humanish 0.106.0 → 0.107.0

package/dist/feedback/draft.js

@@ -2,12 +2,13 @@
 // participant's feedback candidate or from a reviewed analysis finding, and its markdown rendering.
 // The commands that resolve the run and read or write drafts are in feedback.ts.
 import path from "node:path";
-import { studyAnalysisSharingProblems } from "../analysis/sharing.js";
-import { loadStudyAnalysis } from "../analysis/load.js";
+import { analysisSharingProblems } from "../analysis/sharing.js";
+import { loadAnalysis } from "../analysis/load.js";
 import { hashAnalysisValue } from "../analysis/validation.js";
-import { formatParticipantOutcomes, formatStudyTaskFunnel, participantOutcomeDetails, withCuaReviewProvenance, } from "../run/outcomes.js";
+import { formatParticipantOutcomes, formatRunTaskFunnel, participantOutcomeDetails, withCuaReviewProvenance, } from "../run/outcomes.js";
 import { loadRunBundlePrepared } from "../run/locate.js";
 import { isFeedbackIdempotencyKey } from "../run/feedback-shape.js";
+import { isRecord } from "../run/type-guards.js";
 import { feedbackProofCommands, projectFeedbackAcceptanceProof } from "./proof.js";
 export const FEEDBACK_SCHEMA = "humanish.feedback.v1";
 export function buildDraft(bundle, bundlePath, candidateId) {
@@ -65,7 +66,7 @@ export function buildDraft(bundle, bundlePath, candidateId) {
                 ]),
             ...(bundle.review.tasks === undefined
                 ? []
-                : [`Tasks: ${formatStudyTaskFunnel(bundle.review.tasks)}.`]),
+                : [`Tasks: ${formatRunTaskFunnel(bundle.review.tasks)}.`]),
         ];
         return {
             schema: FEEDBACK_SCHEMA,
@@ -146,10 +147,10 @@ export function buildDraft(bundle, bundlePath, candidateId) {
 export async function buildAnalysisDraft(context, options) {
     if (!options.analysis || !options.finding || options.candidate !== undefined)
         return null;
-    const loaded = await loadStudyAnalysis(context.preparedRunPaths, options.analysis);
+    const loaded = await loadAnalysis(context.preparedRunPaths, options.analysis);
     const analysis = loaded.analysis;
     const finding = analysis?.result?.findings.find((item) => item.id === options.finding);
-    const sharing = studyAnalysisSharingProblems(loaded);
+    const sharing = analysisSharingProblems(loaded);
     if (loaded.state !== "ready" || sharing.sensitive || sharing.unverified || !analysis || !finding)
         return null;
     const correction = loaded.corrections.filter((item) => item.findingId === finding.id).at(-1);
@@ -253,9 +254,6 @@ export function isUsableFeedbackCandidate(candidate) {
         !item.path.includes("://") &&
         !item.path.includes(".."));
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 export function renderMarkdown(draft, repo) {
     return `This issue was drafted by humanish from a verified humanish run bundle.
 

