humanish 0.106.1 → 0.108.0

package/dist/routes/computer-use/self-report.js

@@ -1,12 +1,12 @@
 import { selfReportedBlocker } from "../../run/judge.js";
-// "can't" followed by a PERCEPTION verb describes what the screen showed, not an inability to
+// "can't" followed by a perception verb describes what the screen showed, not an inability to
 // proceed: "the canvas truncates it so you can't even read the whole thing", "I can't tell from
 // the screen whether the rename is persisted", "so I could not read its full description". Five
 // of five completed live runs on 2026-09-01 (two on drawDB, three on the planted benchmark app)
 // were refused as "not a credible pass" on exactly these sentences, every one a defect report
-// written AFTER the participant reached the goal. The more precisely a participant describes a
-// display defect, the more likely the scan was to refuse the run — the incentive inversion #453
-// fixed for resolved arcs, back in a new shape. "could not complete", "could not connect",
+// written after the participant reached the goal. The more precisely a participant describes a
+// display defect, the more likely the scan was to refuse the run: the incentive inversion the
+// resolved-arc rule fixed, back in a new shape. "could not complete", "could not connect",
 // "unable to get focus" still count: those name an inability to act.
 const PERCEPTION_AFTER_MODAL = /\b(can'?t|cannot|could ?not|couldn'?t|unable to|wasn'?t able to)\s+(even\s+|quite\s+|really\s+|fully\s+)?(read|see|tell|view|make out|verify|confirm|be sure|be certain|judge|know)\b/g;
 function hasBlockerLanguage(text) {
@@ -15,17 +15,17 @@ function hasBlockerLanguage(text) {
         /\berror[:.]/.test(text) ||
         /what would you like me to do|please tell me|need (the )?(task|credentials|instructions)/.test(text));
 }
-/** The friction scan (inclusive): does the narrative report ANY blocker-shaped language,
+/** The friction scan (inclusive): does the narrative report any blocker-shaped language,
  *  resolved or not? Feeds the participants `reportedFriction` tally and feedback candidates. */
-// Report-shaped language: what a participant writes when it finished AND has something to say.
+// Report-shaped language: what a participant writes when it finished and has something to say.
 // Every one of the day's eleven drawDB reports (2026-09-01) opened a section "What confused me"
 // or "Accessibility defects:"; none contained a blocker word, so none became a feedback candidate
-// and a lane that had just replicated a keyboard-accessibility defect three times drafted "Live
-// study completed without a participant-reported finding". Friction is the INCLUSIVE scan; a
+// and a participant that had just replicated a keyboard-accessibility defect three times drafted "Live
+// study completed without a participant-reported finding". Friction is the inclusive scan; a
 // false positive here adds a candidate a person then reads, which is the cheap direction.
 const REPORTED_DEFECT_LANGUAGE = /\b(defects?|bugs?|accessibilit(y|ies)|inaccessible|not (keyboard|screen.?reader)[- ]?accessible|confus(ed|ing)|hesitat(ed|ion)|unexpected(ly)?|unclear|hard to (find|tell|see|read|reach)|no (visible )?focus|overlap(ped|ping|s)?|truncat(ed|es|ion)|cut off|did nothing|nothing happened|no effect)\b/;
-// The friction scan's own negations (#614). "Nothing was confusing", "no defects", "not unclear"
-// are what a participant writes when it has NOTHING to report, and until 2026-09-03 each of them
+// The friction scan's own negations. "Nothing was confusing", "no defects", "not unclear"
+// are what a participant writes when it has nothing to report, and until 2026-09-03 each of them
 // counted as reported friction and became a feedback candidate whose "actual" was a sentence
 // reporting no problem. Only the report-shaped adjectives are negatable here: "no visible focus",
 // "not keyboard-accessible" and "did nothing" are defects and stay.
@@ -80,25 +80,25 @@ function interimMessageReportsFriction(message) {
     });
 }
 /** The verdict scan (strict): like the friction scan, but resolved-arc segments are stripped
- *  first — failure narration the participant itself reports as overcome is friction on the
- *  road, not a blocker at the destination (#453). */
+ *  first: failure narration the participant itself reports as overcome counts as friction and
+ *  never as a blocker. */
 function completionReasonBlocksVerdict(reason) {
-    // Perception phrases are stripped for the VERDICT only: "I could not read the full description"
+    // Perception phrases are stripped for the verdict only: "I could not read the full description"
     // is friction worth a tally count and a feedback candidate (the friction scan above keeps it),
     // and it is not a reason to refuse the pass.
     return hasBlockerLanguage(stripResolvedArcSegments(stripQuotedSpans(stripNegatedNonBlockerPhrases(reason.toLowerCase()))).replace(PERCEPTION_AFTER_MODAL, ""));
 }
 // A failure segment counts as a resolved arc when the recovery is self-reported either in the
-// SAME segment ("the import failed but then went through") or — the common report shape — in the
-// immediately FOLLOWING segment as a retry/alternative that succeeded ("my first import failed
+// same segment ("the import failed but then went through") or, in the common report shape, in the
+// immediately following segment as a retry/alternative that succeeded ("my first import failed
 // with a parser error. A simpler SQL import succeeded."). The lookahead demands the retry flavor
 // on purpose: unrelated praise ("Separately, the search box worked") must never launder an
 // unresolved failure. "Login failed so I gave up" has no recovery anywhere and stays a blocker.
-// (#453 — the run-1 false negative: a defect report after demonstrated success failed the lane,
+// (Without this, a defect report after demonstrated success failed the participant:
 // an incentive inversion against exactly the participant behavior a study wants most.)
 const RESOLUTION_TERMS = /\b(succeed(?:ed|s)?|success(?:ful|fully)?|worked|works around|then worked|now works?|resolved|fixed|recovered|got it working|went through)\b/;
 const RETRY_RESOLUTION = /\b(simpler|simplified|retry(?:ing)?|retried|second (?:attempt|try)|another (?:attempt|try|approach)|different (?:approach|way|route)|instead|then|eventually|after that)\b[^.!?\n]{0,80}\b(succeed(?:ed|s)?|success(?:ful|fully)?|worked|went through|completed|passed)\b/;
-/** Drop sentence/bullet segments whose failure language is part of a self-reported RESOLVED arc. */
+/** Drop sentence/bullet segments whose failure language is part of a self-reported resolved arc. */
 function stripResolvedArcSegments(text) {
     const segments = text.split(/(?<=[.!?])\s+|\n+/);
     return segments
@@ -112,15 +112,15 @@ function stripResolvedArcSegments(text) {
     })
         .join(" ");
 }
-// Negations that DESCRIBE a defect rather than deny one. Kept out of every clause drop below.
+// Negations that describe a defect rather than deny one. Kept out of every clause drop below.
 const DEFECT_SHAPED_NEGATION = /\bno\s+(?:visible\s+)?focus\b|\bno\s+(?:keyboard|screen.?reader)[- ]?(?:access|path|route|way|alternative|equivalent)|\bnot\s+(?:keyboard|screen.?reader)[- ]?accessible\b|\bno\s+(?:effect|feedback|response)\b|\b(?:did|does)\s+nothing\b|\bnothing\s+happened\b/;
 function stripNegatedNonBlockerPhrases(text) {
     return (text
-        // FIRST, before the narrower rules eat the "no blockers" and leave "encountered ... error"
+        // First, before the narrower rules eat the "no blockers" and leave "encountered ... error"
         // behind: "I encountered no blockers or unclear error output." refused a clean passing run on
         // 2026-09-01. A verb of encounter followed by "no" negates the whole clause, so drop the clause.
-        // ... unless the clause names a DEFECT: "the delete control had no visible focus" is a
-        // finding, and the verb it happens to use must not decide whether it counts (#622).
+        // ... unless the clause names a defect: "the delete control had no visible focus" is a
+        // finding, and the verb it happens to use must not decide whether it counts.
         .replace(/\b(?:encountered|hit|saw|found|met|had|got|ran into)\s+no\s+[^.!?\n]*/g, (clause) => (DEFECT_SHAPED_NEGATION.test(clause) ? clause : " "))
         .replace(/\bno\s+(?:real\s+|remaining\s+|actual\s+)?(?:blocker|blockers|blocking issue|blocking issues|error|errors|failure|failures)\s+(?:was\s+|were\s+)?(?:encountered|observed|found|hit|seen|reported|detected)\b/g, "")
         .replace(/\bwithout\s+(?:a\s+|any\s+)?(?:real\s+|remaining\s+|actual\s+)?(?:blocker|blockers|blocking issue|blocking issues|error|errors|failure|failures)\b/g, "")
@@ -134,9 +134,9 @@ function stripNegatedNonBlockerPhrases(text) {
 }
 /**
  * Remove double-quoted spans and markdown blockquote lines before the blocker scan, so a persona
- * that faithfully QUOTES the subject app's own copy (e.g. a banner reading "cannot be undone") is
- * not misread as the actor reporting its OWN blocker. Only double quotes (straight and smart) and
- * `>` blockquotes are stripped — never single quotes, which would mangle contractions like `can't`.
+ * that faithfully quotes the subject app's own copy (e.g. a banner reading "cannot be undone") is
+ * not misread as the actor reporting its own blocker. Only double quotes (straight and smart) and
+ * `>` blockquotes are stripped, never single quotes, which would mangle contractions like `can't`.
