humanish 0.108.0 → 0.109.0

package/dist/guest/desktop-media.js

@@ -1,6 +1,6 @@
 import { spawn } from "node:child_process";
 import { CUA_SPEECH_LIMITS } from "../actors/computer-use/speech.js";
-import { CuaExecutorError } from "../actors/computer-use/executor-error.js";
+import { ComputerUseExecutorError } from "../actors/computer-use/executor-error.js";
 const WORKER_LINE_BYTES = 8_192;
 const READY_TIMEOUT_MS = 35_000;
 const SPEAK_TIMEOUT_MS = 30_000;
@@ -131,9 +131,9 @@ export function dispositionAfterWrite(written) {
 }
 /** A failed speak keeps its own executor error; anything else is an execution failure. */
 export function speakFailure(error, written) {
-    return error instanceof CuaExecutorError
+    return error instanceof ComputerUseExecutorError
         ? error
-        : new CuaExecutorError("execution_failed", dispositionAfterWrite(written));
+        : new ComputerUseExecutorError("execution_failed", dispositionAfterWrite(written));
 }
 function rejectPending(state, error) {
     for (const command of state.pending.values()) {
@@ -147,7 +147,7 @@ function terminateMedia(state, readiness, onTerminal) {
     if (state.closed || state.expectedExit)
         return;
     state.closed = true;
-    const error = new CuaExecutorError("execution_failed", "outcome_uncertain");
+    const error = new ComputerUseExecutorError("execution_failed", "outcome_uncertain");
     readiness.reject(error);
     rejectPending(state, error);
     try {
@@ -182,7 +182,7 @@ function applyWorkerMessage(state, value, readiness, terminate) {
             if (message.ok)
                 command.resolve();
             else
-                command.reject(new CuaExecutorError("execution_failed", "outcome_uncertain"));
+                command.reject(new ComputerUseExecutorError("execution_failed", "outcome_uncertain"));
             return;
         }
         case "terminal":
@@ -223,13 +223,13 @@ async function closeDesktopMedia(state, transport, detach) {
     state.expectedExit = true;
     state.closed = true;
     detach();
-    rejectPending(state, new CuaExecutorError("session_revoked", "outcome_uncertain"));
+    rejectPending(state, new ComputerUseExecutorError("session_revoked", "outcome_uncertain"));
     state.closing = Promise.resolve().then(() => transport.close());
     return state.closing;
 }
 async function awaitWorkerReady(readiness, signal, close, readyTimer) {
     const readinessAbort = () => {
-        readiness.reject(new CuaExecutorError("session_revoked", "not_dispatched"));
+        readiness.reject(new ComputerUseExecutorError("session_revoked", "not_dispatched"));
     };
     signal.addEventListener("abort", readinessAbort, { once: true });
     try {
@@ -247,17 +247,17 @@ async function awaitWorkerReady(readiness, signal, close, readyTimer) {
 /** Adds queued heard speech to each observation, at most HEARD_PER_OBSERVATION at a time. */
 async function observeWithHeardSpeech(state, executor) {
     if (state.closed)
-        throw new CuaExecutorError("execution_failed", "not_dispatched");
+        throw new ComputerUseExecutorError("execution_failed", "not_dispatched");
     const observation = await executor.observe();
     if (state.closed)
-        throw new CuaExecutorError("execution_failed", "not_dispatched");
+        throw new ComputerUseExecutorError("execution_failed", "not_dispatched");
     const items = state.heard.splice(0, HEARD_PER_OBSERVATION);
     return items.length ? { ...observation, heardSpeech: items } : observation;
 }
 /** Passes every action but `speak` to the executor; `speak` goes to the worker and waits for its reply. */
 async function executeWithSpeech(state, executor, channel, action, signal) {
     if (state.closed)
-        throw new CuaExecutorError("execution_failed", "not_dispatched");
+        throw new ComputerUseExecutorError("execution_failed", "not_dispatched");
     const candidate = action;
     if (candidate.kind !== "speak")
         return executor.execute(action, signal);
@@ -266,7 +266,7 @@ async function executeWithSpeech(state, executor, channel, action, signal) {
         state.closed ||
         channel.ownerSignal.aborted ||
         signal?.aborted) {
-        throw new CuaExecutorError("action_rejected", "not_dispatched");
+        throw new ComputerUseExecutorError("action_rejected", "not_dispatched");
     }
     const id = `speak-${state.nextCommand++}`;
     const combined = signal ? AbortSignal.any([channel.ownerSignal, signal]) : channel.ownerSignal;
@@ -274,7 +274,7 @@ async function executeWithSpeech(state, executor, channel, action, signal) {
     const operation = new Promise((resolve, reject) => {
         const timer = setTimeout(() => {
             state.pending.delete(id);
-            reject(new CuaExecutorError("deadline_exceeded", dispositionAfterWrite(written)));
+            reject(new ComputerUseExecutorError("deadline_exceeded", dispositionAfterWrite(written)));
             void channel.close().catch(() => { });
         }, SPEAK_TIMEOUT_MS);
         state.pending.set(id, { resolve, reject, timer });
@@ -286,7 +286,7 @@ async function executeWithSpeech(state, executor, channel, action, signal) {
             return;
         state.pending.delete(id);
         clearTimeout(command.timer);
-        command.reject(new CuaExecutorError("session_revoked", dispositionAfterWrite(written)));
+        command.reject(new ComputerUseExecutorError("session_revoked", dispositionAfterWrite(written)));
         void channel.close().catch(() => { });
     };
     combined.addEventListener("abort", cancelled, { once: true });
@@ -311,7 +311,7 @@ async function executeWithSpeech(state, executor, channel, action, signal) {
 }
 function wrapMediaExecutor(state, executor, channel) {
     if (state.wrapped)
-        throw new CuaExecutorError("invalid_request", "not_dispatched");
+        throw new ComputerUseExecutorError("invalid_request", "not_dispatched");
     state.wrapped = true;
     const wrapped = {
         ...executor,
@@ -324,7 +324,7 @@ function wrapMediaExecutor(state, executor, channel) {
 /** Starts optional native guest media before Chromium and later decorates its finite executor. */
 export async function startDesktopMedia(options) {
     if (!isSupportedMediaDeclaration(options.media))
-        throw new CuaExecutorError("invalid_request", "not_dispatched");
+        throw new ComputerUseExecutorError("invalid_request", "not_dispatched");
     options.signal.throwIfAborted();
     const env = desktopMediaEnv(options.env, options.media);
     const transport = options.transport ??
@@ -365,7 +365,7 @@ export async function startDesktopMedia(options) {
         await transport.close().catch(() => { });
         throw error;
     }
-    const readyTimer = setTimeout(() => readiness.reject(new CuaExecutorError("deadline_exceeded", "not_dispatched")), READY_TIMEOUT_MS);
+    const readyTimer = setTimeout(() => readiness.reject(new ComputerUseExecutorError("deadline_exceeded", "not_dispatched")), READY_TIMEOUT_MS);
     const abort = () => {
         void close();
     };

