humanish 0.104.3 → 0.106.0

package/dist/actor-stop-cause.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"actor-stop-cause.js","sourceRoot":"","sources":["../src/actor-stop-cause.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,GAAyC;IACnD,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,uBAAuB;IACpC,iBAAiB,EAAE,mBAAmB;IACtC,aAAa,EAAE,yBAAyB;IACxC,gBAAgB,EAAE,4BAA4B;IAC9C,mBAAmB,EAAE,8BAA8B;IACnD,eAAe,EAAE,4BAA4B;IAC7C,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,eAAe;CACnC,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,KAA2B;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,KAA6B;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtI,0FAA0F;IAC1F,2FAA2F;IAC3F,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC7G,IAAI,KAAuC,CAAC;IAC5C,IAAI,KAAK,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;QAChD,KAAK,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAChG,CAAC;SAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,WAAW;QAAE,KAAK,GAAG,YAAY,CAAC;SACnE,IAAI,KAAK,CAAC,gBAAgB,KAAK,eAAe,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,8BAA8B,CAAC;YAAE,KAAK,GAAG,qBAAqB,CAAC;aACrE,IAAI,MAAM,CAAC,qCAAqC,CAAC;YAAE,KAAK,GAAG,iBAAiB,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;AACxF,CAAC"}

package/dist/adapter-extension.d.ts

@@ -1,76 +0,0 @@
-import type { RunAdapterArtifact, RunAdapterScore, RunBundle, RunFeedbackCandidate, RunScorerProvenance } from "./run.js";
-export type BrowserAdapterBackend = "cua" | "shared-world" | "concurrent-shared-world";
-/**
- * Product-agnostic scoring context for browser/computer-use lanes. Product-specific
- * evidence/rubrics stay in the adopter's repo; core provides the assembled bundle
- * plus stable run identifiers and never learns product nouns.
- */
-export interface BrowserLabScoringContext {
-    bundle: RunBundle;
-    /**
-     * Absolute path to the ignored run directory. Adapter hooks may write their
-     * own product/state proof files here, then return relative references through
-     * `deriveArtifacts`. This path is runtime-only and must never be persisted.
-     */
-    runDir: string;
-    labId: string;
-    runId: string;
-    actor: string;
-    backend: BrowserAdapterBackend;
-    dryRun: boolean;
-    laneCount: number;
-}
-export interface BrowserLabAdapterHooks {
-    /**
-     * Browser-route extension seam (#165): a thin adapter may score the assembled
-     * browser/shared-world evidence without forking core. The score is stored as
-     * namespaced `bundle.adapterScore`; product-specific component detail belongs
-     * in `data`, not in core enums or review text.
-     */
-    score?: (ctx: BrowserLabScoringContext) => RunAdapterScore | Promise<RunAdapterScore>;
-    /**
-     * Companion seam for public-safe, adapter-namespaced feedback candidates.
-     * Malformed candidates are dropped before bundle persistence so core remains
-     * verifiable even when an adapter misbehaves.
-     */
-    deriveFeedback?: (ctx: BrowserLabScoringContext) => RunFeedbackCandidate[] | Promise<RunFeedbackCandidate[]>;
-    /**
-     * Optional product/state proof artifact references. The adapter writes files
-     * under `ctx.runDir` and returns local relative paths. Core stores only the
-     * namespaced references and `verify` fails closed if referenced files are
-     * missing or nonlocal.
-     */
-    deriveArtifacts?: (ctx: BrowserLabScoringContext) => RunAdapterArtifact[] | Promise<RunAdapterArtifact[]>;
-}
-export declare function applyBrowserAdapterHooks(args: {
-    hooks: BrowserLabAdapterHooks | undefined;
-    context: BrowserLabScoringContext;
-    bundle: RunBundle;
-    sanitize: (text: string) => string;
-    warnings: string[];
-    hookLabel: string;
-    /** Present only when the scorer was CONFIG-DECLARED (#316); core-stamped onto the bundle as
-     *  evidence of which out-of-tree module was loaded. Absent for library callers. Its presence also
-     *  opts a THROWING or MALFORMED scorer into the declared-gate downgrade — a declared gate that
-     *  cannot render a pass is a fail, never a silent green. */
-    scorerProvenance?: RunScorerProvenance;
-}): Promise<{
-    declaredVerdictFailure?: string;
-}>;
-export declare function adapterScoreFailureMessage(bundle: RunBundle): string | undefined;
-export declare function applyAdapterScoreFailureToReview(bundle: RunBundle): string | undefined;
-/**
- * A CONFIG-DECLARED scorer (#316) that fails to render a PASS verdict — it returned status:"fail",
- * threw, or returned a malformed value — must never leave a silent green (the declared-gate invariant:
- * a gate that cannot render a pass is a fail, never a silent pass). Adds a review gap and downgrades a
- * would-be pass/contract_proof_only to fail (this ONLY ever makes the verdict STRICTER). Callers gate
- * on `declared`, so library callers are never affected.
- */
-export declare function recordDeclaredScorerVerdictFailure(bundle: RunBundle, reason: string): void;
-/**
- * Deep-freeze a structured clone so a loaded scorer sees a READ-ONLY bundle: it cannot mutate
- * noSpend/cost/review in place to launder a verdict (which would defeat the costProbe-not-loadable
- * guarantee). A tamper attempt throws in the scorer's strict-mode ESM and is caught as a hook failure.
- * Legitimate read-only scoring is unaffected. The seam always stamps the REAL bundle, never this view.
- */
-export declare function frozenBundleView(bundle: RunBundle): RunBundle;

package/dist/adapter-extension.js

@@ -1,273 +0,0 @@
-import path from "node:path";
-export async function applyBrowserAdapterHooks(args) {
-    const { hooks, context, bundle, sanitize, warnings, hookLabel, scorerProvenance } = args;
-    if (!hooks?.score && !hooks?.deriveFeedback && !hooks?.deriveArtifacts)
-        return {};
-    const declared = scorerProvenance !== undefined;
-    // Record the loaded scorer's identity regardless of hook outcome (a throwing/invalid scorer was
-    // still loaded and attempted). A VALID status:"fail" flips the review below via the pre-#316 (#165)
-    // path (library + declared); a DECLARED scorer that THROWS or returns MALFORMED also fails (below).
-    if (scorerProvenance)
-        bundle.scorerProvenance = scorerProvenance;
-    // The scorer sees a READ-ONLY view of the bundle: it cannot mutate noSpend/cost/review in place to
-    // launder a verdict (a tamper attempt throws in the scorer's strict-mode ESM and is caught below as
-    // a hook failure). The seam still stamps the REAL bundle.
-    const scoringContext = { ...context, bundle: frozenBundleView(context.bundle) };
-    const scrubValue = (value) => {
-        const encoded = JSON.stringify(value);
-        return encoded === undefined ? value : JSON.parse(sanitize(encoded));
-    };
-    let declaredVerdictFailure;
-    if (hooks.score) {
-        try {
-            const score = await hooks.score(scoringContext);
-            const cleaned = scrubValue(score);
-            if (isAdapterScoreShape(cleaned)) {
-                bundle.adapterScore = cleaned;
-                const message = applyAdapterScoreFailureToReview(bundle);
-                if (declared && message !== undefined)
-                    declaredVerdictFailure = message;
-            }
-            else {
-                warnings.push(`${hookLabel}.score returned a value that is not a well-formed humanish.adapter-score.v1 (non-empty namespace + status + numeric score + summary); dropped so the bundle stays verifiable.`);
-                if (declared) {
-                    declaredVerdictFailure = "Declared product scorer returned a malformed value instead of a verdict; a declared gate that cannot render a pass is recorded as a fail, never a silent pass.";
-                    recordDeclaredScorerVerdictFailure(bundle, declaredVerdictFailure);
-                }
-            }
-        }
-        catch (error) {
-            const detail = sanitize(error instanceof Error ? error.message : String(error));
-            warnings.push(`${hookLabel}.score threw (${detail}); dropped so the bundle stays verifiable.`);
-            if (declared) {
-                declaredVerdictFailure = `Declared product scorer threw before returning a verdict (${detail}); a crashed declared gate is recorded as a fail, never a silent pass.`;
-                recordDeclaredScorerVerdictFailure(bundle, declaredVerdictFailure);
-            }
-        }
-    }
-    if (hooks.deriveFeedback) {
-        try {
-            const candidates = await hooks.deriveFeedback(scoringContext);
-            const accepted = [];
-            for (const candidate of Array.isArray(candidates) ? candidates : []) {
-                const cleaned = scrubValue(candidate);
-                if (isAdapterFeedbackCandidateShape(cleaned))
-                    accepted.push(cleaned);
-                else
-                    warnings.push(`${hookLabel}.deriveFeedback returned a candidate that is not a well-formed humanish.feedback-candidate.v1 (or its adapter block lacked a non-empty namespace + data record); dropped so the bundle stays verifiable.`);
-            }
-            if (accepted.length > 0) {
-                bundle.feedbackCandidates = [...bundle.feedbackCandidates, ...accepted];
-            }
-        }
-        catch (error) {
-            warnings.push(`${hookLabel}.deriveFeedback threw (${sanitize(error instanceof Error ? error.message : String(error))}); dropped so the bundle stays verifiable.`);
-        }
-    }
-    if (hooks.deriveArtifacts) {
-        try {
-            const artifacts = await hooks.deriveArtifacts(scoringContext);
-            const accepted = [];
-            for (const artifact of Array.isArray(artifacts) ? artifacts : []) {
-                const cleaned = scrubValue(artifact);
-                if (isAdapterArtifactShape(cleaned))
-                    accepted.push(cleaned);
-                else
-                    warnings.push(`${hookLabel}.deriveArtifacts returned an artifact that is not a well-formed humanish.adapter-artifact.v1 (non-empty namespace + label + local path + supported kind); dropped so the bundle stays verifiable.`);
-            }
-            if (accepted.length > 0) {
-                bundle.adapterArtifacts = [...(bundle.adapterArtifacts ?? []), ...accepted];
-            }
-        }
-        catch (error) {
-            warnings.push(`${hookLabel}.deriveArtifacts threw (${sanitize(error instanceof Error ? error.message : String(error))}); dropped so the bundle stays verifiable.`);
-        }
-    }
-    return declaredVerdictFailure === undefined ? {} : { declaredVerdictFailure };
-}
-export function adapterScoreFailureMessage(bundle) {
-    return bundle.adapterScore?.status === "fail"
-        ? `Adapter scorer failed the run: ${bundle.adapterScore.summary}`
-        : undefined;
-}
-export function applyAdapterScoreFailureToReview(bundle) {
-    const message = adapterScoreFailureMessage(bundle);
-    if (message === undefined)
-        return undefined;
-    if (bundle.review.verdict === "pass" || bundle.review.verdict === "contract_proof_only") {
-        bundle.review.verdict = "fail";
-        bundle.review.summary = message;
-    }
-    if (!bundle.review.gaps.includes(message)) {
-        bundle.review.gaps = [...bundle.review.gaps, message];
-    }
-    return message;
-}
-/**
- * A CONFIG-DECLARED scorer (#316) that fails to render a PASS verdict — it returned status:"fail",
- * threw, or returned a malformed value — must never leave a silent green (the declared-gate invariant:
- * a gate that cannot render a pass is a fail, never a silent pass). Adds a review gap and downgrades a
- * would-be pass/contract_proof_only to fail (this ONLY ever makes the verdict STRICTER). Callers gate
- * on `declared`, so library callers are never affected.
- */
-export function recordDeclaredScorerVerdictFailure(bundle, reason) {
-    if (!bundle.review.gaps.includes(reason))
-        bundle.review.gaps = [...bundle.review.gaps, reason];
-    if (bundle.review.verdict === "pass" || bundle.review.verdict === "contract_proof_only") {
-        bundle.review.verdict = "fail";
-        bundle.review.summary = reason;
-    }
-}
-/**
- * Deep-freeze a structured clone so a loaded scorer sees a READ-ONLY bundle: it cannot mutate
- * noSpend/cost/review in place to launder a verdict (which would defeat the costProbe-not-loadable
- * guarantee). A tamper attempt throws in the scorer's strict-mode ESM and is caught as a hook failure.
- * Legitimate read-only scoring is unaffected. The seam always stamps the REAL bundle, never this view.
- */
-export function frozenBundleView(bundle) {
-    const clone = structuredClone(bundle);
-    const freeze = (obj) => {
-        if (obj !== null && typeof obj === "object" && !Object.isFrozen(obj)) {
-            Object.freeze(obj);
-            for (const key of Object.keys(obj)) {
-                freeze(obj[key]);
-            }
-        }
-    };
-    freeze(clone);
-    return clone;
-}
-function isAdapterScoreShape(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value)
-        && value.schema === "humanish.adapter-score.v1"
-        && typeof value.namespace === "string"
-        && value.namespace.trim().length > 0
-        && ["pass", "partial", "fail"].includes(value.status)
-        && typeof value.score === "number"
-        && Number.isFinite(value.score)
-        && typeof value.summary === "string"
-        && (value.data === undefined
-            || (typeof value.data === "object"
-                && value.data !== null
-                && !Array.isArray(value.data)));
-}
-function isAdapterFeedbackCandidateShape(value) {
-    if (!isRecord(value))
-        return false;
-    const candidate = value;
-    if (candidate.schema !== "humanish.feedback-candidate.v1"
-        || typeof candidate.id !== "string"
-        || typeof candidate.run_id !== "string"
-        || (candidate.stream_id !== undefined && typeof candidate.stream_id !== "string")
-        || typeof candidate.adapter_id !== "string"
-        || typeof candidate.scenario_id !== "string"
-        || typeof candidate.persona_id !== "string"
-        || !isFeedbackActor(candidate.actor)
-        || !isFeedbackSubstrate(candidate.substrate)
-        || !isFeedbackFailureOwner(candidate.failure_owner)
-        || typeof candidate.summary !== "string"
-        || candidate.summary.trim().length === 0
-        || typeof candidate.expected !== "string"
-        || typeof candidate.actual !== "string"
-        || !Array.isArray(candidate.evidence)
-        || !candidate.evidence.every(isFeedbackEvidence)
-        || !isRecord(candidate.redaction)
-        || candidate.redaction.status !== "passed"
-        || typeof candidate.redaction.notes !== "string"
-        || typeof candidate.idempotency_key !== "string"
-        || !isFeedbackNextState(candidate.proposed_next_state)
-        || !Array.isArray(candidate.acceptance_proof)
-        || !candidate.acceptance_proof.every((item) => typeof item === "string")) {
-        return false;
-    }
-    if (candidate.adapter !== undefined) {
-        const adapter = candidate.adapter;
-        if (!isRecord(adapter)
-            || typeof adapter.namespace !== "string" || adapter.namespace.trim().length === 0
-            || !isRecord(adapter.data)) {
-            return false;
-        }
-    }
-    return true;
-}
-function isAdapterArtifactShape(value) {
-    if (!isRecord(value))
-        return false;
-    const artifact = value;
-    return artifact.schema === "humanish.adapter-artifact.v1"
-        && typeof artifact.namespace === "string"
-        && artifact.namespace.trim().length > 0
-        && typeof artifact.label === "string"
-        && artifact.label.trim().length > 0
-        && typeof artifact.path === "string"
-        && isSafeRelativeArtifactPath(artifact.path)
-        && isAdapterArtifactKind(artifact.kind)
-        && typeof artifact.note === "string"
-        && artifact.note.trim().length > 0;
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isSafeRelativeArtifactPath(value) {
-    return value.trim().length > 0
-        && !path.isAbsolute(value)
-        && !value.includes("://")
-        && !value.split(/[\\/]/).some((part) => part === ".." || part === "." || part.length === 0);
-}
-function isAdapterArtifactKind(value) {
-    return value === "state"
-        || value === "review"
-        || value === "log"
-        || value === "trace"
-        || value === "screenshot"
-        || value === "filesystem"
-        || value === "summary";
-}
-function isFeedbackActor(value) {
-    return value === "codex-tui"
-        || value === "codex-exec"
-        || value === "codex-app-server"
-        || value === "computer-use"
-        || value === "synthetic-dry-run"
-        || value === "unknown";
-}
-function isFeedbackSubstrate(value) {
-    return value === "e2b-desktop"
-        || value === "local-desktop"
-        || value === "e2b-terminal"
-        || value === "local-filesystem"
-        || value === "codex-app-server"
-        || value === "unknown";
-}
-function isFeedbackFailureOwner(value) {
-    return value === "harness"
-        || value === "target-app"
-        || value === "actor"
-        || value === "environment"
-        || value === "unknown";
-}
-function isFeedbackNextState(value) {
-    return value === "watch"
-        || value === "adapter-hardening"
-        || value === "target-app-setup"
-        || value === "actor-auth"
-        || value === "setup-quality-review"
-        || value === "study-quality-review";
-}
-function isFeedbackEvidence(value) {
-    if (!isRecord(value))
-        return false;
-    return typeof value.path === "string"
-        && value.path.length > 0
-        && !path.isAbsolute(value.path)
-        && !value.path.includes("://")
-        && !value.path.includes("..")
-        && (value.kind === "review"
-            || value.kind === "state"
-            || value.kind === "log"
-            || value.kind === "trace"
-            || value.kind === "screenshot"
-            || value.kind === "filesystem")
-        && typeof value.note === "string";
-}
-//# sourceMappingURL=adapter-extension.js.map

package/dist/adapter-extension.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter-extension.js","sourceRoot":"","sources":["../src/adapter-extension.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AA2D7B,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAY9C;IACC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACzF,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,cAAc,IAAI,CAAC,KAAK,EAAE,eAAe;QAAE,OAAO,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,gBAAgB,KAAK,SAAS,CAAC;IAChD,gGAAgG;IAChG,oGAAoG;IACpG,oGAAoG;IACpG,IAAI,gBAAgB;QAAE,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAEjE,mGAAmG;IACnG,oGAAoG;IACpG,0DAA0D;IAC1D,MAAM,cAAc,GAA6B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAE1G,MAAM,UAAU,GAAG,CAAI,KAAQ,EAAK,EAAE;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAM,CAAC;IAC5E,CAAC,CAAC;IAEF,IAAI,sBAA0C,CAAC;IAC/C,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC;gBAC9B,MAAM,OAAO,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;gBACzD,IAAI,QAAQ,IAAI,OAAO,KAAK,SAAS;oBAAE,sBAAsB,GAAG,OAAO,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,+KAA+K,CAAC,CAAC;gBAC3M,IAAI,QAAQ,EAAE,CAAC;oBACb,sBAAsB,GAAG,gKAAgK,CAAC;oBAC1L,kCAAkC,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,iBAAiB,MAAM,4CAA4C,CAAC,CAAC;YAC/F,IAAI,QAAQ,EAAE,CAAC;gBACb,sBAAsB,GAAG,6DAA6D,MAAM,wEAAwE,CAAC;gBACrK,kCAAkC,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAA2B,EAAE,CAAC;YAC5C,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpE,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBACtC,IAAI,+BAA+B,CAAC,OAAO,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;oBAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,0MAA0M,CAAC,CAAC;YAC7O,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC,kBAAkB,EAAE,GAAG,QAAQ,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,0BAA0B,QAAQ,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACpK,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAyB,EAAE,CAAC;YAC1C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACjE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,sBAAsB,CAAC,OAAO,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;oBACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,mMAAmM,CAAC,CAAC;YACtO,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,gBAAgB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,2BAA2B,QAAQ,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACrK,CAAC;IACH,CAAC;IAED,OAAO,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAiB;IAC1D,OAAO,MAAM,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM;QAC3C,CAAC,CAAC,kCAAkC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE;QACjE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAiB;IAChE,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAAC,MAAiB,EAAE,MAAc;IAClF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,GAAY,EAAQ,EAAE;QACpC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAE,GAA+B,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACrE,KAAyB,CAAC,MAAM,KAAK,2BAA2B;WACjE,OAAQ,KAAyB,CAAC,SAAS,KAAK,QAAQ;WACvD,KAAyB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;WACtD,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAE,KAAyB,CAAC,MAAM,CAAC;WACvE,OAAQ,KAAyB,CAAC,KAAK,KAAK,QAAQ;WACpD,MAAM,CAAC,QAAQ,CAAE,KAAyB,CAAC,KAAK,CAAC;WACjD,OAAQ,KAAyB,CAAC,OAAO,KAAK,QAAQ;WACtD,CAAE,KAAyB,CAAC,IAAI,KAAK,SAAS;eAC5C,CAAC,OAAQ,KAAyB,CAAC,IAAI,KAAK,QAAQ;mBACjD,KAAyB,CAAC,IAAI,KAAK,IAAI;mBACxC,CAAC,KAAK,CAAC,OAAO,CAAE,KAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,SAAS,GAAG,KAAsC,CAAC;IACzD,IAAI,SAAS,CAAC,MAAM,KAAK,gCAAgC;WACpD,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ;WAChC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;WACpC,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC;WAC9E,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;WACxC,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;WACzC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;WACxC,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;WACjC,CAAC,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC;WACzC,CAAC,sBAAsB,CAAC,SAAS,CAAC,aAAa,CAAC;WAChD,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;WACrC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;WACrC,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;WACtC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;WACpC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;WAClC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;WAC7C,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;WAC9B,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ;WACvC,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,KAAK,QAAQ;WAC7C,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;WAC7C,CAAC,mBAAmB,CAAC,SAAS,CAAC,mBAAmB,CAAC;WACnD,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC;WAC1C,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;eACjB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;eAC9E,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAoC,CAAC;IACtD,OAAO,QAAQ,CAAC,MAAM,KAAK,8BAA8B;WACpD,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;WACtC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;WACpC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;WAClC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;WAChC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;WACjC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC;WACzC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;WACpC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;WACjC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;WACzB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;WACvB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;WACtB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,OAAO;WACnB,KAAK,KAAK,QAAQ;WAClB,KAAK,KAAK,KAAK;WACf,KAAK,KAAK,OAAO;WACjB,KAAK,KAAK,YAAY;WACtB,KAAK,KAAK,YAAY;WACtB,KAAK,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,WAAW;WACvB,KAAK,KAAK,YAAY;WACtB,KAAK,KAAK,kBAAkB;WAC5B,KAAK,KAAK,cAAc;WACxB,KAAK,KAAK,mBAAmB;WAC7B,KAAK,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,aAAa;WACzB,KAAK,KAAK,eAAe;WACzB,KAAK,KAAK,cAAc;WACxB,KAAK,KAAK,kBAAkB;WAC5B,KAAK,KAAK,kBAAkB;WAC5B,KAAK,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,KAAK,KAAK,SAAS;WACrB,KAAK,KAAK,YAAY;WACtB,KAAK,KAAK,OAAO;WACjB,KAAK,KAAK,aAAa;WACvB,KAAK,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,OAAO;WACnB,KAAK,KAAK,mBAAmB;WAC7B,KAAK,KAAK,kBAAkB;WAC5B,KAAK,KAAK,YAAY;WACtB,KAAK,KAAK,sBAAsB;WAChC,KAAK,KAAK,sBAAsB,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;WAChC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;WACrB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;WAC5B,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC3B,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1B,CACD,KAAK,CAAC,IAAI,KAAK,QAAQ;eACpB,KAAK,CAAC,IAAI,KAAK,OAAO;eACtB,KAAK,CAAC,IAAI,KAAK,KAAK;eACpB,KAAK,CAAC,IAAI,KAAK,OAAO;eACtB,KAAK,CAAC,IAAI,KAAK,YAAY;eAC3B,KAAK,CAAC,IAAI,KAAK,YAAY,CAC/B;WACE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACtC,CAAC"}

package/dist/adapter-scorer-loader.d.ts

@@ -1,42 +0,0 @@
-import type { BrowserLabScoringContext } from "./adapter-extension.js";
-import type { TerminalProductScoringContext } from "./e2b-terminal-lab.js";
-import type { LabBackend } from "./lab-engine.js";
-import type { RunAdapterArtifact, RunAdapterScore, RunFeedbackCandidate, RunScorerProvenance } from "./run.js";
-/** The read-model context a loaded scorer sees — the terminal or browser scoring context. The module
- *  narrows it at runtime (`"product" in ctx` ⇒ terminal; `"backend" in ctx` ⇒ browser). */
-export type AdapterScoringContext = TerminalProductScoringContext | BrowserLabScoringContext;
-/**
- * The adopter-facing scorer module contract (#316). Export any subset of these from a `.mjs` (or a
- * `.js`/`.cjs` whose package.json type matches) — named exports OR a single default object. The
- * loader wires ONLY these three; an exported `executor`/`env`/`provisionSubject`/`costProbe` is never
- * picked up (the whitelist is the scope guard). A module exporting NONE of them is a hard load error.
- */
-export interface AdapterScorerModule {
-    score?: (ctx: AdapterScoringContext) => RunAdapterScore | Promise<RunAdapterScore>;
-    deriveFeedback?: (ctx: AdapterScoringContext) => RunFeedbackCandidate[] | Promise<RunFeedbackCandidate[]>;
-    /** Browser-route only; inert on the terminal route (TerminalProductLabHooks carries no artifacts seam). */
-    deriveArtifacts?: (ctx: BrowserLabScoringContext) => RunAdapterArtifact[] | Promise<RunAdapterArtifact[]>;
-}
-export type AdapterScorerLoadErrorCode = "HUMANISH_LAB_SCORER_BAD_REF" | "HUMANISH_LAB_SCORER_NOT_FOUND" | "HUMANISH_LAB_SCORER_LOAD_FAILED" | "HUMANISH_LAB_SCORER_NO_HOOKS" | "HUMANISH_LAB_SCORER_UNSUPPORTED_BACKEND";
-export type AdapterScorerLoadResult = {
-    ok: true;
-    hooks: AdapterScorerModule;
-    provenance: RunScorerProvenance;
-} | {
-    ok: false;
-    error: {
-        code: AdapterScorerLoadErrorCode;
-        message: string;
-    };
-};
-/**
- * Resolve + load a config-declared scorer module. Resolution clones scenario.ref exactly
- * (prepareSelectedOutputDirectory → cwd-clamp → readContainedRegularFile), then `import()`s the
- * entry file in a BROAD try/catch. The digest is over the readContainedRegularFile ENTRY bytes.
- */
-export declare function loadAdapterScorer(args: {
-    cwd: string;
-    ref: string;
-    backend: LabBackend;
-    source: "manifest" | "cli-flag";
-}): Promise<AdapterScorerLoadResult>;

package/dist/adapter-scorer-loader.js

@@ -1,129 +0,0 @@
-// #316 — CLI-loadable adopter scorer. Resolve `review.scorer.ref` / `--scorer` to an out-of-tree
-// scorer module, load it fail-closed (typed error + exit 2, PRE-SPEND), and pick off ONLY the
-// whitelisted read-model hooks {score, deriveFeedback, deriveArtifacts}. `costProbe` is deliberately
-// NOT loadable — an injected provider cost line overwrites the core-measured one and can forge a
-// satisfied no-spend proof, so it stays library-only.
-//
-// TRUST MODEL (stated plainly, no overclaims): the party who writes `review.scorer.ref` is the party
-// who runs `humanish lab run` in their own checkout — identical trust to humanish.lab.yml or a
-// package.json script. #316 adds ZERO new execution capability; it relocates WHERE the reference is
-// declared. Containment is ENTRY-FILE-ONLY: `readContainedRegularFile` blocks abs/`..`/symlink/
-// hardlink/realpath-escape/TOCTOU on the entry module, but `import()` then executes the transitive
-// graph + npm deps with no clamp, and `import()` runs top-level module code before any whitelist
-// check. The whitelist bounds the WIRED HOOK SURFACE, not arbitrary import-time code; the
-// trusted-in-process boundary is the actual safety carrier. The seam's output re-scrub is a
-// best-effort denylist, NOT containment. `review.scorer.ref` entries are executable code — review a
-// PR that adds one as code, not config.
-import { realpath } from "node:fs/promises";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-import { digestText, redactText } from "./redaction.js";
-import { prepareSelectedOutputDirectory, readContainedRegularFile } from "./selected-output-paths.js";
-/** The backends whose hooks bag can carry the loaded scorer. A declared scorer on ANY other backend
- *  (scripted / synthetic / meta / smoke) aborts at load — a gate that cannot run must never green-pass. */
-const SCORER_CAPABLE_BACKENDS = new Set([
-    "terminal",
-    "cua",
-    "shared-world",
-    "concurrent-shared-world"
-]);
-/** `.mjs` is required-canonical; `.js`/`.cjs` accepted but the module system is the adopter repo's
- *  package.json `type`. `.ts` is rejected — the compiled `dist/` CLI ships no TypeScript loader. */
-const SCORER_EXTENSIONS = new Set([".mjs", ".js", ".cjs"]);
-/**
- * Resolve + load a config-declared scorer module. Resolution clones scenario.ref exactly
- * (prepareSelectedOutputDirectory → cwd-clamp → readContainedRegularFile), then `import()`s the
- * entry file in a BROAD try/catch. The digest is over the readContainedRegularFile ENTRY bytes.
- */
-export async function loadAdapterScorer(args) {
-    const { backend, source } = args;
-    const fail = (code, message) => ({ ok: false, error: { code, message } });
-    // A declared gate that cannot run on this backend must ABORT (never silently green-pass).
-    if (!SCORER_CAPABLE_BACKENDS.has(backend)) {
-        return fail("HUMANISH_LAB_SCORER_UNSUPPORTED_BACKEND", `review.scorer.ref is declared but this lab resolves to the ${backend} backend, which has no adopter-scorer seam. A declared scorer that cannot run must fail closed rather than pass silently — declare it on a terminal, cua, shared-world, or concurrent-shared-world lab.`);
-    }
-    const trimmed = args.ref.trim();
-    if (!trimmed) {
-        return fail("HUMANISH_LAB_SCORER_BAD_REF", "review.scorer.ref must be a non-empty repo-relative path ending in .mjs (recommended), .js, or .cjs.");
-    }
-    // Provenance is recorded repo-relative — an absolute ref (even one that happens to land inside cwd)
-    // is rejected up front rather than silently rewritten to its in-tree relative form.
-    if (path.isAbsolute(trimmed)) {
-        return fail("HUMANISH_LAB_SCORER_BAD_REF", `review.scorer.ref "${trimmed}" must be a repo-relative path, not absolute — provenance is recorded repo-relative.`);
-    }
-    const ext = path.extname(trimmed).toLowerCase();
-    if (ext === ".ts") {
-        return fail("HUMANISH_LAB_SCORER_BAD_REF", `review.scorer.ref "${trimmed}" ends in .ts, but the shipped CLI runs compiled JS with no TypeScript loader. Precompile to .mjs (recommended) or .js/.cjs.`);
-    }
-    if (!SCORER_EXTENSIONS.has(ext)) {
-        return fail("HUMANISH_LAB_SCORER_BAD_REF", `review.scorer.ref "${trimmed}" must be a repo-relative PATH ending in .mjs (recommended), .js, or .cjs — an id-style ref is not supported.`);
-    }
-    // Root token: realpath(cwd) → prepareSelectedOutputDirectory(dirname, cwd). Mirrors scenario.ref.
