humanish 0.81.0 → 0.82.1

package/dist/terminal-runtime.d.ts

@@ -0,0 +1,16 @@
+import type { ActorRuntimeProvenance } from "./actor-contract.js";
+import type { ReasoningEffort } from "./reasoning-effort.js";
+export declare const TERMINAL_RUNTIME_PACKAGE = "@openai/codex";
+export declare const TERMINAL_RUNTIME_VERSION_TIMEOUT_MS = 60000;
+/** Exact semver only: no registry tags, ranges, URLs, or shell syntax. */
+export declare function isExactRuntimeVersion(value: unknown): value is string;
+/** Captured Codex CLI output: `codex-cli 0.153.3\n`. Other shapes fail closed. */
+export declare function parseTerminalRuntimeVersion(stdout: string): string | undefined;
+export declare function shellQuote(value: string): string;
+export declare function buildRuntimeVersionCommand(requestedVersion?: string): string;
+export declare function buildRuntimeExecPrefix(version: string, model?: string, reasoningEffort?: ReasoningEffort): string;
+export declare function declaredRuntimeProvenance(args: {
+    version?: string;
+    model?: string;
+    reasoningEffort?: ReasoningEffort;
+}): ActorRuntimeProvenance;

package/dist/terminal-runtime.js

@@ -0,0 +1,42 @@
+export const TERMINAL_RUNTIME_PACKAGE = "@openai/codex";
+export const TERMINAL_RUNTIME_VERSION_TIMEOUT_MS = 60_000;
+/** Exact semver only: no registry tags, ranges, URLs, or shell syntax. */
+export function isExactRuntimeVersion(value) {
+    if (typeof value !== "string" || value.length > 120)
+        return false;
+    const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/.exec(value);
+    return match !== null && (match[4]?.split(".").every((part) => !/^\d+$/.test(part) || part === "0" || !part.startsWith("0")) ?? true);
+}
+/** Captured Codex CLI output: `codex-cli 0.153.3\n`. Other shapes fail closed. */
+export function parseTerminalRuntimeVersion(stdout) {
+    const match = /^codex-cli ([^\s]+)$/.exec(stdout.trim());
+    return match && isExactRuntimeVersion(match[1]) ? match[1] : undefined;
+}
+export function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+export function buildRuntimeVersionCommand(requestedVersion) {
+    if (requestedVersion !== undefined && !isExactRuntimeVersion(requestedVersion))
+        throw new Error("Invalid exact Codex runtime version.");
+    return `npm_config_update_notifier=false npx -y ${TERMINAL_RUNTIME_PACKAGE}@${requestedVersion ?? "latest"} --version`;
+}
+export function buildRuntimeExecPrefix(version, model, reasoningEffort) {
+    if (!isExactRuntimeVersion(version))
+        throw new Error("Codex execution requires a verified exact runtime version.");
+    return `npm_config_update_notifier=false npx -y ${TERMINAL_RUNTIME_PACKAGE}@${version} exec`
+        + (model === undefined ? "" : ` --model ${shellQuote(model)}`)
+        + (reasoningEffort === undefined ? "" : ` -c ${shellQuote(`model_reasoning_effort=${JSON.stringify(reasoningEffort)}`)}`);
+}
+export function declaredRuntimeProvenance(args) {
+    return {
+        schema: "humanish.actor-runtime.v1",
+        package: TERMINAL_RUNTIME_PACKAGE,
+        requestedVersion: args.version ?? "latest",
+        versionStatus: "unobserved",
+        ...(args.model === undefined ? {} : { requestedModel: args.model }),
+        modelStatus: args.model === undefined ? "runtime_default_unobserved" : "declared",
+        ...(args.reasoningEffort === undefined ? {} : { requestedReasoningEffort: args.reasoningEffort }),
+        usageGranularity: "runtime_turn"
+    };
+}
+//# sourceMappingURL=terminal-runtime.js.map

package/dist/terminal-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-runtime.js","sourceRoot":"","sources":["../src/terminal-runtime.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,KAAK,GAAG,+HAA+H,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1J,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACxI,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,gBAAyB;IAClE,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxI,OAAO,2CAA2C,wBAAwB,IAAI,gBAAgB,IAAI,QAAQ,YAAY,CAAC;AACzH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAc,EAAE,eAAiC;IACvG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACnH,OAAO,2CAA2C,wBAAwB,IAAI,OAAO,OAAO;UACxF,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;UAC5D,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA6E;IACrH,OAAO;QACL,MAAM,EAAE,2BAA2B;QACnC,OAAO,EAAE,wBAAwB;QACjC,gBAAgB,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ;QAC1C,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACnE,WAAW,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,UAAU;QACjF,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QACjG,gBAAgB,EAAE,cAAc;KACjC,CAAC;AACJ,CAAC"}

package/dist/terminal-token-usage.d.ts

@@ -1,6 +1,7 @@
 import type { ActorTokenUsage } from "./actor-contract.js";
 /**
- * Accumulate per-turn provider token usage from a captured `codex exec --json` stream.
+ * Accumulate runtime-turn usage from a captured `codex exec --json` stream. A Codex turn may
+ * include multiple provider requests; these records cannot establish per-request pricing tiers.
  *
  * Returns undefined when the stream carried no usage record at all, which is the honest "no
  * signal" case and must stay distinguishable from a measured zero. Per-turn records are preserved

package/dist/terminal-token-usage.js

@@ -21,7 +21,8 @@ function num(value) {
     return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : undefined;
 }
 /**
- * Accumulate per-turn provider token usage from a captured `codex exec --json` stream.
+ * Accumulate runtime-turn usage from a captured `codex exec --json` stream. A Codex turn may
+ * include multiple provider requests; these records cannot establish per-request pricing tiers.
  *
  * Returns undefined when the stream carried no usage record at all, which is the honest "no
  * signal" case and must stay distinguishable from a measured zero. Per-turn records are preserved
@@ -88,6 +89,6 @@ export function describeTokenUsage(usage) {
     if (usage.output !== undefined)
         parts.push(`${usage.output.toLocaleString("en-US")} output`);
     const turns = usage.turns?.length ?? 0;
-    return `${parts.join(", ")} tokens over ${turns} provider turn${turns === 1 ? "" : "s"}`;
+    return `${parts.join(", ")} tokens over ${turns} Codex turn${turns === 1 ? "" : "s"}`;
 }
 //# sourceMappingURL=terminal-token-usage.js.map

package/dist/terminal-token-usage.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-token-usage.js","sourceRoot":"","sources":["../src/terminal-token-usage.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,6FAA6F;AAC7F,EAAE;AACF,8FAA8F;AAC9F,0FAA0F;AAC1F,2FAA2F;AAC3F,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,wFAAwF;AACxF,iEAAiE;AAcjE,iGAAiG;AACjG,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,mEAAmE,CAAC;AAErF,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uEAAuE;QACnF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,KAA6D,EAAsB,EAAE;QAChG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/F,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;8BAE8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC3F,CAAC"}
+{"version":3,"file":"terminal-token-usage.js","sourceRoot":"","sources":["../src/terminal-token-usage.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,6FAA6F;AAC7F,EAAE;AACF,8FAA8F;AAC9F,0FAA0F;AAC1F,2FAA2F;AAC3F,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,wFAAwF;AACxF,iEAAiE;AAcjE,iGAAiG;AACjG,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,mEAAmE,CAAC;AAErF,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uEAAuE;QACnF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAC1D,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,GAAG,GAAG,CAAC,KAA6D,EAAsB,EAAE;QAChG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/F,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;8BAE8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACxF,CAAC"}

package/docs/architecture/state-driven-executor.md

@@ -28,7 +28,7 @@ This is the "plural harnesses / transport-agnostic" intent of
 ```ts
 interface CuaExecutor {
   observe(): Promise<CuaObservation>;   // capture current state
-  execute(action: CuaAction): Promise<void>; // perform one action
+  execute(action: CuaAction, signal?: AbortSignal): Promise<void>; // perform one action
 }
 
 interface CuaObservation {
@@ -38,6 +38,15 @@ interface CuaObservation {
 }
 ```
 
+The loop aborts an action's optional signal when its wait ends, including cancellation or a
+deadline. An executor that prepares asynchronously should check the signal before dispatching
+an input; wrappers must forward it (`execute: (...args) => inner.execute(...args)`). Existing
+one-argument executors remain compatible. This does not cancel already-dispatched substrate
+operations. The desktop executor uses this boundary while reading the current cursor before
+left/double clicks: an exact integer match avoids redundant movement; uncertain or fractional
+coordinates retain the original SDK path. The cursor read adds at most 500 ms of preparation
+wait and does not cache a previous action's position.
+
 - **`screenshot` is optional.** A non-vision (state) executor omits it. The loop
   persists no screenshot that turn; `counts.screenshots` stays 0, so the trace's
   `redaction.screenshots` resolves to `"n/a"`. No fabricated `Buffer.alloc(0)`

package/docs/architecture/terminal-product-lane.md

@@ -37,6 +37,8 @@ fail-closed cross-validation, and forward-declared warnings.
 | `execution.target` | `e2b-terminal` (or absent → implied) |
 | `execution.terminal` | `{ transport: exec-stream, stdin: disabled }` |
 | `execution.runtimeAuth` | `openai-env` (default) or opt-in `openai-egress`; names-only durable evidence |
+| `execution.runtime.version` | Optional exact `@openai/codex` version; observed before keyed execution |
+| `actors[0].model` / `reasoningEffort` | Forwarded to Codex; retained as declarations, not observed provider identity |
 | `scenario.caps` | `{ maxUsd, maxJobs, maxMinutes }` — the blast-radius budget |
 | `policies` | `allowPrivateRepoAccess` / `allowProviderCredentials` / `allowPaymentCredentials` / `allowGitHubMutation`, all DEFAULT FALSE |
 | `actors[0].type` | `codex-exec` — a registered terminal actor (`keyPlacement: in-sandbox-command-scoped`) |
@@ -46,6 +48,39 @@ Routing is `routesToTerminalProduct(config)` — the single source of truth that
 both `selectLabBackend` and the forward-declared-warning logic consume, mirroring
 `routesToComputerUse` / `routesToScriptedBrowser`.
 
+## Repeating a terminal study with the same runtime
+
+```yaml
+actors:
+  - type: codex-exec
+    model: gpt-5.6-sol
+    reasoningEffort: low
+execution:
+  target: e2b-terminal
+  runtime:
+    version: 0.153.3
+```
+
+An explicit version must be exact semver; tags, ranges, URLs, and extra runtime
+fields fail at parsing. Before the keyed actor command, Humanish runs an unkeyed
+`npx @openai/codex@<selector> --version` command with a 60-second deadline.
+A malformed result, nonzero exit, or requested/observed mismatch fails the lane
+and reclaims its owned sandbox. When the version is omitted, the probe resolves
+`latest` once and execution uses the exact version it reported.
+
+`actor.json`, the bundle's terminal actor, and `terminal-ledgers.json` retain
+`humanish.actor-runtime.v1`: requested and observed versions, verification status,
+declared model/effort, and the usage granularity. The observed executable version
+also appears as `providerVersion`. An undeclared model stays explicitly
+`runtime_default_unobserved`; Humanish does not label the runtime name as a model.
+Dry runs record declarations only, in a `terminal-lab.runtime.declared` event.
+
+These settings make a study's request reproducible, but do not attest the actual
+provider model or add a provider spending limit. Codex `turn.completed` usage can
+aggregate several model requests, so Humanish does not use a declared model to
+infer per-request pricing tiers or fill in unknown costs. Runtime-token costs
+and the studied product's no-spend boundary still need separate interpretation.
+
 ## Runtime auth: raw-key placement and remaining provider access
 
 `execution.runtimeAuth: openai-env` remains the compatible default. It supplies

package/docs/contracts/run-bundle.md

@@ -126,7 +126,11 @@ enters this field; identity is digests, a sha, a boolean, and counts.
 
 `cost` is optional and additive (`humanish.run-cost-summary.v1`): the
 computer-use lane's run-level cost ESTIMATE — the sum of each lane's
-token-derived model cost plus one aggregate E2B desktop-minute figure. It is an
+token-derived model cost plus E2B desktop compute lines. New independent CUA runs
+emit one line per owned desktop, keyed by public lane ID and carrying observed CPU/memory,
+resource source, host-measured minutes, and the derived per-second rate. Older
+single aggregate desktop lines remain valid. Missing resource metadata stays
+unpriced; unconfirmed cleanup adds an unknown remaining-lifetime line. It is an
 ESTIMATE, never authoritative: every dollar is a rate-table multiply from the
 operator-editable `src/pricing.ts`, carries the pricing `ratesAsOf` date and
 `source`, and is surfaced with the "estimated (rates as of `<date>`)" label —

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.81.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.82.1`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.
@@ -978,16 +978,16 @@ never authoritative: every dollar figure is a rate-table multiply, labeled
 `humanish.run-bundle.v1` stays v1 and every pre-existing bundle is byte-stable:
 