package/dist/feedback/export-bundle.js

@@ -16,7 +16,7 @@ import { verifyRunPrepared } from "../verify/verify.js";
 import { loadRunBundlePrepared, resolveRunPath } from "../run/locate.js";
 import {} from "../run/bundle.js";
 import { runIdOf, isPathInside, prepareRunArtifactPaths, validatePreparedRunArtifactPaths, } from "../run/paths.js";
-import { isStudyAnalysisRecordPath } from "../analysis/sharing.js";
+import { isAnalysisRecordPath } from "../analysis/sharing.js";
 import { assertPreparedSelectedOutputDirectory, prepareManagedHumanishOutputDirectory, prepareSelectedOutputDirectory, readContainedRegularFile, writeContainedOutputFile, } from "../run/contained-output.js";
 const DERIVATION_SCHEMA = "humanish.redacted-derivation.v1";
 const MAX_FILES = 10_000;
@@ -46,9 +46,9 @@ function jsonBytes(value) {
     return Buffer.from(`${JSON.stringify(value, null, 2)}\n`);
 }
 function omittedReason(relative) {
-    if (relative.startsWith("analysis-automatic/") && isStudyAnalysisRecordPath(relative))
+    if (relative.startsWith("analysis-automatic/") && isAnalysisRecordPath(relative))
         return "automatic execution intent and liveness do not transfer to a derivative";
-    if (isStudyAnalysisRecordPath(relative))
+    if (isAnalysisRecordPath(relative))
         return "analysis records bind original evidence hashes; reanalyze the derivative";
     if (relative.startsWith(".analysis-lock/"))
         return "local analysis execution lock";
@@ -477,7 +477,7 @@ async function resolveDestination(cwd, runPaths, runId, options) {
  * it. The raw snapshot is removed before the derivative is built.
  */
 async function verifyFrozenSource(workspace, source, runId) {
-    // Verify the SAME frozen bytes that will be transformed. Verifying the live
+    // Verify the same frozen bytes that will be transformed. Verifying the live
     // source and then rereading run.json permits an ABA edit to contaminate a
     // derivative whose receipt still names the first inventory's hashes.
     // Raw verification bytes stay in private OS temporary storage, even when

package/dist/feedback/export.js

@@ -3,7 +3,7 @@
 // A run is a directory. Sharing it meant a tunnel (`serve --expose`) or a hand-zipped bundle,
 // neither of which is "send one thing". The Observer is already a single-file artifact with the
 // run's data inlined; what keeps it from travelling is the screenshots it references by path.
-// Export embeds each unique raster once and writes ONE .html that opens offline.
+// Export embeds each unique raster once and writes one .html that opens offline.
 //
 // Share safety is the point, not a step: export runs verify inside the flow and refuses a bundle
 // that is not share_ready. A local_only bundle (raw screenshots) exports only with an explicit
@@ -18,10 +18,10 @@ import { resolveRunPath } from "../run/locate.js";
 import { verifyRun } from "../verify/verify.js";
 import {} from "../run/bundle.js";
 import { exportRedactedBundle } from "./export-bundle.js";
-import { loadStudyAnalysis } from "../analysis/load.js";
-import { studyAnalysisSharingProblems } from "../analysis/sharing.js";
+import { loadAnalysis } from "../analysis/load.js";
+import { analysisSharingProblems } from "../analysis/sharing.js";
 import { EVIDENCE_LIMITS, validateAnalysisEvidence } from "../analysis/evidence.js";
-import { readBoundedStudyFile } from "../run/study-files.js";
+import { readBoundedFile } from "../run/evidence-files.js";
 import { shellQuote } from "../substrates/shell.js";
 const EXPORT_SCHEMA = "humanish.export-result.v1";
 /** Past this the file stops being a thing you attach to an email. Declared, never silent. */
@@ -73,7 +73,7 @@ export async function exportRun(cwdInput, runInput, options = {}, deps = {}) {
         return slot;
     // Every string in the data that names an image file inside the run becomes an asset reference. Paths are
     // run-root-relative in the data; a path that resolves outside the run is left alone, never read.
-    const analysis = await loadStudyAnalysis(runPaths);
+    const analysis = await loadAnalysis(runPaths);
     const data = await currentObserverData(runPaths, analysis, slot);
     if (data === undefined)
         return exportFailure(cwd, runInput, "HUMANISH_EXPORT_VERIFY_FAILED", "Source evidence changed while preparing the analysis export.");
@@ -175,7 +175,7 @@ async function currentObserverData(runPaths, analysis, slot) {
     const saved = JSON.parse(slot);
     if (analysis.state !== "ready" || !analysis.analysis)
         return { value: saved };
-    const source = await readBoundedStudyFile(runPaths, "run.json", EVIDENCE_LIMITS.sourceBytes);
+    const source = await readBoundedFile(runPaths, "run.json", EVIDENCE_LIMITS.sourceBytes);
     if (!source ||
         createHash("sha256").update(source).digest("hex") !== analysis.analysis.sourceRunSha256)
         return undefined;
@@ -211,7 +211,7 @@ async function inlineImages(runPaths, runRoot, data, analysis, options, warnings
         for (const candidate of candidates) {
             if (!(await isInside(runRoot, candidate)))
                 continue;
-            const bytes = await readBoundedStudyFile(runPaths, path.relative(runRoot, candidate), options.maxBytes ?? DEFAULT_EXPORT_MAX_BYTES);
+            const bytes = await readBoundedFile(runPaths, path.relative(runRoot, candidate), options.maxBytes ?? DEFAULT_EXPORT_MAX_BYTES);
             if (bytes === null)
                 continue;
             if (bytes.byteLength > MAX_PORTABLE_IMAGE_BYTES) {
@@ -302,7 +302,7 @@ async function recheckAnalysis(runPaths, analysis, verified, inlined, options) {
     // Revalidate the independent interpretation against source evidence. Never trust a
     // saved HTML slot or traverse model-provided strings as image paths.
     if (analysis.state === "ready" && analysis.analysis) {
-        const source = await readBoundedStudyFile(runPaths, "run.json", EVIDENCE_LIMITS.sourceBytes);
+        const source = await readBoundedFile(runPaths, "run.json", EVIDENCE_LIMITS.sourceBytes);
         try {
             if (!source)
                 throw new Error("source unavailable");
@@ -312,7 +312,7 @@ async function recheckAnalysis(runPaths, analysis, verified, inlined, options) {
             return "changed";
         }
     }
-    const analysisSharing = studyAnalysisSharingProblems(analysis);
+    const analysisSharing = analysisSharingProblems(analysis);
     if (!analysisSharing.sensitive && !analysisSharing.unverified)
         return "ok";
     verified.shareSafety = {

package/dist/feedback/feedback.d.ts

@@ -12,7 +12,7 @@ export interface FeedbackResult {
     issueMarkdown?: string;
     issueUrl?: string;
     draft?: FeedbackDraft;
-    /** Every usable candidate on the bundle, so a multi-lane study's second and third findings can be
+    /** Every usable candidate on the bundle, so a multi-participant study's second and third findings can be
      *  chosen with `--candidate` instead of being invisible behind the first (#609). */
     candidates?: FeedbackCandidateSummary[];
     shareSafety?: VerifyResult["shareSafety"];

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-export { runLab } from "./run-lab.js";
+export { runPackageLab as runLab } from "./run-lab.js";
 export type { LabOutcome, LabResult, RunLabOptions } from "./run-lab.js";
 export type { LabEvent } from "./lab/run-lab-events.js";
-export type { ProviderContext } from "./lab/run-lab-options.js";
+export type { ProviderContext } from "./lab/run-lab-homes.js";
 export { routeOf } from "./lab/plan.js";
 export type { LabRoute } from "./lab/plan.js";
 export { parseLabConfig } from "./lab/config.js";
@@ -22,11 +22,8 @@ export { CuaAdmissionLimitError } from "./actors/computer-use/admission-limit.js
 export { defaultRedactionHooks } from "./evidence/redaction.js";
 export type { RedactionHooks } from "./evidence/redaction.js";
 export type { E2BDesktopSandbox } from "./substrates/e2b/sdk.js";
+export { browserScorer, terminalScorer } from "./lab/adapter-scorer-loader.js";
 export type { AdapterScorerModule, AdapterScoringContext } from "./lab/adapter-scorer-loader.js";
 export type { BrowserLabScoringContext } from "./lab/adapter-extension.js";
 export type { TerminalProductScoringContext } from "./routes/terminal/types.js";
 export type { RunAdapterArtifact, RunAdapterScore } from "./run/bundle.js";
-export { routesToComputerUse, routesToConcurrentSharedWorld, routesToExternalPublicSharedWorld, routesToProvisionedSharedWorld, routesToScriptedBrowser, routesToSharedWorld, routesToTerminalProduct, } from "./lab/routing.js";
-export { selectLabBackend } from "./lab/plan.js";
-export { actorResolvesToTerminal, concurrentSharedWorldValidationReason, cuaLaneCount, cuaLaneValidationReason, externalPublicSharedWorldValidationReason, MAX_CUA_LANES, resolveLabDryRun, resolveSeatUrl, runConcurrentSharedWorld, runCuaActorLab, runCuaActorSession, runDryRun, runScriptedBrowserLab, runTerminalProductLab, sharedWorldValidationReason, } from "./deprecated.js";
-export type { AutomaticAnalysisHooks, BrowserLabAdapterHooks, ConcurrentSharedWorldLabResult, CuaActorLabHooks, CuaActorLabResult, LabBackend, RunConcurrentSharedWorldLabOptions, RunCuaActorLabOptions, RunOptions, RunResult, RunScriptedBrowserLabOptions, RunTerminalProductLabOptions, ScriptedBrowserLabHooks, ScriptedBrowserLabResult, SharedWorldLabHooks, SubjectPhaseEvent, TerminalProductLabHooks, TerminalProductLabResult, } from "./deprecated.js";

package/dist/index.js

@@ -2,7 +2,7 @@
 // score a run. Everything else is internal and reached through the `humanish` bin. See
 // docs/contracts/schemas.md, "Library options", and the site's library page.
 // Run a lab.
-export { runLab } from "./run-lab.js";
+export { runPackageLab as runLab } from "./run-lab.js";
 export { routeOf } from "./lab/plan.js";
 export { parseLabConfig } from "./lab/config.js";
 export { LAB_CONFIG_SCHEMA } from "./lab/types.js";
@@ -14,8 +14,5 @@ export { runComputerUseLoop, stableProgressKey } from "./actors/computer-use/loo
 export { createOpenAiResponsesProvider } from "./actors/computer-use/openai-provider.js";
 export { CuaAdmissionLimitError } from "./actors/computer-use/admission-limit.js";
 export { defaultRedactionHooks } from "./evidence/redaction.js";
-// Routing: the planLab series deprecates these and removes them in the next minor.
-export { routesToComputerUse, routesToConcurrentSharedWorld, routesToExternalPublicSharedWorld, routesToProvisionedSharedWorld, routesToScriptedBrowser, routesToSharedWorld, routesToTerminalProduct, } from "./lab/routing.js";
-export { selectLabBackend } from "./lab/plan.js";
-// Deprecated this minor, removed in the next.
-export { actorResolvesToTerminal, concurrentSharedWorldValidationReason, cuaLaneCount, cuaLaneValidationReason, externalPublicSharedWorldValidationReason, MAX_CUA_LANES, resolveLabDryRun, resolveSeatUrl, runConcurrentSharedWorld, runCuaActorLab, runCuaActorSession, runDryRun, runScriptedBrowserLab, runTerminalProductLab, sharedWorldValidationReason, } from "./deprecated.js";
+// Score a run.
+export { browserScorer, terminalScorer } from "./lab/adapter-scorer-loader.js";

package/dist/keys/key-resolution.d.ts

@@ -13,12 +13,14 @@ export declare function userKeyStorePath(env: NodeJS.ProcessEnv, deps?: KeyResol
 /**
  * Fill missing provider keys into `env` from the discovery chain, announcing each fill as
  * `NAME from SOURCE`. Returns the fills. Opt-out: HUMANISH_STRICT_KEYS=1 returns [] untouched.
+ * With `announced`, every key is still filled, and only the fills it names are announced.
  */
 export declare function discoverProviderKeys(args: {
     cwd: string;
     env: NodeJS.ProcessEnv;
     announce: (line: string) => void;
     deps?: KeyResolutionDeps;
+    announced?: ReadonlySet<string>;
 }): Promise<ResolvedKeyFill[]>;
 export interface KeySourceProbe {
     name: string;
@@ -48,7 +50,7 @@ export declare function resolveKeyName(vendorOrName: string): string | null;
  *  are storable (the store feeds implicit discovery — an arbitrary-name store would be an env
  *  injection vector with extra steps). The value must be a single non-empty line that
  *  round-trips the store's own parser byte-identically, and the write refuses symlinks at the
- *  file AND its parent directory (red-team findings). */
+ *  file and its parent directory (red-team findings). */
 export declare function setUserKey(name: string, value: string, env: NodeJS.ProcessEnv, deps?: KeyResolutionDeps): {
     path: string;
 };