-    const physicalCwd = await realpath(path.resolve(args.cwd));
-    const root = await prepareSelectedOutputDirectory(path.dirname(physicalCwd), physicalCwd);
-    // Clamp verbatim from the scripted scenario.ref branch: resolve → relative → reject escape/absolute.
-    const absolutePath = path.resolve(root.physicalPath, trimmed);
-    const relative = path.relative(root.physicalPath, absolutePath);
-    if (!relative || relative.startsWith("..") || path.isAbsolute(relative)) {
-        return fail("HUMANISH_LAB_SCORER_BAD_REF", `review.scorer.ref "${trimmed}" must stay inside the target cwd — provenance is recorded repo-relative and an escaping/absolute path (a cwd parent, node_modules above cwd, an absolute path) cannot be.`);
-    }
-    const relPosix = relative.split(path.sep).join("/");
-    // Fail-closed containment gate on the ENTRY file only: rejects symlink, nlink>1, realpath-escape,
-    // TOCTOU. Its returned bytes are the digest input.
-    const bytes = await readContainedRegularFile(root, relPosix);
-    if (!bytes) {
-        return fail("HUMANISH_LAB_SCORER_NOT_FOUND", `review.scorer.ref "${trimmed}" could not be read as a contained regular file (${relPosix}). A scorer must be a regular file inside the target cwd — no symlink, no hardlink, no realpath escape.`);
-    }
-    const digest = digestText(bytes.toString("utf8"));
-    // Import the entry module in a BROAD try/catch (ERR_MODULE_NOT_FOUND / SyntaxError / ERR_REQUIRE_ESM
-    // / top-level throw). import() executes the transitive graph — the cwd clamp guards only the ENTRY
-    // file; out-of-tree/transitive code is acceptable only because of the trust boundary above.
-    let mod;
-    try {
-        const url = pathToFileURL(path.join(root.physicalPath, relPosix)).href;
-        mod = (await import(url));
-    }
-    catch (error) {
-        const detail = error instanceof Error ? error.message : String(error);
-        const hint = /ERR_REQUIRE_ESM|import statement outside a module|Cannot use import statement|Unexpected (?:token|identifier)|SyntaxError/i.test(detail)
-            ? " Use a .mjs entry file, or set \"type\": \"module\" in the nearest package.json."
-            : "";
-        return fail("HUMANISH_LAB_SCORER_LOAD_FAILED", `review.scorer.ref "${trimmed}" failed to load: ${redactText(detail)}.${hint}`);
-    }
-    // mod.default ?? mod, then pick off ONLY the whitelist. An exported executor/env/costProbe is never
-    // wired — the whitelist is the scope guard. `exports` records the hooks ACTUALLY WIRED for this
-    // backend: deriveArtifacts is browser-only, so on the terminal route it is neither wired nor
-    // recorded (a scorer that exported ONLY deriveArtifacts there wires nothing and fails closed below,
-    // never a silent no-op).
-    const picked = (mod.default ?? mod);
-    const terminalRoute = backend === "terminal";
-    const hooks = {};
-    const exports = [];
-    if (typeof picked.score === "function") {
-        hooks.score = picked.score;
-        exports.push("score");
-    }
-    if (typeof picked.deriveFeedback === "function") {
-        hooks.deriveFeedback = picked.deriveFeedback;
-        exports.push("deriveFeedback");
-    }
-    if (!terminalRoute && typeof picked.deriveArtifacts === "function") {
-        hooks.deriveArtifacts = picked.deriveArtifacts;
-        exports.push("deriveArtifacts");
-    }
-    if (exports.length === 0) {
-        const artifactsOnly = terminalRoute && typeof picked.deriveArtifacts === "function";
-        return fail("HUMANISH_LAB_SCORER_NO_HOOKS", artifactsOnly
-            ? `review.scorer.ref "${trimmed}" exported only deriveArtifacts, which is browser-only and inert on the terminal route. Export score and/or deriveFeedback for a terminal-product scorer.`
-            : `review.scorer.ref "${trimmed}" loaded but exported none of the adopter-scorer hooks (score, deriveFeedback, deriveArtifacts). Export at least one (named, or on a single default object). costProbe is intentionally NOT loadable.`);
-    }
-    const provenance = {
-        schema: "humanish.scorer-provenance.v1",
-        ref: relPosix,
-        digest,
-        source,
-        exports
-    };
-    return { ok: true, hooks, provenance };
-}
-//# sourceMappingURL=adapter-scorer-loader.js.map

package/dist/adapter-scorer-loader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter-scorer-loader.js","sourceRoot":"","sources":["../src/adapter-scorer-loader.