humanish 0.96.0 → 0.96.1

package/docs/contracts/run-bundle.md

@@ -154,14 +154,17 @@ different facts separate:
   it did not: a `mobile` (414) and a `small-mobile` (360) seat both render at 500 and are
   indistinguishable by rendered width;
 - `browserWindow`: measured browser bounds after the window-fill attempt; physical X client
-  bounds (`source: xdotool`) take precedence over page-reported outer bounds (`source: cdp`),
-  which can reflect mobile emulation;
+  bounds (`source: xwininfo`) take precedence over page-reported outer bounds (`source: cdp`),
+  which can reflect mobile emulation. Historical `source: xdotool` bundles remain readable;
+  older xdotool versions can double-count decorations in reported coordinates;
 - `viewport`: the page's CSS layout viewport and device-pixel ratio measured through CDP on
   Chromium-family hosted browsers.
 
 Before participant actions, hosted computer-use lanes check measured X bounds against every
-edge of the captured desktop. If a browser is clipped, one bounded move-and-fit correction
-accounts for the window manager's client origin. A window that remains clipped, or whose repair
+edge of the captured desktop. If a browser is clipped, a bounded move-and-fit correction
+remeasures the client origin after each of up to two resize attempts, preserving browser
+controls when they fit. A fullscreen fallback remains for minimum-width windows that cannot
+fit a narrow desktop. A window that remains clipped, or whose repair
 cannot be verified, ends the lane before participant actions. A fully contained smaller window
 can run. Missing X measurements are explicitly unverified; an emulated CSS viewport cannot
 establish physical containment. Final capture observes geometry without resizing the app.

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.96.0`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.96.1`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -1,9 +1,9 @@
 # Current Goals
 
-Status date: 2026-09-21. Release baseline: `0.96.0`.
+Status date: 2026-09-21. Release baseline: `0.96.1`.
 
 This page guides work on current merged source. Published behavior is described
-in the [release notes](../release/0.96.0-real-email-receiving.md).
+in the [release notes](../release/0.96.1-browser-navigation.md).
 The [September 9 history](https://github.com/danielgwilson/humanish/blob/main/docs/goals/current-history-2026-09-09.md)
 preserves the former status log; its queues do not supersede this page.
 
@@ -88,7 +88,7 @@ requires decision-equivalent retained evidence and a real deletion branch.
 No first-party deletion branch has met that gate. Public demonstrations do not
 substitute for it.
 
-## Current Program Truth (source `0.96.0`)
+## Current Program Truth (source `0.96.1`)
 
 | Surface | Available in merged source | Remaining boundary |
 | --- | --- | --- |

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.96.0` (2026-09-21). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.96.1` (2026-09-21). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until
@@ -47,6 +47,10 @@ If a change does not improve one of those loops, it probably belongs elsewhere.
 
 ## Current State
 
+The [0.96.1 release note](../release/0.96.1-browser-navigation.md) describes
+accurate physical browser measurements and bounded fitting that preserves normal
+browser controls when they fit. Narrow screens retain the fullscreen fallback.
+
 The [0.96.0 release note](../release/0.96.0-real-email-receiving.md) describes
 fresh per-participant AgentMail inboxes, isolated desktop mail views, host-owned
 cleanup/recovery, local-only evidence publication, and authentication/configuration

package/docs/release/0.96.1-browser-navigation.md

@@ -0,0 +1,22 @@
+# 0.96.1 — Preserve browser navigation
+
+Hosted browser studies now measure physical client bounds with `xwininfo`.
+The older `xdotool` build on hosted desktops can count window decorations twice,
+incorrectly reporting that a visible browser extends beyond the captured screen.
+That false reading could trigger fullscreen, hiding the tabs and address bar
+participants use to move between an application and their study inbox.
+
+The fitting step now remeasures the actual client origin after resizing and
+allows a second bounded adjustment when the window manager restores decorations.
+Normal browser controls remain visible when they fit. Narrow desktops retain
+the fullscreen fallback when a minimum-width browser cannot otherwise fit.
+
+New recordings identify the physical measurement as `source: xwininfo`.
+Historical `xdotool` and `cdp` geometry remains readable. Missing physical reads
+remain unverified; an emulated CSS viewport cannot establish screen containment.
+Final geometry capture still observes without moving or resizing the browser.
+
+Regression coverage includes a sanitized hosted-desktop measurement, ambiguous
+or missing geometry, decoration changes during resizing, narrow-screen fallback,
+and saved-run compatibility. This does not change inbox delivery or participant
+instructions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.96.0",
+  "version": "0.96.1",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [