at
-all (a double-tap selects text; the double-click editor never opens), where the 500 px runs without
-touch had finished and only called the rename touch-hostile: the responsive-viewport study reported
-an opinion, the mobile-emulated study reported a blocker.
+On the published 0.76.0, neither phone participant could rename through the emulated input path,
+where the 500 px runs without touch had finished. Those are historical instrument observations:
+the 2026-09-05 conformance check found SDK double click and direct touch differ on the original
+editor, so the earlier outcome does not establish a touch-device app defect.
 The persona axis was replicated the same evening on drawDB and TodoMVC and given a third app,
 Excalidraw, as the clean control (`persona-axis-phone-2026-09-03.md`); a multi-lane study's
 second and third findings reach `feedback draft` through `--candidate` (#609); a negated report
@@ -566,16 +592,22 @@ and a Claude participant with no memory across turns (#520). `humanish stats` (#
 
 The standing queue, in rough order:
 
-1. #581, the remaining half: a `Sandbox.create` that fails after the API allocated the sandbox
+1. #509, the microphone tier: a custom desktop image with an audio stack
+   (`execution.desktop.template`), then `media.microphone` threaded into the launch the way the
+   camera is; the parse-time refusal stands until then;
+2. #581, the remaining half: a `Sandbox.create` that fails after the API allocated the sandbox
    (the desktop SDK's own startup) leaves a sandbox this run never learned the id of, reclaimed only
    by the provider's timeout; the linger itself is the SDK's held command stream, closed by the
-   2.3.3 bump (0.78.0), and `doctor` names an older SDK;
-2. #513: there is still nowhere to read the docs on humanish.dev (site copy is locked; a docs
+   2.3.3 bump (0.78.0), and `doctor` names an older SDK; the upstream ask is drafted for the
+   operator;
+3. #221's later tier, a real device or simulator behind the emulated lane, and #623's
+   scripted-browser route, which has no model loop and so no dwell or later-tab applier;
+4. #513: there is still nowhere to read the docs on humanish.dev (site copy is locked; a docs
    route needs the operator's sign-off);
-3. the TUI views over `stats` and `export` (#455's metrics screen and `s` key), design-gated;
-4. the launch post: a draft with every number and its receipt path sits outside the public repo,
+5. the TUI views over `stats` and `export` (#455's metrics screen and `s` key), design-gated;
+6. the launch post: a draft with every number and its receipt path sits outside the public repo,
    awaiting the operator; nothing has been announced;
-5. registry promotions (#431) and the shared-world honesty half (#365, #446), unchanged.
+7. registry promotions (#431) and the shared-world honesty half (#365, #446), unchanged.
 
 Earlier state, kept for the record:
 

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.80.0` (2026-09-04). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.81.0` (2026-09-05). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.80.0",
+  "version": "0.81.0",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [
@@ -73,7 +73,9 @@
     "tui:typecheck": "pnpm --filter humanish-tui typecheck",
     "tui:smoke": "node scripts/tui-smoke.mjs",
     "tui:test": "pnpm --filter humanish-tui test",
-    "release:dogfood": "node scripts/release-dogfood.mjs"
+    "release:dogfood": "node scripts/release-dogfood.mjs",
+    "docs:generate": "tsx scripts/generate-cli-docs.ts",
+    "docs:check": "tsx scripts/generate-cli-docs.ts --check"
   },
   "repository": {
     "type": "git",