humanish 0.80.0 → 0.82.0

package/dist/terminal-node-bootstrap.d.ts

@@ -0,0 +1,4 @@
+export declare const TERMINAL_NODE_VERSION = "22.23.2";
+export declare const TERMINAL_NODE_NPM_PREFIX_SCRIPT: string;
+/** Unkeyed runtime prerequisite for stock Linux desktops. No apt repository refresh (#674). */
+export declare const TERMINAL_NODE_BOOTSTRAP_COMMAND: string;

package/dist/terminal-node-bootstrap.js

@@ -0,0 +1,58 @@
+// Node 22 remains a supported LTS line. Pin the official release and trusted archive hashes:
+// https://nodejs.org/en/about/previous-releases
+// https://nodejs.org/dist/v22.23.2/SHASUMS256.txt (checked 2026-09-05)
+// A checksum fetched alongside the archive at runtime would not pin what we trust.
+export const TERMINAL_NODE_VERSION = "22.23.2";
+// npm normally derives its global prefix from the real Node executable. This distribution
+// lives under /opt, while its public executables use /usr/local/bin. Set only a missing
+// built-in default; npm's environment, CLI, user and global config still take precedence.
+export const TERMINAL_NODE_NPM_PREFIX_SCRIPT = [
+    'const fs = require("node:fs");',
+    'const file = process.argv[1];',
+    'let existing = "";',
+    'try { existing = fs.readFileSync(file, "utf8"); } catch (error) { if (error.code !== "ENOENT") throw error; }',
+    'if (!/^[\\t ]*prefix[\\t ]*=/m.test(existing)) fs.appendFileSync(file, "\\nprefix=/usr/local\\n");'
+].join(" ");
+/** Unkeyed runtime prerequisite for stock Linux desktops. No apt repository refresh (#674). */
+export const TERMINAL_NODE_BOOTSTRAP_COMMAND = [
+    "set -eu",
+    "# humanish terminal-node-bootstrap",
+    "node_major=0",
+    `if command -v node >/dev/null 2>&1; then node_major=$(node -e 'console.log(Number(process.versions.node.split(".")[0]))' 2>/dev/null || echo 0); fi`,
+    `if command -v node >/dev/null 2>&1 && command -v npm >/dev/null 2>&1 && [ "$node_major" -ge 20 ] && npm --version >/dev/null 2>&1; then`,
+    // An explicit exit under set -e runs the stock login shell's failing clear_console logout hook
+    // and turns this successful fast path into exit 1. Finish the compound command naturally.
+    "  :",
+    "else",
+    `case "$(uname -s):$(uname -m)" in`,
+    `  Linux:x86_64) node_arch=x64; node_sha=b294a556e639d64338823920e5866c21c02741742d2e1529ee1a225c1ec9252a ;;`,
+    `  Linux:aarch64|Linux:arm64) node_arch=arm64; node_sha=013b59cfd2819703a6f4a14ab891fc46fc2a4e3f5bcd92de3fb4929b43e35b30 ;;`,
+    `  *) echo 'humanish: terminal runtime requires a supported Linux x64/arm64 desktop or working Node >=20 and npm' >&2; exit 1 ;;`,
+    "esac",
+    "for prerequisite in curl sha256sum tar gzip mktemp sudo; do",
+    `  command -v "$prerequisite" >/dev/null 2>&1 || { echo "humanish: terminal runtime bootstrap requires $prerequisite" >&2; exit 1; }`,
+    "done",
+    `node_archive="node-v${TERMINAL_NODE_VERSION}-linux-$node_arch.tar.gz"`,
+    `node_target="/opt/humanish/node-v${TERMINAL_NODE_VERSION}-linux-$node_arch"`,
+    `node_temp=$(mktemp -d /tmp/humanish-node.XXXXXX)`,
+    `trap 'rm -rf "$node_temp"' EXIT`,
+    `curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --connect-timeout 10 --max-time 90 --retry 1 --retry-max-time 120 --output "$node_temp/$node_archive" "https://nodejs.org/dist/v${TERMINAL_NODE_VERSION}/$node_archive"`,
+    `(cd "$node_temp" && printf '%s  %s\\n' "$node_sha" "$node_archive" | sha256sum --check --status) || { echo 'humanish: terminal Node archive checksum did not match the trusted release' >&2; exit 1; }`,
+    // Only a verified official archive reaches privileged extraction. The versioned install is
+    // root-owned; subsequent ordinary and sudo shells find it through standard /usr/local/bin.
+    "sudo -n mkdir -p /opt/humanish /usr/local/bin",
+    `sudo -n tar --extract --gzip --file "$node_temp/$node_archive" --directory /opt/humanish --no-same-owner`,
+    "for executable in node npm npx; do",
+    `  sudo -n ln -sfn "$node_target/bin/$executable" "/usr/local/bin/$executable"`,
+    "done",
+    // Keep global product executables on the existing ordinary/sudo PATH (#679). The new
+    // versioned distribution is the only config we modify; no user/global npmrc or profile.
+    `sudo -n "$node_target/bin/node" -e '${TERMINAL_NODE_NPM_PREFIX_SCRIPT}' "$node_target/lib/node_modules/npm/npmrc"`,
+    "hash -r",
+    `node -e 'process.exit(Number(process.versions.node.split(".")[0]) >= 20 ? 0 : 1)' && npm --version >/dev/null`,
+    // Product installation already uses sudo; detect a template whose sudo PATH cannot see Node
+    // rather than changing global PATH or permissions to make it look supported.
+    `sudo -n node -e 'process.exit(Number(process.versions.node.split(".")[0]) >= 20 ? 0 : 1)' && sudo -n npm --version >/dev/null`,
+    "fi"
+].join("\n");
+//# sourceMappingURL=terminal-node-bootstrap.js.map