package/dist/keys/key-resolution.js

@@ -5,15 +5,15 @@
 //   1. process env — including whatever --env-file just loaded (explicit always wins);
 //   2. `.humanish/local/provider.env` — the project-local overlay this CLI's own --help
 //      examples document;
-//   3. the OWNING vendor's native store, where one exists:
+//   3. the owning vendor's native store, where one exists:
 //        E2B_API_KEY  <- ~/.e2b/config.json (written by `e2b auth login`);
 //        GH_TOKEN     <- `gh auth token` (the gh CLI's credential chain);
 //   4. the humanish user-level store `$XDG_CONFIG_HOME/humanish/keys.env`, written only by
 //      `humanish keys set` (0600, prompted or --stdin) — the fallback for vendors that ship
 //      no machine chain of their own (OpenAI, Anthropic).
 //
-// Every fill is ANNOUNCED by key name + source, never by value. The subject app's own
-// `.env`/`.env.local` are NEVER read — those hold product credentials, a different class
+// Every fill is announced by key name + source, never by value. The subject app's own
+// `.env`/`.env.local` are never read: those hold product credentials, a different class
 // (#11); this module only reads humanish-owned files and vendor-owned stores.
 // `HUMANISH_STRICT_KEYS=1` disables every rung below process env (the pre-#436 behavior).
 import { spawn } from "node:child_process";
@@ -21,7 +21,7 @@ import { chmodSync, closeSync, constants as fsConstants, existsSync, ftruncateSy
 import { homedir } from "node:os";
 import path from "node:path";
 import { loadEnvFile } from "./env-file.js";
-/** The ONLY names implicit discovery may fill (and `humanish keys set` may store). Everything
+/** The only names implicit discovery may fill (and `humanish keys set` may store). Everything
  *  else in an overlay/store file is ignored-and-named: a repo-planted NODE_OPTIONS/LD_PRELOAD
  *  must never enter process env off a file the operator did not explicitly pass (an explicit
  *  --env-file remains the operator's own full-file load). Red-team finding, #436. */
@@ -51,7 +51,7 @@ const PROJECT_OVERLAY_RELATIVE = path.join(".humanish", "local", "provider.env")
 export function userKeyStorePath(env, deps = {}) {
     const home = deps.homeDir ?? homedir();
     const declared = env.XDG_CONFIG_HOME?.trim();
-    // The XDG spec: a relative XDG_CONFIG_HOME MUST be ignored. Honoring one would make the
+    // The XDG spec: a relative XDG_CONFIG_HOME must be ignored. Honoring one would make the
     // key store cwd-relative — `humanish keys set` would write a secret into the current repo.
     const configHome = declared !== undefined && declared !== "" && path.isAbsolute(declared)
         ? declared
@@ -61,7 +61,7 @@ export function userKeyStorePath(env, deps = {}) {
 function e2bConfigPath(deps) {
     return path.join(deps.homeDir ?? homedir(), ".e2b", "config.json");
 }
-/** Default exec: bounded, quiet, stdin closed; null on ANY failure. Never throws. */
+/** Default exec: bounded, quiet, stdin closed; null on any failure. Never throws. */
 function defaultExecText(command, args, timeoutMs, env) {
     return new Promise((resolve) => {
         let child;
@@ -128,7 +128,7 @@ function readE2bConfigKey(deps) {
         return null;
     }
 }
-/** Refuse to READ a store through a symlink: a repo-local overlay that is secretly a link to
+/** Refuse to read a store through a symlink: a repo-local overlay that is secretly a link to
  *  an unrelated file is exactly the retargeting shape the artifact paths refuse elsewhere. */
 function isRegularFile(filePath) {
     try {
@@ -141,15 +141,16 @@ function isRegularFile(filePath) {
 /**
  * Fill missing provider keys into `env` from the discovery chain, announcing each fill as
  * `NAME from SOURCE`. Returns the fills. Opt-out: HUMANISH_STRICT_KEYS=1 returns [] untouched.
+ * With `announced`, every key is still filled, and only the fills it names are announced.
  */
 export async function discoverProviderKeys(args) {
-    const { cwd, env, announce } = args;
+    const { cwd, env, announce, announced } = args;
     const deps = args.deps ?? {};
     if (env.HUMANISH_STRICT_KEYS?.trim() === "1")
         return [];
     const fills = [];
     const ignored = [];
-    // Fill-only means PRESENCE wins, including an explicitly-set empty value: an operator who
