humanish 0.95.0 → 0.96.0

package/dist/run-narration-secrets.d.ts

@@ -0,0 +1,5 @@
+/** Enclose both participant execution and its automatic analysis in one scope. Nested runs isolate too. */
+export declare function withTransientCommsSecrets<T>(work: () => Promise<T>): Promise<T>;
+export declare function registerTransientCommsSecrets(values: string[]): void;
+/** Literal, longest-first replacement in one pass; replacement text is never matched recursively. */
+export declare function scrubTransientCommsText(text: string): string;

package/dist/run-narration-secrets.js

@@ -0,0 +1,68 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const scopes = new AsyncLocalStorage();
+const MAX_VALUES = 8192;
+const MAX_BYTES = 1024 * 1024;
+const MAX_VALUE_BYTES = 65_536;
+function usable(scope) {
+    if (scope.closed)
+        throw new Error("TRANSIENT_NARRATION_SCOPE_CLOSED");
+    if (scope.failed)
+        throw new Error("TRANSIENT_NARRATION_SECRET_LIMIT");
+}
+function fail(scope) {
+    scope.failed = true;
+    scope.values.clear();
+    delete scope.pattern;
+    throw new Error("TRANSIENT_NARRATION_SECRET_LIMIT");
+}
+/** Enclose both participant execution and its automatic analysis in one scope. Nested runs isolate too. */
+export async function withTransientCommsSecrets(work) {
+    const scope = { values: new Set(), bytes: 0, closed: false, failed: false };
+    try {
+        return await scopes.run(scope, work);
+    }
+    finally {
+        // Detached work can retain an async context after return. Clear its values and refuse future
+        // scrubbing/registration there; never turn an expired scope into an unprotected analysis.
+        scope.closed = true;
+        scope.values.clear();
+        scope.bytes = 0;
+        delete scope.pattern;
+    }
+}
+export function registerTransientCommsSecrets(values) {
+    const scope = scopes.getStore();
+    if (!scope)
+        return;
+    usable(scope);
+    for (const value of values) {
+        // Match the existing narration registry: short subjects such as "Hi" are ordinary prose.
+        // Received OTP extraction starts at four characters; management keys and addresses are longer.
+        if (value.length < 4 || scope.values.has(value))
+            continue;
+        const bytes = Buffer.byteLength(value);
+        if (bytes > MAX_VALUE_BYTES || scope.values.size >= MAX_VALUES || scope.bytes + bytes > MAX_BYTES)
+            fail(scope);
+        scope.values.add(value);
+        scope.bytes += bytes;
+        delete scope.pattern;
+    }
+}
+/** Literal, longest-first replacement in one pass; replacement text is never matched recursively. */
+export function scrubTransientCommsText(text) {
+    const scope = scopes.getStore();
+    if (!scope)
+        return text;
+    usable(scope);
+    if (!scope.values.size)
+        return text;
+    try {
+        scope.pattern ??= new RegExp([...scope.values].sort((a, b) => b.length - a.length)
+            .map(value => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|"), "g");
+        return text.replace(scope.pattern, "[REDACTED_SECRET]");
+    }
+    catch {
+        return fail(scope);
+    }
+}
+//# sourceMappingURL=run-narration-secrets.js.map

package/dist/run-narration-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-narration-secrets.js","sourceRoot":"","sources":["../src/run-narration-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAe,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9B,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,SAAS,MAAM,CAAC,KAAkB;IAChC,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACxE,CAAC;AACD,SAAS,IAAI,CAAC,KAAkB;IAC9B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC,OAAO,CAAC;IACrB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtD,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAI,IAAsB;IACvE,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzF,IAAI,CAAC;QAAC,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;YACrC,CAAC;QACP,6FAA6F;QAC7F,0FAA0F;QAC1F,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAChB,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAgB;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,yFAAyF;QACzF,+FAA+F;QAC/F,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,GAAG,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/G,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACrB,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,CAAC,OAAO,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;aAC/E,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC"}