package/dist/terminal-node-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-node-bootstrap.js","sourceRoot":"","sources":["../src/terminal-node-bootstrap.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gDAAgD;AAChD,uEAAuE;AACvE,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAE/C,0FAA0F;AAC1F,wFAAwF;AACxF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gCAAgC;IAChC,+BAA+B;IAC/B,oBAAoB;IACpB,+GAA+G;IAC/G,oGAAoG;CACrG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,+FAA+F;AAC/F,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,SAAS;IACT,oCAAoC;IACpC,cAAc;IACd,qJAAqJ;IACrJ,yIAAyI;IACzI,+FAA+F;IAC/F,0FAA0F;IAC1F,KAAK;IACL,MAAM;IACN,mCAAmC;IACnC,6GAA6G;IAC7G,4HAA4H;IAC5H,iIAAiI;IACjI,MAAM;IACN,6DAA6D;IAC7D,qIAAqI;IACrI,MAAM;IACN,uBAAuB,qBAAqB,2BAA2B;IACvE,oCAAoC,qBAAqB,oBAAoB;IAC7E,kDAAkD;IAClD,iCAAiC;IACjC,wNAAwN,qBAAqB,iBAAiB;IAC9P,wMAAwM;IACxM,2FAA2F;IAC3F,2FAA2F;IAC3F,+CAA+C;IAC/C,0GAA0G;IAC1G,oCAAoC;IACpC,+EAA+E;IAC/E,MAAM;IACN,qFAAqF;IACrF,wFAAwF;IACxF,uCAAuC,+BAA+B,6CAA6C;IACnH,SAAS;IACT,+GAA+G;IAC/G,4FAA4F;IAC5F,6EAA6E;IAC7E,+HAA+H;IAC/H,IAAI;CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/dist/terminal-runtime-auth.d.ts

@@ -0,0 +1,13 @@
+import type { E2BNetworkOptions } from "./e2b-desktop-launch.js";
+export declare const OPENAI_EGRESS_HOST = "api.openai.com";
+/** E2B envd installs the sandbox-specific proxy CA into this system bundle before routing. */
+export declare const E2B_SYSTEM_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+/** An inert nonsecret value satisfies Codex exec's auth prerequisite. E2B replaces the header. */
+export declare const OPENAI_EGRESS_PLACEHOLDER = "humanish-egress-auth-placeholder";
+/**
+ * Keep the runtime key in the host-side E2B request, outside sandbox env/files. The installed
+ * E2B SDK declares that transform headers override existing request headers. This adds no routing
+ * restrictions: every sandbox process can still spend via the provider proxy. Never log the
+ * returned options. An adopter's existing exact-host rule must not be silently overwritten.
+ */
+export declare function buildOpenAiEgressNetwork(keyValue: string, existing?: E2BNetworkOptions): E2BNetworkOptions;

package/dist/terminal-runtime-auth.js

@@ -0,0 +1,24 @@
+export const OPENAI_EGRESS_HOST = "api.openai.com";
+/** E2B envd installs the sandbox-specific proxy CA into this system bundle before routing. */
+export const E2B_SYSTEM_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+/** An inert nonsecret value satisfies Codex exec's auth prerequisite. E2B replaces the header. */
+export const OPENAI_EGRESS_PLACEHOLDER = "humanish-egress-auth-placeholder";
+/**
+ * Keep the runtime key in the host-side E2B request, outside sandbox env/files. The installed
+ * E2B SDK declares that transform headers override existing request headers. This adds no routing
+ * restrictions: every sandbox process can still spend via the provider proxy. Never log the
+ * returned options. An adopter's existing exact-host rule must not be silently overwritten.
+ */
+export function buildOpenAiEgressNetwork(keyValue, existing) {
+    if (Object.keys(existing?.rules ?? {}).some((host) => host.toLowerCase().replace(/\.$/, "") === OPENAI_EGRESS_HOST)) {
+        throw new Error("openai-egress conflicts with an existing api.openai.com network rule; refusing to overwrite it.");
+    }
+    return {
+        ...existing,
+        rules: {
+            ...existing?.rules,
+            [OPENAI_EGRESS_HOST]: [{ transform: { headers: { Authorization: `Bearer ${keyValue}` } } }]
+        }
+    };
+}
+//# sourceMappingURL=terminal-runtime-auth.js.map

package/dist/terminal-runtime-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-runtime-auth.js","sourceRoot":"","sources":["../src/terminal-runtime-auth.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AACzE,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,kCAAkC,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,QAA4B;IAE5B,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,kBAAkB,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACrH,CAAC;IACD,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE;YACL,GAAG,QAAQ,EAAE,KAAK;YAClB,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;SAC5F;KACF,CAAC;AACJ,CAAC"}

package/dist/terminal-runtime.d.ts

@@ -0,0 +1,16 @@
+import type { ActorRuntimeProvenance } from "./actor-contract.js";
+import type { ReasoningEffort } from "./reasoning-effort.js";
+export declare const TERMINAL_RUNTIME_PACKAGE = "@openai/codex";
+export declare const TERMINAL_RUNTIME_VERSION_TIMEOUT_MS = 60000;
+/** Exact semver only: no registry tags, ranges, URLs, or shell syntax. */
+export declare function isExactRuntimeVersion(value: unknown): value is string;
+/** Captured Codex CLI output: `codex-cli 0.153.3\n`. Other shapes fail closed. */
+export declare function parseTerminalRuntimeVersion(stdout: string): string | undefined;
+export declare function shellQuote(value: string): string;
+export declare function buildRuntimeVersionCommand(requestedVersion?: string): string;
+export declare function buildRuntimeExecPrefix(version: string, model?: string, reasoningEffort?: ReasoningEffort): string;
+export declare function declaredRuntimeProvenance(args: {
+    version?: string;
+    model?: string;
+    reasoningEffort?: ReasoningEffort;
+}): ActorRuntimeProvenance;

package/dist/terminal-runtime.js

@@ -0,0 +1,42 @@
+export const TERMINAL_RUNTIME_PACKAGE = "@openai/codex";
+export const TERMINAL_RUNTIME_VERSION_TIMEOUT_MS = 60_000;
+/** Exact semver only: no registry tags, ranges, URLs, or shell syntax. */
+export function isExactRuntimeVersion(value) {
+    if (typeof value !== "string" || value.length > 120)
+        return false;
+    const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/.exec(value);
+    return match !== null && (match[4]?.split(".").every((part) => !/^\d+$/.test(part) || part === "0" || !part.startsWith("0")) ?? true);
+}
+/** Captured Codex CLI output: `codex-cli 0.153.3\n`. Other shapes fail closed. */
+export function parseTerminalRuntimeVersion(stdout) {
+    const match = /^codex-cli ([^\s]+)$/.exec(stdout.trim());
+    return match && isExactRuntimeVersion(match[1]) ? match[1] : undefined;
+}
+export function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+export function buildRuntimeVersionCommand(requestedVersion) {
+    if (requestedVersion !== undefined && !isExactRuntimeVersion(requestedVersion))
+        throw new Error("Invalid exact Codex runtime version.");
+    return `npm_config_update_notifier=false npx -y ${TERMINAL_RUNTIME_PACKAGE}@${requestedVersion ?? "latest"} --version`;
+}
+export function buildRuntimeExecPrefix(version, model, reasoningEffort) {
+    if (!isExactRuntimeVersion(version))
+        throw new Error("Codex execution requires a verified exact runtime version.");
+    return `npm_config_update_notifier=false npx -y ${TERMINAL_RUNTIME_PACKAGE}@${version} exec`
+        + (model === undefined ? "" : ` --model ${shellQuote(model)}`)
+        + (reasoningEffort === undefined ? "" : ` -c ${shellQuote(`model_reasoning_effort=${JSON.stringify(reasoningEffort)}`)}`);
+}
+export function declaredRuntimeProvenance(args) {
+    return {
+        schema: "humanish.actor-runtime.v1",
+        package: TERMINAL_RUNTIME_PACKAGE,
+        requestedVersion: args.version ?? "latest",
+        versionStatus: "unobserved",
+        ...(args.model === undefined ? {} : { requestedModel: args.model }),
+        modelStatus: args.model === undefined ? "runtime_default_unobserved" : "declared",
+        ...(args.reasoningEffort === undefined ? {} : { requestedReasoningEffort: args.reasoningEffort }),
+        usageGranularity: "runtime_turn"
+    };
+}
+//# sourceMappingURL=terminal-runtime.js.map