+    // Fill-only means presence wins, including an explicitly-set empty value: an operator who
     // exported OPENAI_API_KEY="" said "off", and a rung that "fixes" that has overridden them
     // (red-team finding). Only a truly-unset name is fillable.
     const fillable = (name) => env[name] === undefined;
@@ -157,7 +158,7 @@ export async function discoverProviderKeys(args) {
         env[name] = value;
         fills.push({ name, source });
     };
-    // Rung 2: the documented project-local overlay. Parsed ATOMICALLY against a scratch env so a
+    // Rung 2: the documented project-local overlay. Parsed atomically against a scratch env so a
     // file loadEnvFile rejects can never half-apply (red-team finding: earlier lines used to land
     // in env unannounced before the parse error aborted). Only allowlisted provider names cross
     // from the file into the real env.
@@ -184,7 +185,7 @@ export async function discoverProviderKeys(args) {
         if (teamKey !== null)
             fill("E2B_API_KEY", teamKey, "~/.e2b/config.json (e2b auth login)");
     }
-    // Rung 3b: the gh CLI's credential chain. Only consulted when NEITHER GitHub env name is
+    // Rung 3b: the gh CLI's credential chain. Only consulted when neither GitHub env name is
     // present; fills GH_TOKEN (the name humanish reads first). gh runs without any provider key in
     // its environment, so the keys the rungs above just filled stay in this process.
     if (fillable("GH_TOKEN") && fillable("GITHUB_TOKEN")) {
@@ -193,7 +194,7 @@ export async function discoverProviderKeys(args) {
         if (token !== null)
             fill("GH_TOKEN", token, "gh auth token");
     }
-    // Rung 4: the humanish user-level store — read with the SAME lenient parser `keys set`/`list`
+    // Rung 4: the humanish user-level store, read with the same lenient parser `keys set`/`list`
     // use, so one hand-mangled line degrades to that line alone instead of silently voiding the
     // whole store (red-team finding: the strict parser disagreed with the store's own reader).
     const storePath = userKeyStorePath(env, deps);
@@ -209,12 +210,13 @@ export async function discoverProviderKeys(args) {
         }
     }
     for (const fill_ of fills)
-        announce(`humanish keys: ${fill_.name} from ${fill_.source}`);
+        if (announced === undefined || announced.has(fill_.name))
+            announce(`humanish keys: ${fill_.name} from ${fill_.source}`);
     for (const name of ignored)
         announce(`humanish keys: ignored non-provider name ${name} — implicit discovery fills provider keys only; pass the file via --env-file to load everything in it`);
     return fills;
 }
-/** True when the file's PARENT directory is (or traverses) a symlink at its last component —
+/** True when the file's parent directory is (or traverses) a symlink at its last component:
  *  the dir-level retarget that defeats a file-level lstat check (red-team finding). */
 function dirIsSymlink(filePath) {
     try {
@@ -295,7 +297,7 @@ export function resolveKeyName(vendorOrName) {
  *  are storable (the store feeds implicit discovery — an arbitrary-name store would be an env
  *  injection vector with extra steps). The value must be a single non-empty line that
  *  round-trips the store's own parser byte-identically, and the write refuses symlinks at the
- *  file AND its parent directory (red-team findings). */
+ *  file and its parent directory (red-team findings). */
 export function setUserKey(name, value, env, deps = {}) {
     const trimmed = value.trim();
     if (trimmed.length === 0 || /[\u0000-\u001f\u007f]/.test(trimmed)) {
@@ -320,7 +322,7 @@ export function setUserKey(name, value, env, deps = {}) {
     entries.set(name, trimmed);
     // The written line must read back byte-identically through the store's own parser: a value
     // that parses differently (an embedded '#', a leading quote the env parser would strip)
-    // would silently resolve to a DIFFERENT secret on the next run.
+    // would silently resolve to a different secret on the next run.
     const roundTrip = parseStoreLine(`${name}=${trimmed}`);
     if (roundTrip === null || roundTrip[0] !== name || roundTrip[1] !== trimmed) {
         throw new Error("The value does not round-trip the store format (avoid leading quotes and '#'); pass it via --env-file instead.");

package/dist/lab/adapter-extension.d.ts

@@ -1,7 +1,9 @@
 import type { RunAdapterArtifact, RunAdapterScore, RunBundle, RunFeedbackCandidate, RunScorerProvenance } from "../run/bundle.js";
 type BrowserAdapterBackend = "cua" | "shared-world" | "concurrent-shared-world";
+/** The routes that call a browser scorer. */
+type BrowserScorerRoute = "computer-use" | "shared-world";
 /**
- * Product-agnostic scoring context for browser/computer-use lanes. Product-specific
+ * Product-agnostic scoring context for browser/computer-use routes. Product-specific
  * evidence/rubrics stay in the adopter's repo; core provides the assembled bundle
  * plus stable run identifiers and never learns product nouns.
  */
@@ -16,11 +18,26 @@ export interface BrowserLabScoringContext {
     labId: string;
     runId: string;
     actor: string;
+    /** The route that ran the participants. */
+    route: BrowserScorerRoute;
+    /**
+     * @deprecated Use `route`. `cua` is `computer-use` and `concurrent-shared-world` is
+     * `shared-world`. Reading it warns once per process; the next minor removes it.
+     */
     backend: BrowserAdapterBackend;
     dryRun: boolean;
+    /** How many participants the run had. */
+    participantCount: number;
+    /**
+     * @deprecated Use `participantCount`, which has the same value. Reading it warns once per
+     * process; the next minor removes it.
+     */
     laneCount: number;
 }
-export interface BrowserLabAdapterHooks {
+/** The context a route passes to applyBrowserScorer; the deprecated fields derive from it. */
+type BrowserScoringFacts = Omit<BrowserLabScoringContext, "backend" | "laneCount">;
+/** The scorer functions a computer-use or shared-world run calls: `RunLabOptions.scorer`. */
+export interface BrowserScorer {
     /**
      * Browser-route extension seam (#165): a thin adapter may score the assembled
      * browser/shared-world evidence without forking core. The score is stored as
@@ -51,19 +68,24 @@ export interface ScorerOutcome {
 export declare const DECLARED_SCORER_MALFORMED = "Declared product scorer returned a malformed value instead of a verdict; a declared gate that cannot render a pass is recorded as a fail, never a silent pass.";
 /** A DECLARED scorer that threw never rendered a verdict. `detail` is already sanitized. */
 export declare function declaredScorerThrew(detail: string): string;
-export declare function applyBrowserAdapterHooks(args: {
-    hooks: BrowserLabAdapterHooks | undefined;
-    context: BrowserLabScoringContext;
+export declare function applyBrowserScorer(args: {
+    scorer: BrowserScorer | undefined;
+    context: BrowserScoringFacts;
     bundle: RunBundle;
     sanitize: (text: string) => string;
     warnings: string[];
-    hookLabel: string;
     /** Present only when the scorer was CONFIG-DECLARED (#316); core-stamped onto the bundle as
      *  evidence of which out-of-tree module was loaded. Absent for library callers. Its presence also
      *  makes a THROWING or MALFORMED scorer a failure — a declared gate that cannot render a pass is
      *  a fail, never a silent green. */
     scorerProvenance?: RunScorerProvenance;
 }): Promise<ScorerOutcome>;
+/**
+ * A feedback candidate a scorer returned, accepted at the seam: the bundle's candidate shape with a
+ * non-empty summary. The browser and terminal seams both use it, so a candidate either seam drops
+ * never reaches a bundle.
+ */
+export declare function isAdapterFeedbackCandidate(value: unknown): value is RunFeedbackCandidate;
 export declare function adapterScoreFailureMessage(bundle: RunBundle): string | undefined;
 /**
  * Deep-freeze a structured clone so a loaded scorer sees a READ-ONLY bundle: it cannot mutate