package/dist/run.d.ts

@@ -1,3 +1,4 @@
+import type { CommsReceivingEvidence } from "./comms-receiving-types.js";
 import { type CodexAppServerTrace } from "./codex-app-server.js";
 import { type ActorStatus, type ActorTrace, type ActorTraceItem } from "./actor-contract.js";
 import { type CuaGoalSource } from "./actor-goal-source.js";
@@ -715,6 +716,10 @@ export interface SharedWorldEvidence {
     outcomes?: SharedWorldOutcome[];
 }
 export interface RunBundle {
+    publication?: {
+        restrictions: ["real-communications"];
+    };
+    commsReceiving?: CommsReceivingEvidence;
     schema: typeof RUN_BUNDLE_SCHEMA;
     runId: string;
     mode: "dry-run" | "live";
@@ -1065,7 +1070,7 @@ export interface RunResult {
     latestPath?: string;
     warnings: string[];
     error?: {
-        code: "HUMANISH_LAB_ANALYSIS_INVALID" | "HUMANISH_LAB_ANALYSIS_UNSUPPORTED" | "HUMANISH_LAB_TASKS_UNSUPPORTED" | "HUMANISH_ACTOR_FANOUT_UNIMPLEMENTED" | "HUMANISH_APP_URL_OPTION_CONFLICT" | "HUMANISH_BROWSER_APP_CAPTURE_FAILED" | "HUMANISH_CODEX_APP_SERVER_FAILED" | "HUMANISH_LIVE_RUN_UNIMPLEMENTED" | "HUMANISH_LOCAL_CODEX_EXEC_FAILED" | "HUMANISH_LOCAL_CODEX_TUI_FAILED" | "HUMANISH_INVALID_APP_URL" | "HUMANISH_INVALID_ACTOR_CONCURRENCY" | "HUMANISH_INVALID_CWD" | "HUMANISH_INVALID_SIM_COUNT" | "HUMANISH_INVALID_TIMEOUT" | "HUMANISH_INVALID_PORT" | "HUMANISH_UNSUPPORTED_ACTOR" | "HUMANISH_UNSUPPORTED_RERUN_FLAGS" | "HUMANISH_WATCH_OPTION_CONFLICT" | "HUMANISH_LAB_SCORER_BAD_REF" | "HUMANISH_LAB_SCORER_NOT_FOUND" | "HUMANISH_LAB_SCORER_LOAD_FAILED" | "HUMANISH_LAB_SCORER_NO_HOOKS" | "HUMANISH_LAB_SCORER_UNSUPPORTED_BACKEND";
+        code: "HUMANISH_LAB_ANALYSIS_INVALID" | "HUMANISH_LAB_ANALYSIS_UNSUPPORTED" | "HUMANISH_LAB_TASKS_UNSUPPORTED" | "HUMANISH_LAB_COMMS_UNSUPPORTED" | "HUMANISH_ACTOR_FANOUT_UNIMPLEMENTED" | "HUMANISH_APP_URL_OPTION_CONFLICT" | "HUMANISH_BROWSER_APP_CAPTURE_FAILED" | "HUMANISH_CODEX_APP_SERVER_FAILED" | "HUMANISH_LIVE_RUN_UNIMPLEMENTED" | "HUMANISH_LOCAL_CODEX_EXEC_FAILED" | "HUMANISH_LOCAL_CODEX_TUI_FAILED" | "HUMANISH_INVALID_APP_URL" | "HUMANISH_INVALID_ACTOR_CONCURRENCY" | "HUMANISH_INVALID_CWD" | "HUMANISH_INVALID_SIM_COUNT" | "HUMANISH_INVALID_TIMEOUT" | "HUMANISH_INVALID_PORT" | "HUMANISH_UNSUPPORTED_ACTOR" | "HUMANISH_UNSUPPORTED_RERUN_FLAGS" | "HUMANISH_WATCH_OPTION_CONFLICT" | "HUMANISH_LAB_SCORER_BAD_REF" | "HUMANISH_LAB_SCORER_NOT_FOUND" | "HUMANISH_LAB_SCORER_LOAD_FAILED" | "HUMANISH_LAB_SCORER_NO_HOOKS" | "HUMANISH_LAB_SCORER_UNSUPPORTED_BACKEND";
         message: string;
     };
 }
@@ -1085,7 +1090,7 @@ export interface VerifyResult {
     shareSafety: {
         status: "share_ready" | "local_only" | "blocked";
         reasons: Array<{
-            code: "VERIFY_FAILED" | "PUBLIC_SAFETY_FINDINGS" | "ANALYSIS_UNVERIFIED" | "RAW_SCREENSHOTS";
+            code: "VERIFY_FAILED" | "PUBLIC_SAFETY_FINDINGS" | "ANALYSIS_UNVERIFIED" | "RAW_SCREENSHOTS" | "REAL_COMMUNICATIONS";
             message: string;
         }>;
     };

package/dist/run.js

@@ -1,3 +1,4 @@
+import { isCommsReceivingEvidence } from "./comms-receiving-evidence.js";
 import { randomUUID } from "node:crypto";
 import { spawn } from "node:child_process";
 import { lstat, readdir, readFile, realpath, stat } from "node:fs/promises";
@@ -3158,7 +3159,19 @@ export async function doctor(cwdInput, options = {}) {
     };
     const env = options.env ?? process.env;
     const agents = await detectLocalAgents({ ...options.localAgents, env });
-    const probes = await probeKeySources(["OPENAI_API_KEY", "E2B_API_KEY", "GH_TOKEN", "CODEX_API_KEY"], { cwd, env });
+    const keyNames = new Set(["OPENAI_API_KEY", "E2B_API_KEY", "GH_TOKEN", "CODEX_API_KEY"]);
+    let receivingKey = null;
+    if (options.lab) {
+        const { resolveLabManifest } = await import("./labs.js");
+        const resolved = await resolveLabManifest(cwd, options.lab);
+        if (resolved.ok && resolved.config.comms?.email?.kind === "real") {
+            const { receivingRequiredKey } = await import("./comms-setup.js");
+            receivingKey = await receivingRequiredKey(cwd, resolved.config.comms.email.connection);
+            if (receivingKey)
+                keyNames.add(receivingKey);
+        }
+    }
+    const probes = await probeKeySources([...keyNames], { cwd, env });
     const setup = options.lab ? await labSetupChecks({ cwd, lab: options.lab, env, agents,
         keyPresent: name => probes.some(probe => probe.name === name && probe.source !== null) }) : undefined;
     const checks = [
@@ -3255,6 +3268,9 @@ export async function doctor(cwdInput, options = {}) {
         ...await (async () => {
             return probes.map((probe) => {
                 const present = probe.source !== null;
+                const hint = probe.name === receivingKey
+                    ? `provide ${probe.name} through process env or --env-file`
+                    : probe.hint;
                 // GH_TOKEN is needed only for private clone subjects, so its absence is informational.
                 const required = setup ? setup.keys.includes(probe.name) : probe.name === "E2B_API_KEY"
                     || probe.name === "OPENAI_API_KEY" && !agents.some(agent => agent.authStatus === "authenticated");
@@ -3264,8 +3280,8 @@ export async function doctor(cwdInput, options = {}) {
                     message: present
                         ? `supplied by ${probe.source}; presence only, validity not tested`
                         : required
-                            ? `missing from every source — ${probe.hint}`
-                            : `not required for ${setup ? "the selected participant route" : "every route"}; ${probe.hint}`
+                            ? `missing from every source — ${hint}`
+                            : `not required for ${setup ? "the selected participant route" : "every route"}; ${hint}`
                 };
             });
         })(),
@@ -4170,6 +4186,9 @@ function buildShareSafety(args) {
             message: "Text artifacts or public-proof paths matched known secret, token, local-path, browser-profile, or hosted-substrate URL patterns."
         });
     }
+    if (args.bundle.publication !== undefined || args.bundle.commsReceiving !== undefined) {
+        reasons.push({ code: "REAL_COMMUNICATIONS", message: "This study used real email. Message content may appear in recordings, narration or analysis. Local review is supported; screenshot blurring does not make it public-safe." });
+    }
     const rawStreamIds = rawScreenshotStreamIds(args.bundle);
     if (rawStreamIds.length > 0) {
         reasons.push({
@@ -5186,6 +5205,9 @@ function redactSensitiveText(text) {
 function isRunBundle(value) {
     return isRecord(value)
         && value.schema === RUN_BUNDLE_SCHEMA
+        && (value.commsReceiving === undefined || isCommsReceivingEvidence(value.commsReceiving))
+        && (value.publication === undefined || (isRecord(value.publication) && Array.isArray(value.publication.restrictions)
+            && value.publication.restrictions.length === 1 && value.publication.restrictions[0] === "real-communications"))
         && typeof value.runId === "string"
         && (value.mode === "dry-run" || value.mode === "live")
         && isPositiveSafeInteger(value.simCount)