package/dist/terminal-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-runtime.js","sourceRoot":"","sources":["../src/terminal-runtime.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,KAAK,GAAG,+HAA+H,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1J,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACxI,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,gBAAyB;IAClE,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxI,OAAO,2CAA2C,wBAAwB,IAAI,gBAAgB,IAAI,QAAQ,YAAY,CAAC;AACzH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAc,EAAE,eAAiC;IACvG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACnH,OAAO,2CAA2C,wBAAwB,IAAI,OAAO,OAAO;UACxF,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;UAC5D,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA6E;IACrH,OAAO;QACL,MAAM,EAAE,2BAA2B;QACnC,OAAO,EAAE,wBAAwB;QACjC,gBAAgB,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ;QAC1C,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACnE,WAAW,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,UAAU;QACjF,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QACjG,gBAAgB,EAAE,cAAc;KACjC,CAAC;AACJ,CAAC"}

package/dist/terminal-token-usage.d.ts

@@ -1,6 +1,7 @@
 import type { ActorTokenUsage } from "./actor-contract.js";
 /**
- * Accumulate per-turn provider token usage from a captured `codex exec --json` stream.
+ * Accumulate runtime-turn usage from a captured `codex exec --json` stream. A Codex turn may
+ * include multiple provider requests; these records cannot establish per-request pricing tiers.
  *
  * Returns undefined when the stream carried no usage record at all, which is the honest "no
  * signal" case and must stay distinguishable from a measured zero. Per-turn records are preserved

package/dist/terminal-token-usage.js

@@ -21,7 +21,8 @@ function num(value) {
     return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : undefined;
 }
 /**
- * Accumulate per-turn provider token usage from a captured `codex exec --json` stream.
+ * Accumulate runtime-turn usage from a captured `codex exec --json` stream. A Codex turn may
+ * include multiple provider requests; these records cannot establish per-request pricing tiers.
  *
  * Returns undefined when the stream carried no usage record at all, which is the honest "no
  * signal" case and must stay distinguishable from a measured zero. Per-turn records are preserved
@@ -88,6 +89,6 @@ export function describeTokenUsage(usage) {
     if (usage.output !== undefined)
         parts.push(`${usage.output.toLocaleString("en-US")} output`);
     const turns = usage.turns?.length ?? 0;
-    return `${parts.join(", ")} tokens over ${turns} provider turn${turns === 1 ? "" : "s"}`;
+    return `${parts.join(", ")} tokens over ${turns} Codex turn${turns === 1 ? "" : "s"}`;
 }
 //# sourceMappingURL=terminal-token-usage.js.map

package/dist/terminal-token-usage.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-token-usage.js","sourceRoot":"","sources":["../src/terminal-token-usage.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,6FAA6F;AAC7F,EAAE;AACF,8FAA8F;AAC9F,0FAA0F;AAC1F,2FAA2F;AAC3F,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,wFAAwF;AACxF,iEAAiE;AAcjE,iGAAiG;AACjG,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,mEAAmE,CAAC;AAErF,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uEAAuE;QACnF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,KAA6D,EAAsB,EAAE;QAChG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/F,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;8BAE8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC3F,CAAC"}
+{"version":3,"file":"terminal-token-usage.js","sourceRoot":"","sources":["../src/terminal-token-usage.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,6FAA6F;AAC7F,EAAE;AACF,8FAA8F;AAC9F,0FAA0F;AAC1F,2FAA2F;AAC3F,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,wFAAwF;AACxF,iEAAiE;AAcjE,iGAAiG;AACjG,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,mEAAmE,CAAC;AAErF,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uEAAuE;QACnF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,KAA6D,EAAsB,EAAE;QAChG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/F,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;8BAE8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACxF,CAAC"}

package/docs/architecture/actor-contract.md

@@ -293,6 +293,28 @@ not cost — a live scripted run drives a real browser against a real running ap
 declaration as spend. "Live" on this route must never silently come to mean "costs money";
 this paragraph is the record of that decision.
 
+## Optional closing report
+
+`CuaProvider.debrief` is an optional read-only request after a structured
+`stopWhen` or dwell stop. It returns a `CuaTurn` with `closingReport` containing
+`summary` and `frictionReports`; an empty friction list is valid. The loop rejects
+actions, pending safety checks, and invalid report shapes. It redacts accepted
+reports, records them in `ActorTrace.debrief`, and projects one readable message
+without invoking action or communication callbacks.
+
+This request uses the final observation and retained provider history. It does
+not expose the hidden stop criterion or change the original task outcome. It is
+skipped before any participant turn, after natural completion, without provider
+support, or without remaining time and known budget. An attempted request's
+unreported usage remains an unknown cost line. `counts.debriefCalls` is separate
+from interaction turns, and reported usage contributes to aggregate cost.
+
+The OpenAI implementation makes one request with tools disabled and structured
+output; no HTTP or policy retries. Stateless/ZDR mode does not offer retrospective
+reporting because it does not retain the required session history. The
+[paired live receipt](../goals/computer-use-actor/receipts/structured-closing-report-2026-09-05.md)
+records both report recovery and control failures in the separate legacy parser.
+
 ## The state-driven executor seam (shipped — the transport-agnostic intent, made real)
 
 The `CuaExecutor` / `CuaProvider` ports are the concrete realization of the "plural harnesses /

package/docs/architecture/state-driven-executor.md

@@ -28,7 +28,7 @@ This is the "plural harnesses / transport-agnostic" intent of
 ```ts
 interface CuaExecutor {
   observe(): Promise<CuaObservation>;   // capture current state
-  execute(action: CuaAction): Promise<void>; // perform one action
+  execute(action: CuaAction, signal?: AbortSignal): Promise<void>; // perform one action
 }
 
 interface CuaObservation {
@@ -38,6 +38,15 @@ interface CuaObservation {
 }
 ```
 
+The loop aborts an action's optional signal when its wait ends, including cancellation or a
+deadline. An executor that prepares asynchronously should check the signal before dispatching
+an input; wrappers must forward it (`execute: (...args) => inner.execute(...args)`). Existing
+one-argument executors remain compatible. This does not cancel already-dispatched substrate
+operations. The desktop executor uses this boundary while reading the current cursor before
+left/double clicks: an exact integer match avoids redundant movement; uncertain or fractional
+coordinates retain the original SDK path. The cursor read adds at most 500 ms of preparation
+wait and does not cache a previous action's position.
+
 - **`screenshot` is optional.** A non-vision (state) executor omits it. The loop
   persists no screenshot that turn; `counts.screenshots` stays 0, so the trace's
   `redaction.screenshots` resolves to `"n/a"`. No fabricated `Buffer.alloc(0)`

package/docs/architecture/terminal-product-lane.md

@@ -1,6 +1,6 @@
 # Terminal-product real-agent lane (issue #154)
 
-Date: 2026-06-16 (current-state note updated 2026-07-14)
+Date: 2026-06-16 (runtime-auth contract updated 2026-09-05)
 
 Status: live terminal-product route shipped in `0.8.0`. The in-sandbox backend,
 command-scoped credential placement, exact-id cleanup proof, an interventions ledger,
@@ -16,8 +16,8 @@ for the full slice plan and the safety contract.
 
 A lab lane for **terminal-product real-agent studies**: a real autonomous coding
 agent (Codex) discovering and using a CLI/product from its **public surfaces
-only**, running **inside an E2B shell** with command-scoped runtime auth, capped
-at no-spend, emitting durable terminal/substrate/cost/no-spend/cleanup/
+only**, running **inside an E2B shell** with declared runtime-auth placement and
+spend/time caps, emitting durable terminal/substrate/cost/no-spend/cleanup/
 intervention proof that verifies fail-closed. This is distinct from the browser
 lanes: it is not testing whether a browser can click a local web app — it tests
 whether an autonomous agent can discover and use a CLI/product surface from
@@ -36,7 +36,9 @@ fail-closed cross-validation, and forward-declared warnings.
 | `subject.product` | `{ name, publicSurfaces[] }` — the only world the agent sees |
 | `execution.target` | `e2b-terminal` (or absent → implied) |
 | `execution.terminal` | `{ transport: exec-stream, stdin: disabled }` |
-| `execution.runtimeAuth` | `openai-env` (names-only durable evidence) |
+| `execution.runtimeAuth` | `openai-env` (default) or opt-in `openai-egress`; names-only durable evidence |
+| `execution.runtime.version` | Optional exact `@openai/codex` version; observed before keyed execution |
+| `actors[0].model` / `reasoningEffort` | Forwarded to Codex; retained as declarations, not observed provider identity |
 | `scenario.caps` | `{ maxUsd, maxJobs, maxMinutes }` — the blast-radius budget |
 | `policies` | `allowPrivateRepoAccess` / `allowProviderCredentials` / `allowPaymentCredentials` / `allowGitHubMutation`, all DEFAULT FALSE |
 | `actors[0].type` | `codex-exec` — a registered terminal actor (`keyPlacement: in-sandbox-command-scoped`) |
@@ -46,9 +48,143 @@ Routing is `routesToTerminalProduct(config)` — the single source of truth that
 both `selectLabBackend` and the forward-declared-warning logic consume, mirroring
 `routesToComputerUse` / `routesToScriptedBrowser`.
 
-## The safety contract (the lane's reason to exist)
+## Repeating a terminal study with the same runtime
 
-This lane **inverts** the credential-placement default of every other E2B route.
+```yaml
+actors:
+  - type: codex-exec
+    model: gpt-5.6-sol
+    reasoningEffort: low
+execution:
+  target: e2b-terminal
+  runtime:
+    version: 0.153.3
+```
+
+An explicit version must be exact semver; tags, ranges, URLs, and extra runtime
+fields fail at parsing. Before the keyed actor command, Humanish runs an unkeyed
+`npx @openai/codex@<selector> --version` command with a 60-second deadline.
+A malformed result, nonzero exit, or requested/observed mismatch fails the lane
+and reclaims its owned sandbox. When the version is omitted, the probe resolves
+`latest` once and execution uses the exact version it reported.
+
+`actor.json`, the bundle's terminal actor, and `terminal-ledgers.json` retain
+`humanish.actor-runtime.v1`: requested and observed versions, verification status,
+declared model/effort, and the usage granularity. The observed executable version
+also appears as `providerVersion`. An undeclared model stays explicitly
+`runtime_default_unobserved`; Humanish does not label the runtime name as a model.
+Dry runs record declarations only, in a `terminal-lab.runtime.declared` event.
+
+These settings make a study's request reproducible, but do not attest the actual
+provider model or add a provider spending limit. Codex `turn.completed` usage can
+aggregate several model requests, so Humanish does not use a declared model to
+infer per-request pricing tiers or fill in unknown costs. Runtime-token costs
+and the studied product's no-spend boundary still need separate interpretation.
+
+## Runtime auth: raw-key placement and remaining provider access
+
+`execution.runtimeAuth: openai-env` remains the compatible default. It supplies
+`CODEX_API_KEY` command-scoped to Codex, with `OPENAI_API_KEY` also supplied when
+that was the host source. Child processes can read and use the raw key.
+
+Opt in to keeping the raw key outside the sandbox:
+
+```yaml
+execution:
+  target: e2b-terminal
+  runtimeAuth: openai-egress
+  terminal:
+    transport: exec-stream
+    stdin: disabled
+```
+
+`openai-egress` resolves the same host key (`CODEX_API_KEY` first, otherwise
+`OPENAI_API_KEY`) and supplies it only to E2B's host-side network rule for
+`api.openai.com`. The rule sets the HTTPS `Authorization` header. The sandbox's
+Codex command receives the nonsecret value `humanish-egress-auth-placeholder`
+under `CODEX_API_KEY`, plus `CODEX_CA_CERTIFICATE` pointing at E2B's existing
+system CA bundle (`/etc/ssl/certs/ca-certificates.crt`) so TLS verification trusts
+the platform's proxy CA. Humanish does not disable TLS verification or download
+an unauthenticated CA. The sandbox receives no raw runtime key in command env, sandbox env,
+files, metadata, or captured evidence. The host still scrubs the actual key from
+output and errors, including errors during sandbox creation.
+
+This mode supports the default OpenAI endpoint only. Humanish explicitly sets
+Codex's built-in `openai` provider and `openai_base_url` to
+`https://api.openai.com/v1` for that invocation. It does not support a custom
+provider, proxy base URL, or regional endpoint under this mode. `openai-env`
+retains its existing command behavior. E2B header rules are a public-beta
+capability; the local contract is checked against the installed Desktop SDK
+(`@e2b/desktop` 2.3.3, resolving `e2b` 2.46.1).
+
+**The sandbox still has a spendable OpenAI proxy capability.** Every process can
+make authenticated requests to that host from sandbox creation until teardown,
+including bootstrap/setup commands and commands launched outside Codex. Calls
+made outside Codex may be absent from its usage ledger. This mode does not impose
+a provider-side spending limit, restrict models/API paths, or make
+`scenario.caps.maxUsd` a preventive provider budget. A hard provider budget needs
+a separately enforced control; do not infer zero spend from an unmeasured ledger
+line.
+
+Public internet discovery stays unrestricted unless the lab already declares