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,8FAA8F;AAC9F,qGAAqG;AACrG,iGAAiG;AACjG,sDAAsD;AACtD,EAAE;AACF,qGAAqG;AACrG,+FAA+F;AAC/F,oGAAoG;AACpG,gGAAgG;AAChG,mGAAmG;AACnG,iGAAiG;AACjG,0FAA0F;AAC1F,4FAA4F;AAC5F,oGAAoG;AACpG,wCAAwC;AAExC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAKzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAOxD,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AA+BpC;2GAC2G;AAC3G,MAAM,uBAAuB,GAA4B,IAAI,GAAG,CAAa;IAC3E,UAAU;IACV,KAAK;IACL,cAAc;IACd,yBAAyB;CAC1B,CAAC,CAAC;AAEH;oGACoG;AACpG,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,IAAgC,EAAE,OAAe,EAA2B,EAAE,CAC1F,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAE5C,0FAA0F;IAC1F,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CACT,yCAAyC,EACzC,8DAA8D,OAAO,yMAAyM,CAC/Q,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,6BAA6B,EAAE,sGAAsG,CAAC,CAAC;IACrJ,CAAC;IACD,oGAAoG;IACpG,oFAAoF;IACpF,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,6BAA6B,EAAE,sBAAsB,OAAO,sFAAsF,CAAC,CAAC;IAClK,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,6BAA6B,EAAE,sBAAsB,OAAO,8HAA8H,CAAC,CAAC;IAC1M,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,6BAA6B,EAAE,sBAAsB,OAAO,+GAA+G,CAAC,CAAC;IAC3L,CAAC;IAED,kGAAkG;IAClG,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;IAE1F,qGAAqG;IACrG,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CACT,6BAA6B,EAC7B,sBAAsB,OAAO,4KAA4K,CAC1M,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEpD,kGAAkG;IAClG,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CACT,+BAA+B,EAC/B,sBAAsB,OAAO,oDAAoD,QAAQ,yGAAyG,CACnM,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAElD,qGAAqG;IACrG,mGAAmG;IACnG,4FAA4F;IAC5F,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAA4B,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,4HAA4H,CAAC,IAAI,CAAC,MAAM,CAAC;YACpJ,CAAC,CAAC,kFAAkF;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,IAAI,CACT,iCAAiC,EACjC,sBAAsB,OAAO,qBAAqB,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,gGAAgG;IAChG,6FAA6F;IAC7F,oGAAoG;IACpG,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAA4B,CAAC;IAC/D,MAAM,aAAa,GAAG,OAAO,KAAK,UAAU,CAAC;IAC7C,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACvC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAkD,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAChD,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,cAAoE,CAAC;QACnG,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,aAAa,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACnE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,eAAsE,CAAC;QACtG,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,aAAa,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC;QACpF,OAAO,IAAI,CACT,8BAA8B,EAC9B,aAAa;YACX,CAAC,CAAC,sBAAsB,OAAO,2JAA2J;YAC1L,CAAC,CAAC,sBAAsB,OAAO,uMAAuM,CACzO,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAwB;QACtC,MAAM,EAAE,+BAA+B;QACvC,GAAG,EAAE,QAAQ;QACb,MAAM;QACN,MAAM;QACN,OAAO;KACR,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC"}

package/dist/affordance.d.ts

@@ -1,53 +0,0 @@
-import type { CuaAction } from "./computer-use.js";
-export declare const AFFORDANCE_CLASS_SCHEMA = "humanish.affordance-use.v1";
-/**
- * The affordance classes, named after the surrounding literature rather than invented here:
- * "naturalistic actions" (AndroidWorld) for the human-modality subset, "nav" (BrowserGym) for
- * direct navigation, "shortcut" (MAS-Bench) for a non-UI route to the same outcome.
- */
-export type AffordanceClass = 
-/** Pointer or drag interaction with what is rendered on screen — the naturalistic core. */
-"pointer"
-/** Keyboard input into the page: typed text that is not a URL and not script. */
- | "keyboard"
-/** Spoken input sent through the participant's admitted microphone path. */
- | "speech"
-/** Direct navigation by URL (the `nav` subset). A human affordance; see the note above. */
- | "url-navigation"
-/** Script execution via the address bar (a `javascript:` URL). Not a human affordance. */
- | "script-execution"
-/** Developer tooling opened by keyboard shortcut. Not a human affordance. */
- | "devtools"
-/** A browser-internal surface rather than the product: chrome://, about:, view-source:, file:. */
- | "browser-internal"
-/** The actor observing or pausing rather than acting: screenshots, waits, pointer moves. */
- | "observation";
-/** Classes that a person operating this product through its own surfaces could produce. */
-export declare const NATURALISTIC_AFFORDANCE_CLASSES: readonly AffordanceClass[];
-/** Classes that reach past the rendered product surface. Recorded, never blocked. */
-export declare const SHORTCUT_AFFORDANCE_CLASSES: readonly AffordanceClass[];
-export interface AffordanceObservation {
-    affordance: AffordanceClass;
-    /**
-     * A public-safe hint about WHY this class was assigned, when one exists — a URL scheme or the
-     * devtools chord. Never the typed text, never a full URL (which can carry a session token).
-     */
-    signal?: string;
-}
-/** Aggregate per-run record: how many actions fell into each class. */
-export interface AffordanceUse {
-    schema: typeof AFFORDANCE_CLASS_SCHEMA;
-    /** Counts by class; a class with zero actions is omitted so the record stays small and honest. */
-    counts: Partial<Record<AffordanceClass, number>>;
-    /** Total classified actions (the denominator for any rate an adopter computes). */
-    total: number;
-    /** Convenience roll-up: actions in the shortcut classes. Zero is a meaningful, common value. */
-    shortcutTotal: number;
-}
-/**
- * Classify one computer-use action. PURE: same action in, same class out, no I/O, no clock. The
- * returned signal is public-safe (a scheme or a chord), never the action's text.
- */
-export declare function classifyCuaAction(action: CuaAction): AffordanceObservation;
-/** Fold a sequence of observations into the per-run aggregate. */
-export declare function summarizeAffordanceUse(observations: readonly AffordanceObservation[]): AffordanceUse;