humanish 0.83.0 → 0.83.1

package/docs/architecture/terminal-product-lane.md

@@ -182,6 +182,14 @@ unsupported architectures, a failed download or checksum, and a failed runtime
 check stop the lane before Codex. Downloads have finite connection, transfer, and
 retry bounds within the existing five-minute bootstrap deadline.
 
+The `desktop-cli` computer-use route uses this same Node/npm prerequisite when
+`subject.product.install` is omitted or declares a Node command. With install
+omitted, the participant arrives at an open terminal with Node/npm available;
+the product remains uninstalled for them to discover and install from its public
+surfaces. Runtime setup runs unkeyed and a failed bootstrap stops before the
+participant starts. A declared non-Node install keeps its existing runtime
+behavior. The desktop route retains its ten-minute runtime step deadline.
+
 ## The original command-scoped safety contract
 
 The default mode **inverts** the credential-placement default of every other E2B route.

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.83.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.83.1`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -1,6 +1,6 @@
 # Current Goals
 
-Status date: 2026-09-06 (rev 19)
+Status date: 2026-09-06 (rev 20)
 
 This page is the current public-safe operating goal for `humanish`. Keep it
 short enough to reread before a coding session and concrete enough that future
@@ -29,7 +29,7 @@ study completed, reproduced, and produced a real accessibility finding via a
 keyboard-first participant
 ([docs/goals/email-gated-signup/receipts/](email-gated-signup/receipts/)).
 
-## Current Program Truth (source `0.83.0`)
+## Current Program Truth (source `0.83.1`)
 
 The package source and repository implementation in this tree agree on these
 points:
@@ -50,7 +50,7 @@ The immutable 2026-06-10 proof-roadmap packet is paired with a
 | Actor execution | Six first-party registry descriptors; computer-use, scripted-browser, and terminal-product dispatch paths. `0.55.0` makes reasoning effort declarable per actor and per lane and records the resolved value on the trace (`humanish.model-settings.v1`) — it had been reachable in the provider and unreachable from a lab, so every prior run silently took the provider default | Public out-of-tree actor registration and conformance certification |
 | Persona scale | Bounded per-lane-world fan-out, including differentiated lanes and roster expansion; kept deterministic and live receipts | A completed first-party deletion branch that replaces a bespoke generic harness |
 | Shared state | Sequential and concurrent single-origin shared-world execution; sequential has deterministic proof, concurrent has deterministic and kept live proof | Multi-origin shared-world runtime/schema support; real-adopter deletion proof |
-| Subject sources/routes | Six declared sources: `this-repo`, `clone`, `app-url`, `local-app`, `terminal-product`, and `local-tree`; support is route-specific and `this-repo` remains dry-run-only | One centralized run/resource lifecycle boundary across all routes |
+| Subject sources/routes | Seven declared sources: `this-repo`, `clone`, `app-url`, `local-app`, `terminal-product`, `desktop-cli`, and `local-tree`; support is route-specific and `this-repo` remains dry-run-only | One centralized run/resource lifecycle boundary across all routes |
 | Public proof | A legible four-persona Observer hero from a verified real public-application study (commit-pinned drawDB) shipped in the npm payload (`0.16.0`) | Coverage beyond a single studied subject; the stratified breadth panel remains unbuilt |
 | OSS meta-lab | Dry-run contract and separate disposable smoke harness | Live meta-lab execution; disabled until repository instructions and actor credentials have an isolated boundary |
 | Observer serving | `watch`/`observe` loopback servers plus `serve` — the run-library surface with loopback default, capability-link exposure, `share_ready`-gated open mode, and optional operator-run tunnel; streams never served remotely | A remote live-stream (`--live-streams`) design; a persistent capability-link store |
@@ -471,6 +471,23 @@ Stop and correct course if:
 
 ## Best Next Work
 
+**2026-09-06 (0.83.1).** Desktop CLI studies without a declared product install
+now prepare Node/npm before participant entry, while leaving the product
+uninstalled. Two real stock desktops began without the runtime and reached the
+entry hook with Node/npm/npx available in ordinary and sudo shells. The hook
+then stopped deliberately without starting a participant or model. See the
+[runtime conformance receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/desktop-cli-runtime-2026-09-06.md).
+
+Terminal startup failures preserve confirmed cleanup from the desktop startup
+guard. An existing empty terminal event log is valid only when both embedded
+and retained terminal traces declare zero events. Unknown cleanup stays
+unproven, and a failed startup remains a failed run. The compiled CLI regression
+checks verified failure evidence and natural process exit using the installed
+SDK's debug constructor with network access blocked. Two hosted startup-fault
+controls also verified failed bundles, prompt natural exit and exact sandbox
+absence with real provider transports. See the
+[startup evidence receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/computer-use-actor/receipts/terminal-startup-evidence-2026-09-06.md).
+
 **2026-09-06 (0.83.0).** First-party OpenAI computer-use actors accept
 an optional per-response `maxOutputTokens` setting. Two independent lanes and two
 sequential shared-world roles forwarded the declared limit in real requests; all
@@ -646,9 +663,10 @@ are available; the documentation gap from #513 is closed.
 Remaining engineering work includes:
 
 - #581: #665 already reclaims acquired desktop instances when startup fails,
-  and #666 handles detached screenshot cleanup errors. Remaining boundaries are
-  allocation ambiguity before instance acquisition, unconfirmed reclamation,
-  and direct proof that a failed real-SDK CLI exits promptly after its result.
+  and #666 handles detached screenshot cleanup errors. The compiled CLI now has
+  deterministic exit proof and two hosted startup-fault receipts. Remaining
+  boundaries are allocation ambiguity before instance acquisition, unconfirmed
+  reclamation, and exit behavior after other provider/network failures.
   The 2.3.3 SDK update fixed the identified background stream holder; older
   optional peers still receive an advisory, so a universal no-linger claim
   would be too broad.

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.83.0` (2026-09-06). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.83.1` (2026-09-06). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until
@@ -77,9 +77,10 @@ Implemented:
   drives a lab-owner loopback app in a hosted desktop, and `subject.source:
   clone` + `serve` clones, installs, and serves a real app in-sandbox from
   config before the actor drives it (`src/cua-actor-lab.ts`);
-- six declared subject sources: `this-repo` (dry-run-only), `clone`, `app-url`,
+- seven declared subject sources: `this-repo` (dry-run-only), `clone`, `app-url`,
   `local-app` (library-assisted, in-process, no desktop), `terminal-product`,
-  and `local-tree`; each route fails closed on unsupported combinations;
+  `desktop-cli` (computer-use participant at a terminal), and `local-tree`;
+  each route fails closed on unsupported combinations;
 - bounded per-lane-world fan-out (`actors[0].count`, `lanes[]`, or `roster[]`),
   backed by deterministic and kept live proof;
 - sequential/concurrent single-origin shared-world execution: sequential has

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.83.0",
+  "version": "0.83.1",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [
@@ -50,7 +50,8 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && pnpm --filter humanish-observer build && pnpm --filter humanish-tui build && node scripts/finish-build.mjs",
-    "check": "pnpm typecheck && pnpm test && pnpm tui:test && pnpm build && pnpm tui:smoke",
+    "check": "pnpm typecheck && pnpm test && pnpm tui:test && pnpm build && pnpm cli:startup:test && pnpm tui:smoke",
+    "cli:startup:test": "node scripts/terminal-startup-exit-proof.mjs",
     "humanish": "tsx src/cli.ts",
     "pack:dry-run": "npm pack --dry-run",
     "prepack": "pnpm build",