  */
 function stripQuotedSpans(text) {
     return text
@@ -148,16 +148,16 @@ function traceHasStopWhenMatch(session) {
     return session.trace.items.some((item) => item.kind === "notice" &&
         item.status === "matched" &&
         // A dwell window that ended the session (then: stop) is the same class of harness-owned,
-        // structured completion as a matched stopWhen (#510).
+        // structured completion as a matched stopWhen.
         (item.title.startsWith("stopWhen matched") || item.title === "dwell window complete"));
 }
 /**
- * A goal_satisfied lane counts as a self-reported blocker ONLY when its final narrative contradicts
- * the goal AND the run's own stop predicate did NOT fire. A matched stopWhen is independent,
- * structured completion evidence, so it overrides a text scan of the free-form narrative — which can
- * otherwise trip on the subject app's OWN quoted copy (e.g. a relayed "cannot be undone" banner).
- * Resolved-arc segments never block the verdict (#453). Returns the offending reason, or undefined
- * when the lane is a clean pass. Exported for testing.
+ * A goal_satisfied participant counts as a self-reported blocker only when its final narrative contradicts
+ * the goal and the run's own stop predicate did not fire. A matched stopWhen is independent,
+ * structured completion evidence, so it overrides a text scan of the free-form narrative, which can
+ * otherwise trip on the subject app's own quoted copy (e.g. a relayed "cannot be undone" banner).
+ * Resolved-arc segments never block the verdict. Returns the offending reason, or undefined
+ * when the participant is a clean pass. Exported for testing.
  */
 export function resolveSelfReportedBlocker(session) {
     return session !== undefined && selfReportedBlocker(blockerFacts(session))
@@ -187,10 +187,10 @@ export function sessionEnding(session) {
     };
 }
 /**
- * Friction is independent of how a completed session ended (#657). Read the participant's
+ * Friction is independent of how a completed session ended. Read the participant's
  * redacted messages, including earlier reports, rather than the harness-owned reason that
  * stopWhen/dwell writes. Reasoning, observations, and notices are not participant reports.
- * Resolved arcs still count (#453); quoted copy and negated reports still do not. This read
+ * Resolved arcs still count; quoted copy and negated reports still do not. This read
  * never changes the verdict. Exported for testing.
  */
 export function resolveSelfReportedFriction(session) {

package/dist/routes/computer-use/setup.d.ts

@@ -3,15 +3,15 @@ import type { CuaActorDescriptor } from "../../actors/registry.js";
 import type { LabCommsEmail, LabCommsExternal, LabConfig } from "../../lab/types.js";
 import { type RunRerunLineage } from "../../run/bundle.js";
 import { type LocalTreeArchive } from "../../subject/local-tree-archive.js";
-import { type ComputerUseRefusal, type CuaSubjectRoute } from "./plan.js";
+import { type ComputerUseRefusal } from "./plan.js";
 import type { ComputerUsePlan } from "../../lab/plan-types.js";
 import { trackRuntimeStreams, type LiveTraceFlush } from "./live-flush.js";
 import { type CuaRunBundleBase } from "./bundle.js";
 import { projectParticipantSubjects } from "./subject-projection.js";
-import { type CuaActorLabErrorCode, type CuaActorLabHooks, type CuaActorLabResult, type CuaParticipantDeps, type CuaParticipantPlan, type DesktopParticipantRun, type CuaSubjectProjection, type CuaSubjectProvenanceArg, type ComputerUseRunInput, type RunCuaActorLabOptions } from "./types.js";
+import { type CuaActorLabErrorCode, type CuaActorLabResult, type CuaParticipantDeps, type CuaParticipantPlan, type DesktopParticipantRun, type CuaSubjectProjection, type CuaSubjectProvenanceArg, type ComputerUseRunInput, type RunCuaActorLabOptions } from "./types.js";
 /**
- * The envelope of a refusal the plan left for after the cwd checks. The lane cap and in-process
- * fan-out refusals come after the committed personas are read, so a persona-file error still wins.
+ * The envelope of a refusal the plan left for after the cwd checks. The participant cap and
+ * in-process fan-out refusals come after the committed personas are read, so a persona-file error still wins.
  */
 export declare function refuseCuaLab(options: RunCuaActorLabOptions, refusal: ComputerUseRefusal): Promise<CuaActorLabResult>;
 export type AdmittedCuaRun = Extract<Awaited<ReturnType<typeof admitCuaRun>>, {
@@ -24,13 +24,9 @@ type StartedRun = Extract<Awaited<ReturnType<RunScope["startRun"]>>, {
 export interface CuaRunSetup {
     plan: ComputerUsePlan;
     input: ComputerUseRunInput;
-    /** Read for values the plan does not carry yet, and by the compatibility hooks, which take the
-     *  whole config. Participants come from the plan. */
-    config: LabConfig;
     /** The physical project root. */
     cwd: string;
     descriptor: CuaActorDescriptor;
-    subjectRoute: CuaSubjectRoute;
     run: StartedRun;
     streams: ReturnType<typeof trackRuntimeStreams>;
     participantRuns: DesktopParticipantRun[];
@@ -66,7 +62,6 @@ export interface CuaParticipantsSetup {
 }
 /** What only finishCuaRun reads besides the participants' outcomes. */
 export interface CuaFinishFacts {
-    hooks: CuaActorLabHooks;
     rerunLineage: RunRerunLineage | undefined;
     publicRepo: string | undefined;
     subjectArgs: Omit<Parameters<typeof projectParticipantSubjects>[0], "outcomes" | "dryRun">;
@@ -95,23 +90,23 @@ export declare function admitCuaRun(plan: ComputerUsePlan, input: ComputerUseRun
         config: LabConfig;
         dryRun: boolean;
         cwd: string;
-        hooks: CuaActorLabHooks;
+        seams: import("../../lab/lab-deps.js").LabDeps;
         streams: {
-            hooks: CuaActorLabHooks;
+            onStream: NonNullable<import("../../lab/run-lab-homes.js").RunLabHomes["onStream"]>;
             showIn: (observer: import("../../index.js").ObserverResult & {
                 ok: true;
             }) => void;
             attachFinal: (observer: import("../../index.js").ObserverResult) => void;
         };
-        env: NodeJS.ProcessEnv;
-        subjectRoute: CuaSubjectRoute;
+        env: Record<string, string | undefined>;
+        appUrl: string;
         fail: (code: CuaActorLabErrorCode, message: string, actorLabel?: string) => CuaActorLabResult;
         refuse: (code: CuaActorLabErrorCode, message: string, actorLabel?: string | undefined) => {
             ok: false;
             result: CuaActorLabResult;
         };
         descriptor: CuaActorDescriptor;
-        runSession: (options: import("../../actors/computer-use/actor.js").CuaActorSessionOptions) => Promise<import("../../index.js").CuaLoopResult>;
+        runSession: (options: import("../../actors/computer-use/actor.js").CuaActorSessionOptions) => Promise<import("../../index.js").ComputerUseLoopResult>;
         externalCommsConfig: LabCommsExternal | undefined;
         externalCommsEmail: LabCommsEmail | undefined;
         participantRuns: DesktopParticipantRun[];
@@ -123,7 +118,6 @@ export declare function admitCuaRun(plan: ComputerUsePlan, input: ComputerUseRun
         knownSecretValues: string[];
         scrubKnownValues: (text: string) => string;
         publicRepo: string | undefined;
-        hasGithubToken: boolean;
         localTreeArchive: LocalTreeArchive | undefined;
         localTreeArchiveBuffer: ArrayBuffer | undefined;
     };

package/dist/routes/computer-use/setup.js

@@ -1,6 +1,6 @@
-// The computer-use run's setup: resolve the project and route, plan the lanes, make the live
-// checks that need no sandbox, pack a local tree, then start the run and build the lane deps and
-// bundle base that the lanes and the finish share.
+// The computer-use run's setup: resolve the project and route, plan the participants, make the
+// live checks that need no sandbox, pack a local tree, then start the run and build the
+// participant deps and bundle base that the participants and the finish share.
 import { randomBytes } from "node:crypto";
 import { realpath } from "node:fs/promises";
 import path from "node:path";
@@ -15,14 +15,16 @@ import { emitPreflightPlan, compileParticipantPersonas, loadCuaParticipants, san
 import { makeCuaRunBudget } from "./participant-model.js";
 import { e2bRequestTimeoutMs } from "../../substrates/e2b/lifetime.js";
 import { liveCuaRejection } from "./preflight.js";
-import { cuaDescriptorOf, cuaSubjectRoute, cuaSubjectRouteOf, } from "./plan.js";
+import { cuaDescriptorOf, declaredAppUrl, plannedAppUrl } from "./plan.js";
 import { trackRuntimeStreams } from "./live-flush.js";
+import { phaseEvent, planEvent } from "../../lab/run-lab-events.js";
+import { defaultSubjectPhaseSink } from "../../subject/steps.js";
 import {} from "./bundle.js";
 import { packRunLocalTree } from "./local-tree-pack.js";
 import { projectParticipantSubjects, subjectProvenanceArg } from "./subject-projection.js";
-import { CUA_ACTOR_LAB_SCHEMA, } from "./types.js";
+import { participantSubjectEnv, } from "./types.js";
 import { labPersonaIds } from "../../lab/persona-resolve.js";
-import { participantDesktopOf } from "./participant-desktop.js";
+import { studyResultIdentity } from "../../run/study-result.js";
 /** The physical project, bound before any caller hook runs. */
 async function bindProject(cwd) {
     // Capture the physical project before reading or invoking any caller hook. A supported
@@ -32,23 +34,21 @@ async function bindProject(cwd) {
     return prepareSelectedOutputDirectory(path.dirname(physicalCwd), physicalCwd);
 }
 /**
- * The envelope of a refusal the plan left for after the cwd checks. The lane cap and in-process
- * fan-out refusals come after the committed personas are read, so a persona-file error still wins.
+ * The envelope of a refusal the plan left for after the cwd checks. The participant cap and
+ * in-process fan-out refusals come after the committed personas are read, so a persona-file error still wins.
  */
 export async function refuseCuaLab(options, refusal) {
     const { config, dryRun } = options;
     const projectRoot = await bindProject(options.cwd);
-    const hooks = options.hooks ?? {};
     // The committed personas are read before the refusal returns, so a persona-file error wins.
     if (refusal.stage === "after-personas")
         await compileParticipantPersonas(projectRoot, labPersonaIds(config));
     return {
-        schema: CUA_ACTOR_LAB_SCHEMA,
+        ...studyResultIdentity("computer-use", config.id),
         ok: false,
         cwd: projectRoot.physicalPath,
-        labId: config.id,
         actor: refusal.actor ?? config.actors[0]?.type ?? "",
-        appUrl: cuaSubjectRoute(config, hooks).appUrl,
+        appUrl: declaredAppUrl(config),
         dryRun,
         runId: options.runId ?? "not-created",
         lanes: [],
@@ -66,16 +66,17 @@ export async function admitCuaRun(plan, input, config) {
     const { dryRun } = plan;
     const projectRoot = await bindProject(input.cwd);
     const cwd = projectRoot.physicalPath;
-    const hooks = input.hooks ?? {};
-    const streams = trackRuntimeStreams(hooks);
-    const env = hooks.env ?? process.env;
-    const subjectRoute = cuaSubjectRouteOf(plan);
-    const { cloneRoute, localTreeRoute, inProcessRoute, appUrl, subjectRepo, subjectEnvNames } = subjectRoute;
+    const seams = input.deps ?? {};
+    const streams = trackRuntimeStreams(input.onStream);
+    const env = input.env ?? process.env;
+    const { subject, desktop } = plan.runner;
+    const inProcess = desktop === "in-process";
+    const appUrl = plannedAppUrl(subject);
+    const subjectEnvNames = [...participantSubjectEnv(subject)];
     const fail = (code, message, actorLabel) => ({
-        schema: CUA_ACTOR_LAB_SCHEMA,
+        ...studyResultIdentity("computer-use", plan.labId),
         ok: false,
         cwd,
-        labId: plan.labId,
         actor: actorLabel ?? plan.actor,
         appUrl,
         dryRun,
@@ -88,15 +89,29 @@ export async function admitCuaRun(plan, input, config) {
         ok: false,
         result: fail(...args),
     });
+    // runLab's local VM study supplies a local-target app-url lab's desktop; a direct route call or
+    // an in-process executor on the same lab has none. It reads the declared source, as the planner
+    // did: a library config the parser never saw can plan to an app-url subject from another source.
+    if (config.subject.source === "app-url" &&
+        config.execution?.target === "local" &&
+        input.localVm === undefined)
+        return refuse("HUMANISH_COMPUTER_USE_LOCAL_DESKTOP_MISSING", "An app-url lab with execution.target: local needs a local desktop. runLab starts one; a direct route call or an in-process executor does not.");
     const descriptor = cuaDescriptorOf(plan.actor);
-    const runSession = hooks.runSession ?? descriptor.runSession;
-    // Adopter-hosted comms plane on the app-url route (#380): humanish provisions no subject here,
-    // so it cannot host a catch — the OPERATOR runs one, and humanish still does every other part
+    const baseRunSession = seams.runSession ?? descriptor.runSession;
+    // A local VM study's sessions abort on its signal.
+    const localVmSignal = input.localVm?.signal;
+    const runSession = localVmSignal === undefined
+        ? baseRunSession
+        : (options) => baseRunSession({ ...options, signal: localVmSignal });
+    // Adopter-hosted comms plane on the app-url route: humanish provisions no subject here,
+    // so it cannot host a catch. The operator runs one, and humanish still does every other part
     // of the funnel: tells each persona its address and inbox URL, drains the catch over HTTP after
-    // the lanes, and writes the same digest-only evidence. Declaring `external` previously did
-    // nothing on this route (and, per #387, on every other) while its docs said otherwise.
+    // the participants, and writes the same digest-only evidence. Declaring `external` previously did
+    // nothing on this route (or on any other) while its docs said otherwise.
     const comms = plan.residual.comms;
-    const externalCommsConfig = !cloneRoute && !localTreeRoute && !inProcessRoute ? comms?.email?.external : undefined;
+    const externalCommsConfig = subject.kind !== "clone" && subject.kind !== "local-tree" && !inProcess
+        ? comms?.email?.external
+        : undefined;
     const externalCommsEmail = externalCommsConfig ? comms?.email : undefined;
     const participants = await loadCuaParticipants({ plan, cwd, projectRoot, env });
     if (!participants.ok) {
@@ -104,13 +119,13 @@ export async function admitCuaRun(plan, input, config) {
     }
     const { participantRuns, participantPlan, rerunLineage } = participants;
     const participantCount = participantRuns.length;
-    // Pre-flight plan: BEFORE any sandbox or provider call (dry-run AND live). The hook fires for
-    // every N (observable + testable); the stderr table prints for fan-out (N>1) so single-lane
-    // runs stay as quiet as they always were.
+    // Pre-flight plan: before any sandbox or provider call (dry-run and live). onEvent gets it for
+    // every N; the stderr table prints for fan-out (N>1) so single-participant runs stay as quiet as they
+    // always were.
     if (participantCount > 1) {
         emitPreflightPlan(participantPlan, plan.labId);
     }
-    hooks.onPreflight?.(participantPlan);
+    input.emit?.(planEvent(participantPlan));
     await assertPreparedSelectedOutputDirectory(projectRoot);
     // Read keys once into locals (names only; values never logged or persisted).
     const openaiApiKey = env.OPENAI_API_KEY?.trim() ?? "";
@@ -124,39 +139,35 @@ export async function admitCuaRun(plan, input, config) {
     const scrubKnownValues = scrubLiterals(knownSecretValues);
     sanitizeParticipantRuns(participantRuns, scrubKnownValues);
     const redactRepoLabel = plan.residual.policies?.redactRepos ?? subjectEnvNames.includes("GITHUB_TOKEN");
-    const publicRepo = cloneRoute && subjectRepo ? (redactRepoLabel ? "repo-01" : subjectRepo) : undefined;
-    const hasGithubToken = subjectEnvNames.includes("GITHUB_TOKEN");
-    // Key-gating is route-aware: the in-process route uses the caller's OWN model + executor, and
+    const publicRepo = subject.kind === "clone" ? (redactRepoLabel ? "repo-01" : subject.repo) : undefined;
+    // Key-gating is route-aware: the in-process route uses the caller's own model + executor, and
     // the local-agent route uses a CLI the operator has already signed in to.
-    if (!dryRun && !inProcessRoute) {
+    if (!dryRun && !inProcess) {
         const rejection = await liveCuaRejection({
             caps: plan.caps,
             brain: plan.runner.brain,
-            hooks,
             env,
-            openaiApiKey,
-            e2bApiKey,
-            subjectEnvNames,
+            requirements: plan.requirements,
             externalCommsConfig,
         });
         if (rejection)
             return refuse(rejection.code, rejection.message, descriptor.id);
     }
-    // Pack the working tree ONCE per run, on the host, BEFORE any sandbox or provider call: every
-    // fan-out lane below uploads this SAME archive, so one archiveSha256 describes every lane's
-    // digest. Dry-run packs nothing (no fs side effects; the contract bundle carries no
+    // Pack the working tree once per run, on the host, before any sandbox or provider call: every
+    // fan-out participant below uploads this same archive, so one archiveSha256 describes every
+    // participant's digest. Dry-run packs nothing (no fs side effects; the contract bundle carries no
     // archiveSha256). A packing failure fails the run closed here, before any sandbox is
     // created and before the run directory exists.
     let localTreeArchive;
     let localTreeArchiveBuffer;
-    if (localTreeRoute && !dryRun) {
+    if (subject.kind === "local-tree" && !dryRun) {
         try {
-            const packed = await packRunLocalTree(hooks, plan.residual, cwd);
+            const packed = await packRunLocalTree(seams, plan.residual, cwd);
             localTreeArchive = packed.archive;
             localTreeArchiveBuffer = packed.buffer;
         }
         catch (error) {
-            return refuse("HUMANISH_CUA_LAB_SUBJECT_INVALID", `local-tree packing failed: ${redactText(scrubKnownValues(toErrorMessage(error)))}`, descriptor.id);
+            return refuse("HUMANISH_COMPUTER_USE_SUBJECT_INVALID", `local-tree packing failed: ${redactText(scrubKnownValues(toErrorMessage(error)))}`, descriptor.id);
         }
     }
     return {
@@ -165,10 +176,10 @@ export async function admitCuaRun(plan, input, config) {
             config,
             dryRun,
             cwd,
-            hooks,
+            seams,
             streams,
             env,
-            subjectRoute,
+            appUrl,
             fail,
             refuse,
             descriptor,
@@ -184,7 +195,6 @@ export async function admitCuaRun(plan, input, config) {
             knownSecretValues,
             scrubKnownValues,
             publicRepo,
-            hasGithubToken,
             localTreeArchive,
             localTreeArchiveBuffer,
         },
@@ -192,8 +202,8 @@ export async function admitCuaRun(plan, input, config) {
 }
 /** Starts the run and builds what the participants and the finish read: the deps and the bundle base. */
 export async function startCuaRun(plan, input, admitted, scope) {
-    const { config, dryRun, cwd, hooks, descriptor, participantRuns, participantPlan, publicRepo } = admitted;
-    const { appUrl, inProcessRoute, localAppSubject, cloneRoute, localTreeRoute, subjectEnvNames } = admitted.subjectRoute;
+    const { dryRun, cwd, seams, descriptor, participantRuns, participantPlan, publicRepo } = admitted;
+    const { appUrl } = admitted;
     // The run's status record exists from here on, so anything watching the runs directory can
     // tell which lab this is and that it is alive. The fail-closed returns below leave it finished
     // with no outcome when the scope closes; a crash leaves it stale, which reads as interrupted.
@@ -204,12 +214,12 @@ export async function startCuaRun(plan, input, admitted, scope) {
         mode: dryRun ? "dry-run" : "live",
         lab: plan.lab,
         renderReview: renderCuaReviewMarkdown,
-        observer: { open: input.open === true, render: hooks.renderObserverFn },
+        observer: { open: input.open === true, render: seams.renderObserver },
     });
     if (!started.ok)
         return admitted.refuse(started.code, started.message, descriptor.id);
     const { run } = started;
-    const { runId, createdAt, paths: runPaths } = run;
+    const { createdAt, paths: runPaths } = run;
     const redactScreenshots = plan.residual.policies?.redactScreenshots === true;
     await prepareContainedOutputDirectory(runPaths, "screenshots");
     const source = await buildRunSource({
@@ -218,8 +228,8 @@ export async function startCuaRun(plan, input, admitted, scope) {
         humanishSource: "present",
         packageName: "humanish",
     });
-    // Live-trace flush seam (#441): runLabParticipants fills it when a live run has an in-progress bundle
-    // to grow; lanes call it through deps.onTrace. It exists before deps so deps can reference it as
+    // Live-trace flush seam: runLabParticipants fills it when a live run has an in-progress bundle
+    // to grow; participants call it through deps.onTrace. It exists before deps so deps can reference it as
     // a stable indirection.
     const liveTrace = {};
     const deps = cuaParticipantDeps(plan, input, admitted, {
@@ -229,7 +239,6 @@ export async function startCuaRun(plan, input, admitted, scope) {
     });
     const subjectArgs = {
         plan,
-        subjectRoute: admitted.subjectRoute,
         ...(publicRepo === undefined ? {} : { publicRepo }),
         ...(admitted.localTreeArchive === undefined
             ? {}
@@ -242,25 +251,20 @@ export async function startCuaRun(plan, input, admitted, scope) {
         dryRun: false,
     });
     const inProgressAggregateSubject = inProgressSubjects[0];
-    const inProgressProvenance = subjectProvenanceArg(inProgressAggregateSubject, publicRepo, subjectEnvNames);
+    const inProgressProvenance = subjectProvenanceArg(inProgressAggregateSubject, publicRepo, [
+        ...participantSubjectEnv(plan.runner.subject),
+    ]);
     const bundleBase = {
-        ...(plan.lab === undefined ? {} : { lab: plan.lab }),
+        run,
         participantRuns,
         descriptor,
         appUrl,
-        createdAt,
         plan,
-        runId,
         source,
         participantPlan,
         ...(admitted.rerunLineage === undefined ? {} : { rerun: admitted.rerunLineage }),
         redactScreenshots,
-        inProcessRoute,
-        localAppSubject,
-        cloneRoute,
-        localTreeRoute,
         ...(publicRepo === undefined ? {} : { publicRepo }),
-        subjectEnvNames,
     };
     const { externalCommsConfig, externalCommsEmail } = admitted;
     return {
@@ -268,10 +272,8 @@ export async function startCuaRun(plan, input, admitted, scope) {
         setup: {
             plan,
             input,
-            config,
             cwd,
             descriptor,
-            subjectRoute: admitted.subjectRoute,
             run,
             streams: admitted.streams,
             participantRuns,
@@ -294,35 +296,30 @@ export async function startCuaRun(plan, input, admitted, scope) {
             },
             fail: admitted.fail,
         },
-        finish: { hooks, rerunLineage: admitted.rerunLineage, publicRepo, subjectArgs },
+        finish: { rerunLineage: admitted.rerunLineage, publicRepo, subjectArgs },
     };
 }
-/** The lane deps every lane reads: the route, keys, timeouts, scrubber, budget and hooks. */
+/** The participant deps every participant reads: the route, keys, timeouts, scrubber, budget and seams. */
 function cuaParticipantDeps(plan, input, admitted, run) {
-    const { config, dryRun, hooks, streams, env, descriptor, runSession, participantCount } = admitted;
-    const { hasGithubToken, localTreeArchiveBuffer } = admitted;
+    const { config, dryRun, seams, streams, env, runSession, participantCount } = admitted;
+    const { localTreeArchiveBuffer } = admitted;
     const { openaiApiKey, e2bApiKey, scrubKnownValues } = admitted;
     const { externalCommsConfig, externalCommsEmail } = admitted;
-    const { appUrl, cloneRoute, desktopCliRoute, localTreeRoute, serve, subjectRepo } = admitted.subjectRoute;
-    const { subjectEnvNames } = admitted.subjectRoute;
+    const { appUrl } = admitted;
     const { runPaths, redactScreenshots, liveTrace } = run;
-    const createDesktop = participantDesktopOf(hooks);
+    const createDesktop = input.localVm?.desktop;
     const timeoutMs = plan.sessionBudgetMs;
     const requestTimeoutMs = e2bRequestTimeoutMs(env);
     return {
         ...(createDesktop === undefined ? {} : { createDesktop }),
         onTrace: (participantId, items, usage, metadata) => liveTrace.flush?.(participantId, items, usage, metadata),
-        config,
-        descriptor,
+        ...callerDriving(input, config),
+        residual: plan.residual,
+        labId: plan.labId,
+        caps: plan.caps,
         appUrl,
         brain: plan.runner.brain,
-        cloneRoute,
-        desktopCliRoute,
-        localTreeRoute,
-        ...(serve === undefined ? {} : { serve }),
-        ...(subjectRepo === undefined ? {} : { subjectRepo }),
-        subjectEnvNames,
-        hasGithubToken,
+        subject: plan.runner.subject,
         ...(localTreeArchiveBuffer === undefined ? {} : { localTreeArchiveBuffer }),
         env,
         openaiApiKey,
@@ -336,7 +333,7 @@ function cuaParticipantDeps(plan, input, admitted, run) {
         redactScreenshots,
         scrubKnownValues,
         runSession,
-        // The study-level ledger exists once per RUN, shared by every lane (#299). Dry runs never
+        // The study-level ledger exists once per run, shared by every participant. Dry runs never
         // spend, so they carry none.
         ...(dryRun || plan.caps.maxTotalUsd === undefined
             ? {}
@@ -349,8 +346,34 @@ function cuaParticipantDeps(plan, input, admitted, run) {
                     inboxUrl: externalInboxUrl(externalCommsConfig),
                 },
             }),
-        now: hooks.now ?? Date.now,
-        hooks: streams.hooks,
+        now: seams.now ?? Date.now,
+        ...(seams.desktopModule === undefined ? {} : { desktopModule: seams.desktopModule }),
+        ...(input.prepareDesktop === undefined ? {} : { prepareDesktop: input.prepareDesktop }),
+        ...(seams.detachedTimers === undefined ? {} : { detachedTimers: seams.detachedTimers }),
+        onStream: streams.onStream,
+        reportSubjectPhase: subjectPhaseReporter(input),
+    };
+}
+/** The caller's createProvider and inProcess executor, with the run's config bound. */
+function callerDriving(input, config) {
+    const { createProvider, inProcess } = input;
+    return {
+        ...(createProvider === undefined
+            ? {}
+            : {
+                createProvider: (participant, executor) => createProvider({ config, participant, executor }),
+            }),
+        ...(inProcess === undefined
+            ? {}
+            : { inProcessExecutor: (appUrl) => inProcess.executor({ config, appUrl }) }),
+    };
+}
+/** Each subject phase goes to the phase sink, stderr by default, and to onEvent. */
+function subjectPhaseReporter(input) {
+    const sink = input.deps?.subjectPhaseSink ?? defaultSubjectPhaseSink;
+    return (event, participant) => {
+        sink(event, participant);
+        input.emit?.(phaseEvent(event, { kind: "participant", participant }));
     };
 }
 function makeCuaRunId() {