+`execution.egressAllow`. The mode preserves that allowlist and its deny-all
+fallback without adding hosts. If an allowlist omits `api.openai.com`, provider
+requests can fail. E2B domain allowlists are routing controls rather than strict
+destination isolation on shared infrastructure. An existing exact OpenAI host
+rule is rejected instead of silently overwritten.
+
+Evidence records the selected auth mode and the residual proxy capability.
+Resolved live actor traces use `keyPlacement: external` in `openai-egress`; the
+actor registry continues to describe the default `in-sandbox-command-scoped`
+placement. Dry runs record declarations and prove no live proxy behavior.
+
+The upstream contracts are documented in [E2B internet access and network
+rules](https://docs.e2b.dev/network/internet-access) and [Codex advanced
+configuration](https://developers.openai.com/codex/config-advanced),
+[Codex custom CA bundles](https://developers.openai.com/codex/auth#custom-ca-bundles),
+and [E2B's CA installer](https://github.com/e2b-dev/infra/blob/main/packages/envd/internal/host/cacerts.go).
+E2B's installed
+SDK documents that transformed headers override request headers. Deterministic
+request/redaction tests do not establish live wire behavior. The [2026-09-05
+transport receipt](../goals/terminal-product-lane/receipts/2026-09-05-runtime-egress-auth.md)
+records the controlled live header/auth checks and their scope.
+
+## Runtime prerequisite
+
+The terminal route reuses a working Node >=20 and npm from the calling shell.
+Otherwise it installs the pinned official Node 22.23.2 Linux x64 or arm64 archive,
+downloaded over verified HTTPS and checked against an architecture-specific
+SHA256 committed in the bootstrap. It does not refresh apt repositories or fetch
+an unpinned checksum beside the archive. Node 22 is a supported LTS line on the
+[official release schedule](https://nodejs.org/en/about/previous-releases); the
+trusted hashes come from its [release manifest](https://nodejs.org/dist/v22.23.2/SHASUMS256.txt).
+
+Installation requires `curl`, `sha256sum`, `tar`, `gzip`, `mktemp`, and passwordless
+`sudo`. Only a verified archive is extracted into a root-owned versioned directory
+under `/opt/humanish`; `/usr/local/bin` links make Node/npm/npx available to later
+shells. In that new distribution only, a missing built-in npm `prefix` defaults
+to `/usr/local`, so global product executables use the existing PATH. Existing
+distribution settings and higher-priority npm overrides are preserved; an adopter
+override can still choose a bin directory outside PATH. The installer changes no
+user/global npm configuration, global permissions, or shell startup files. It
+checks Node/npm in both ordinary and sudo shells after installation. The existing
+runtime fast path preserves user-specific installations; a later sudo product
+install can still fail if that installation is absent from sudo's PATH.
+
+The [global executable receipt](../goals/terminal-product-lane/receipts/2026-09-05-global-npm-prefix.md)
+records the regression found after the initial runtime-only proof and its stock
+desktop checks. npm documents [global executable locations](https://docs.npmjs.com/cli/v10/configuring-npm/folders#executables)
+and the [distribution built-in configuration](https://docs.npmjs.com/cli/v10/configuring-npm/npmrc#built-in-config-file).
+
+An egress allowlist must permit `nodejs.org` if the runtime needs installation,
+as well as the registries and product surfaces the study uses. Missing tools,
+unsupported architectures, a failed download or checksum, and a failed runtime
+check stop the lane before Codex. Downloads have finite connection, transfer, and
+retry bounds within the existing five-minute bootstrap deadline.
+
+## The original command-scoped safety contract
+
+The default mode **inverts** the credential-placement default of every other E2B route.
 On the computer-use route the model's key stays *outside* the sandbox; here the
 agent-under-test runs *inside* with a real `OPENAI_API_KEY`/`CODEX_API_KEY` and
 is **presumed exfiltratable**. The doctrine (invariants-and-defaults.md, the

package/docs/contracts/feedback.md

@@ -52,6 +52,20 @@ setup-quality gap, ceremonial/absent study quality, target-app blocker, or
 Humanish CLI blocker. The OSS
 meta-lab is one maintainer dogfood example, not the only candidate source.
 
+For completed computer-use sessions, participant-reported friction comes from
+the redacted closing report and observed-report clauses in earlier messages.
+Matching `stopWhen` or ending a dwell window does not discard an earlier
+report or change the successful completion verdict. Exact repeated reports
+appear once in the lane's candidate. Harness notices, reasoning, and observed
+page content do not become participant findings; quoted app copy and negated
+reports retain the existing exclusions. Code excerpts are treated as quoted
+material. Interim matching requires an observation-shaped clause and filters
+common plans, questions, and hypotheticals; a report followed by a retry plan
+can still qualify. This text
+heuristic does not establish that a reported defect is real or independently
+confirmed. A custom session's closing `reason` remains eligible even when it
+was not repeated in the message trace.
+
 ### `draft`
 
 Builds structured feedback from the strongest run candidate first. If no

package/docs/contracts/run-bundle.md

@@ -126,7 +126,11 @@ enters this field; identity is digests, a sha, a boolean, and counts.
 
 `cost` is optional and additive (`humanish.run-cost-summary.v1`): the
 computer-use lane's run-level cost ESTIMATE — the sum of each lane's
-token-derived model cost plus one aggregate E2B desktop-minute figure. It is an
+token-derived model cost plus E2B desktop compute lines. New independent CUA runs
+emit one line per owned desktop, keyed by public lane ID and carrying observed CPU/memory,
+resource source, host-measured minutes, and the derived per-second rate. Older
+single aggregate desktop lines remain valid. Missing resource metadata stays
+unpriced; unconfirmed cleanup adds an unknown remaining-lifetime line. It is an
 ESTIMATE, never authoritative: every dollar is a rate-table multiply from the
 operator-editable `src/pricing.ts`, carries the pricing `ratesAsOf` date and
 `source`, and is surfaced with the "estimated (rates as of `<date>`)" label —

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.80.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.82.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.
@@ -978,16 +978,16 @@ never authoritative: every dollar figure is a rate-table multiply, labeled
 `humanish.run-bundle.v1` stays v1 and every pre-existing bundle is byte-stable:
 
 - `humanish.pricing.v1` — the OPERATOR-EDITABLE rate table in `src/pricing.ts`:
-  dated per-model input/output USD-per-token rates and an E2B desktop
-  USD-per-minute rate, each with a public pricing-page `source` and an `asOf`
+  dated per-model input/output USD-per-token rates and E2B CPU/GiB-second
+  rates, each with a public pricing-page `source` and an `asOf`
   date. A prominent banner says these are estimates to update when providers
   change pricing. Model rates may carry a `cacheWriteUsdPerToken` (OpenAI 5.6+
   bills cache writes at 1.25x input as the total rate for written tokens) and a
   `longContext` tier (a per-request input threshold that re-prices the whole
   request; priced exactly only from the trace's per-request `turns` ledger —
   totals alone never re-tier, which is the under-estimate direction). Some
-  entries are `placeholder: true` stand-ins (the E2B desktop rate, pending a
-  live RAM-spec confirmation) — an operator MUST confirm them before trusting
+  entries are `placeholder: true` stand-ins (the legacy desktop helper's
+  8-vCPU/8-GiB planning assumption) — an operator MUST confirm them before trusting
   the magnitude; the flag propagates into every estimate so a stand-in is never
   mistaken for a live rate. An UNKNOWN model/desktop rate is DECLARED ABSENT
   (`estimatedCostUsd: null` + a `reason`), never guessed.
@@ -996,7 +996,14 @@ never authoritative: every dollar figure is a rate-table multiply, labeled
   `no_rate_for_model`/`no_token_usage`), `ratesAsOf`, `source`, `modelId`,
   optional `placeholder`, and a `breakdown`.
 - `humanish.run-cost-summary.v1` — `RunBundle.cost`: the sum of every lane's
-  `model-tokens` line PLUS one aggregate `desktop-minutes` line.
+  `model-tokens` lines PLUS `desktop-minutes` lines. New independent CUA runs
+  price each owned desktop separately; older single aggregate lines remain readable.
+  A desktop line's optional `desktop` object records `minutes`,
+  `durationBasis: host-acquired-to-cleanup`, observed `resources` (`cpuCount`,
+  `memoryMiB`), `resourceSource: e2b.getInfo`, and `usdPerSecond` when priceable.
+  Failed metadata reads record `resourceUnavailableReason`; no resource guess is used.
+  Resource metadata and missing/unsupported rates produce a null line. A kept or
+  unconfirmed allocation adds `desktop_lifetime_incomplete` as a second null line.
 
 The summary follows the SAME null discipline as the terminal cost ledger above.
 `estimatedTotalUsd` sums ONLY the non-null `breakdown` lines and is `null` iff
@@ -1008,8 +1015,10 @@ tried and could not price it) and contributes nothing. `fullyEstimated` is
 the MIN (oldest) `asOf` across contributing rates — an aggregate is only as fresh
 as its stalest input, so MAX would overclaim freshness (each `breakdown` line
 keeps its own true `asOf`). `desktopMinutes` is a HOST-SIDE
-create→teardown span — an approximation of E2B's server-side billed lifetime, so
-the desktop dollar figure is doubly an estimate.
+acquired-handle→cleanup span, excluding allocation/startup before handle acquisition.
+It approximates E2B's server-side billed lifetime. Plan fees, credits, and negotiated
+prices are excluded; unknown remaining lifetime makes `fullyEstimated` false.
+Shared-world, scripted-browser, and terminal routes do not yet emit these desktop lines.
 
 ```yaml
 schema: humanish.run-cost-summary.v1