 - `humanish.pricing.v1` — the OPERATOR-EDITABLE rate table in `src/pricing.ts`:
-  dated per-model input/output USD-per-token rates and an E2B desktop
-  USD-per-minute rate, each with a public pricing-page `source` and an `asOf`
+  dated per-model input/output USD-per-token rates and E2B CPU/GiB-second
+  rates, each with a public pricing-page `source` and an `asOf`
   date. A prominent banner says these are estimates to update when providers
   change pricing. Model rates may carry a `cacheWriteUsdPerToken` (OpenAI 5.6+
   bills cache writes at 1.25x input as the total rate for written tokens) and a
   `longContext` tier (a per-request input threshold that re-prices the whole
   request; priced exactly only from the trace's per-request `turns` ledger —
   totals alone never re-tier, which is the under-estimate direction). Some
-  entries are `placeholder: true` stand-ins (the E2B desktop rate, pending a
-  live RAM-spec confirmation) — an operator MUST confirm them before trusting
+  entries are `placeholder: true` stand-ins (the legacy desktop helper's
+  8-vCPU/8-GiB planning assumption) — an operator MUST confirm them before trusting
   the magnitude; the flag propagates into every estimate so a stand-in is never
   mistaken for a live rate. An UNKNOWN model/desktop rate is DECLARED ABSENT
   (`estimatedCostUsd: null` + a `reason`), never guessed.
@@ -996,7 +996,14 @@ never authoritative: every dollar figure is a rate-table multiply, labeled
   `no_rate_for_model`/`no_token_usage`), `ratesAsOf`, `source`, `modelId`,
   optional `placeholder`, and a `breakdown`.
 - `humanish.run-cost-summary.v1` — `RunBundle.cost`: the sum of every lane's
-  `model-tokens` line PLUS one aggregate `desktop-minutes` line.
+  `model-tokens` lines PLUS `desktop-minutes` lines. New independent CUA runs
+  price each owned desktop separately; older single aggregate lines remain readable.
+  A desktop line's optional `desktop` object records `minutes`,
+  `durationBasis: host-acquired-to-cleanup`, observed `resources` (`cpuCount`,
+  `memoryMiB`), `resourceSource: e2b.getInfo`, and `usdPerSecond` when priceable.
+  Failed metadata reads record `resourceUnavailableReason`; no resource guess is used.
+  Resource metadata and missing/unsupported rates produce a null line. A kept or
+  unconfirmed allocation adds `desktop_lifetime_incomplete` as a second null line.
 
 The summary follows the SAME null discipline as the terminal cost ledger above.
 `estimatedTotalUsd` sums ONLY the non-null `breakdown` lines and is `null` iff
@@ -1008,8 +1015,10 @@ tried and could not price it) and contributes nothing. `fullyEstimated` is
 the MIN (oldest) `asOf` across contributing rates — an aggregate is only as fresh
 as its stalest input, so MAX would overclaim freshness (each `breakdown` line
 keeps its own true `asOf`). `desktopMinutes` is a HOST-SIDE
-create→teardown span — an approximation of E2B's server-side billed lifetime, so
-the desktop dollar figure is doubly an estimate.
+acquired-handle→cleanup span, excluding allocation/startup before handle acquisition.
+It approximates E2B's server-side billed lifetime. Plan fees, credits, and negotiated
+prices are excluded; unknown remaining lifetime makes `fullyEstimated` false.
+Shared-world, scripted-browser, and terminal routes do not yet emit these desktop lines.
 
 ```yaml
 schema: humanish.run-cost-summary.v1

package/docs/goals/current.md

@@ -29,7 +29,7 @@ study completed, reproduced, and produced a real accessibility finding via a
 keyboard-first participant
 ([docs/goals/email-gated-signup/receipts/](email-gated-signup/receipts/)).
 
-## Current Program Truth (source `0.81.0`)
+## Current Program Truth (source `0.82.1`)
 
 The package source and repository implementation in this tree agree on these
 points:
@@ -471,6 +471,29 @@ Stop and correct course if:
 
 ## Best Next Work
 
+**2026-09-05 (0.82.1).** Computer-use actors now preserve a provider output-limit
+interruption as incomplete instead of treating a response without actions as
+success. Two captured live Responses API shapes reproduce the old false pass
+and verify the correction; other explicit non-completed statuses also fail
+closed. Usage and partial text remain in the run, with no execution of actions
+from an interrupted response. See the [provider-limit receipt](computer-use-actor/receipts/provider-token-limit-2026-09-05.md).
+
+**2026-09-05 (0.82.0).** Computer-use desktop estimates now use observed CPU and RAM,
+with missing resources and incomplete lifetimes left unknown (#687). Repeated clicks avoid
+the redundant cursor move when a fresh position check confirms the pointer is already there
+(#685). Terminal studies accept an exact Codex package version and forward the declared model
+and reasoning effort; evidence records the executed version without presenting runtime defaults
+as observed model usage (#688). Local-path redaction preserves nested terminal JSON framing,
+and the release report reader exposes skipped malformed lines (#686). Observer cards and reports
+show typed participant blockers as Blocked while retaining the original protocol trace (#691).
+
+The new [TodoMVC comparison](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/todomvc-edit-confirmation-2026-09-05.md)
+connects a keyboard blocker to a reproducible local patch: uninterrupted keyboard completion was
+0/2 before and 2/2 after, with one provider interruption in each version retained in the twelve
+attempts. This descriptive synthetic comparison does not establish human completion rates.
+The public field notes and shorter reference-linked README make the method easier to inspect
+(#673, #682, #689).
+
 **2026-09-05 (0.81.0).** First use now distinguishes the free evidence preview
 from a live participant study, with concise successful setup output and complete JSON details
 (#660). The website has runnable docs and a generated CLI reference (#661, #668). Retained participant

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.81.0` (2026-09-05). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.82.1` (2026-09-05). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.81.0",
+  "version": "0.82.1",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [