humanish 0.85.1 → 0.86.1

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.85.1`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.86.1`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -29,11 +29,15 @@ study completed, reproduced, and produced a real accessibility finding via a
 keyboard-first participant
 ([docs/goals/email-gated-signup/receipts/](email-gated-signup/receipts/)).
 
-## Current Program Truth (source `0.85.1`)
+## Current Program Truth (source `0.86.1`)
 
 The package source and repository implementation in this tree agree on these
 points:
 
+**Declared tasks and saved recordings, 2026-09-09 (#737, #738).** Task declarations now fail preflight when the execution path cannot consume them, before hooks, processes or paid allocation. Portable HTML exports stay saved recordings over HTTP, including snapshots captured while a participant was running. Ordinary served runs still report real update failures. See the [0.86.1 release note](../release/0.86.1-task-preflight-saved-recordings.md).
+
+**Participant evidence context, 2026-09-09 (#733).** New runs preserve each participant's authored mission and lane focus. The Observer distinguishes individual actions within a capture interval, including links and saved moments, and labels the capture's time relative to the action. Supported desktop SDK startup cleanup shares a bounded result between SDK-internal cleanup and Humanish's fallback (#734). See the [0.86.0 release note](../release/0.86.0-participant-evidence.md).
+
 **Observer review continuity, 2026-09-09 (#731).** The run library opens during player/comparison review. Comparison frames link into the player and return to the saved alignment and cursor; participant names stay consistent. Explicit thinking filters reveal narration, and run/setup notices remain inspectable separately from frame-linked findings. See the [0.85.1 release note](../release/0.85.1-observer-continuity.md).
 
 **Observer watching and review, 2026-09-09 (#723, #724, #726, #728).** Grid previews preserve complete screens at a shared height, with compact captions and controls below the evidence. Run activity, live viewing, recorded replay and update freshness are distinct. Seeking, refresh and incoming captures preserve the selected viewing intent. The player adds elapsed-time review, zoom, saved moments and participant/cross-run comparison. The built TUI and observe serve existing evidence; exports contain no runtime desktop grants. See the [0.85.0 release note](../release/0.85.0-observer-review.md) for capabilities, acceptance evidence and limits.

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.85.1` (2026-09-09). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.86.1` (2026-09-09). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until
@@ -47,6 +47,15 @@ If a change does not improve one of those loops, it probably belongs elsewhere.
 
 ## Current State
 
+The [0.86.1 release note](../release/0.86.1-task-preflight-saved-recordings.md)
+describes task preflight on unsupported execution paths and saved HTML recordings
+that remain snapshots when served over HTTP.
+
+The [0.86.0 release note](../release/0.86.0-participant-evidence.md) describes
+participant assignments, action-specific replay links and bounded cleanup with
+the current desktop SDK. Old runs without assignment fields remain readable;
+the Observer labels that absence instead of borrowing another participant's goal.
+
 Humanish has a working public package shape and a safe first-run path:
 
 ```bash

package/docs/release/0.86.0-participant-evidence.md

@@ -0,0 +1,50 @@
+# Humanish 0.86.0: know which assignment and action you are reviewing
+
+The Observer now shows each participant's assigned mission and lane focus.
+Expand **Assigned task** in the player or participant details to read the
+instructions. Computer-use runs also include their participant-facing task
+goals. Hidden success checks and runtime access details stay outside this
+assignment. Older recordings explicitly say when an assignment was not recorded.
+
+Selecting an activity entry now selects that entry's identity, timestamp and
+coordinate pin. Two clicks between the same screenshots can be inspected
+separately. The image remains the recorded capture; its label explains whether
+its timestamp is before, after or equal to the selected entry's timestamp.
+Missing timestamps stay explicit. **Show capture interval** returns to the
+complete interval, and **Next action** visits actions within the same interval.
+
+Copied links and local saved moments retain the selected action. Saved entries
+include subsecond timestamps and their recorded order, so repeated clicks or
+keypresses remain distinguishable. A missing saved entry reports its absence.
+On phones, the player keeps the selected participant's name above the evidence.
+
+This release also supports the current `@e2b/desktop` 2.4.0 startup cleanup path.
+If startup fails after an instance is acquired, the SDK's internal kill and
+Humanish's fallback share one cleanup result bounded by the lower of the
+caller's request timeout and ten seconds. Unconfirmed cleanup prevents another
+allocation. Successful creation restores normal teardown behavior. Older
+supported SDKs retain their cleanup protection.
+
+Install with `npm install -g humanish@0.86.0`. Reopen an existing run with
+`humanish observe --run RUN`, or regenerate its HTML export, to update its viewer.
+Updating the viewer cannot reconstruct assignments absent from the original run.
+
+## Verification and limits
+
+The [retained study receipt](https://github.com/danielgwilson/humanish/blob/main/docs/goals/observer-qol/receipts/2026-09-09-participant-context.md)
+records the two-participant app study, actual-recording browser review and two
+hosted SDK startup-fault probes, including their incomplete outcomes and limits.
+
+Assignment tests cover computer-use, shared-world and terminal producers,
+including redaction, old bundles and hidden-field exclusion. Shared-world and
+terminal routes retain their mission and role instructions; they do not expose
+unexecuted manifest tasks as participant assignments. Browser checks cover
+action selection, refresh, save/recall and phone context in the production
+artifact. SDK conformance uses the actual installed create/start implementation
+with controlled method faults on the current, older and minimum supported peers.
+
+Screenshot replay remains sparse. This change does not add continuous video,
+infer participant thoughts, or certify physical mobile input. A cleanup deadline
+does not establish ownership before the SDK returns a handle or prove provider
+reclamation after an unconfirmed response. Saved moments remain local to the
+browser.

package/docs/release/0.86.1-task-preflight-saved-recordings.md

@@ -0,0 +1,40 @@
+# Humanish 0.86.1: enforce declared tasks and preserve saved recordings
+
+Humanish now refuses a task protocol when the chosen execution path cannot run
+it. Previously, a shared-world, terminal, scripted or synthetic lab could accept
+`actors[0].tasks` and then omit those tasks during execution. Preflight now names
+the unsupported field before creating a run or starting hooks, processes,
+desktops or model requests. Remove `tasks` only when you intend a mission-only
+study, or choose a supported per-lane computer-use route.
+
+The same check protects direct library callers. Per-lane computer-use tasks
+remain supported, including `local-agent`, `local-app` and `desktop-cli` paths.
+Tasks on a second or later actor are rejected because current runners consume
+the first actor. The [support matrix](../architecture/task-protocol-support.md)
+describes the execution boundaries and structured errors.
+
+Portable HTML exports now identify themselves as **Saved recording**, including
+when opened from a website. They do not request a live feed, show a retry warning
+for a missing endpoint, or open a desktop preview from a recording captured
+while the participant was running. Recorded outcomes, timestamps and images
+remain intact. Ordinary `humanish observe` and `humanish serve` pages still
+request updates and report real connection failures.
+
+Install with `npm install -g humanish@0.86.1`. Regenerate an existing export with
+`humanish export --run RUN --format html` to use the corrected viewer. Existing
+HTML files keep the behavior of the version that produced them.
+
+## Verification and limits
+
+The task preflight proof exercises unsupported lab shapes through the compiled
+CLI with provider, network and subprocess operations denied. Parser and direct
+runner tests also cover supported CUA paths and mission-only execution. These
+are refusal and compatibility checks; they do not establish task support in
+the rejected engines.
+
+Production browser checks use a retained real recording over HTTP and from a
+local file at desktop and phone widths. Controls cover ordinary served pages,
+legacy exports and a snapshot captured while running. Snapshot checks verify
+that no feed, history or live desktop request occurs; served controls preserve
+the visible connection failure. No run-data schema or original study result
+changes, and this release adds no continuous video or physical-device proof.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.85.1",
+  "version": "0.86.1",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [
@@ -50,8 +50,9 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && pnpm --filter humanish-observer build && pnpm --filter humanish-tui build && node scripts/finish-build.mjs",
-    "check": "pnpm typecheck && pnpm test && pnpm tui:test && pnpm build && pnpm cli:startup:test && pnpm tui:smoke",
+    "check": "pnpm typecheck && pnpm test && pnpm tui:test && pnpm build && pnpm cli:startup:test && pnpm cli:preflight:test && pnpm tui:smoke",
     "cli:startup:test": "node scripts/terminal-startup-exit-proof.mjs",
+    "cli:preflight:test": "node scripts/task-route-preflight-proof.mjs",
     "humanish": "tsx src/cli.ts",
     "pack:dry-run": "npm pack --dry-run",
     "prepack": "pnpm build",
@@ -108,7 +109,7 @@
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.0",
-    "@e2b/desktop": "^2.3.3",
+    "@e2b/desktop": "^2.4.0",
     "@types/node": "^20.19.41",
     "@types/pngjs": "^6.0.5",
     "tsx": "^4.22.4",