package/dist/guest/desktop-native.js

@@ -2,9 +2,9 @@ import { spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { mkdtemp, open, rm } from "node:fs/promises";
 import { join } from "node:path";
-import { CuaExecutorError } from "../actors/computer-use/executor-error.js";
+import { ComputerUseExecutorError } from "../actors/computer-use/executor-error.js";
 import { BROWSER_CONTROL_LIMITS } from "../browser-control/protocol.js";
-class UnconfirmedHelperExit extends CuaExecutorError {
+class UnconfirmedHelperExit extends ComputerUseExecutorError {
     constructor() {
         super("execution_failed", "outcome_uncertain");
     }
@@ -14,7 +14,7 @@ export function createGuestDesktopNativeTools(options) {
     if (!/^:[0-9]{1,3}(?:\.[0-9])?$/.test(options.display) ||
         !options.temporaryDirectory.startsWith("/") ||
         !options.xauthority.startsWith("/")) {
-        throw new CuaExecutorError("invalid_request", "not_dispatched");
+        throw new ComputerUseExecutorError("invalid_request", "not_dispatched");
     }
     const environment = {
         PATH: "/usr/bin:/bin",
@@ -28,7 +28,7 @@ export function createGuestDesktopNativeTools(options) {
     // stderr can contain user text; consume it with a bound, never return or log it.
     async function helper(binary, args, signal, text) {
         if (signal.aborted)
-            throw new CuaExecutorError("session_revoked", "not_dispatched");
+            throw new ComputerUseExecutorError("session_revoked", "not_dispatched");
         return await new Promise((resolve, reject) => {
             const child = spawn(`/usr/bin/${binary}`, [...args], {
                 cwd: options.temporaryDirectory,
@@ -81,7 +81,7 @@ export function createGuestDesktopNativeTools(options) {
                 clearTimeout(killDeadline);
                 signal.removeEventListener("abort", abort);
                 if (failed || code !== 0)
-                    reject(new CuaExecutorError(failureCode, "outcome_uncertain"));
+                    reject(new ComputerUseExecutorError(failureCode, "outcome_uncertain"));
                 else
                     resolve(Buffer.concat(stdout));
             });
@@ -97,19 +97,19 @@ export function createGuestDesktopNativeTools(options) {
         async activeWindowId(signal) {
             const value = (await helper("xdotool", ["getactivewindow"], signal)).toString("utf8");
             if (!/^[1-9][0-9]{0,9}\n?$/.test(value) || Number(value.trim()) > 0xffffffff)
-                throw new CuaExecutorError("action_rejected", "not_dispatched");
+                throw new ComputerUseExecutorError("action_rejected", "not_dispatched");
             return value.trim();
         },
         async typeAscii(text, signal) {
             if (!/^[\x20-\x7e]+$/.test(text) ||
                 Buffer.byteLength(text) > BROWSER_CONTROL_LIMITS.textBytes) {
-                throw new CuaExecutorError("action_rejected", "not_dispatched");
+                throw new ComputerUseExecutorError("action_rejected", "not_dispatched");
             }
             await helper("xdotool", ["type", "--clearmodifiers", "--delay", "0", "--file", "-"], signal, text);
         },
         async capture(signal) {
             if (signal.aborted)
-                throw new CuaExecutorError("session_revoked", "not_dispatched");
+                throw new ComputerUseExecutorError("session_revoked", "not_dispatched");
             const directory = await mkdtemp(join(options.temporaryDirectory, "capture-"));
             const path = join(directory, "frame.png");
             let reclaim = true;
@@ -122,7 +122,7 @@ export function createGuestDesktopNativeTools(options) {
                         stat.nlink !== 1 ||
                         stat.size <= 0 ||
                         stat.size > BROWSER_CONTROL_LIMITS.pngBytes) {
-                        throw new CuaExecutorError("invalid_response", "not_dispatched");
+                        throw new ComputerUseExecutorError("invalid_response", "not_dispatched");
                     }
                     const buffer = Buffer.alloc(stat.size + 1);
                     let offset = 0;
@@ -133,7 +133,7 @@ export function createGuestDesktopNativeTools(options) {
                         offset += bytesRead;
                     }
                     if (offset !== stat.size)
-                        throw new CuaExecutorError("invalid_response", "not_dispatched");
+                        throw new ComputerUseExecutorError("invalid_response", "not_dispatched");
                     return buffer.subarray(0, offset);
                 }
                 finally {

package/dist/guest/runtime-desktop.js

@@ -7,7 +7,7 @@ import { createGuestDesktopNativeTools } from "./desktop-native.js";
 import { createGuestChromiumText } from "./chromium-text.js";
 import { createGuestBrowserTools } from "./browser-tools.js";
 import { createGuestDesktopExecutor } from "./desktop-executor.js";
-import { CuaExecutorError } from "../actors/computer-use/executor-error.js";
+import { ComputerUseExecutorError } from "../actors/computer-use/executor-error.js";
 import { GUEST_BOOTSTRAP_LIMITS, validateGuestInitialUrl } from "./bootstrap.js";
 import { startDesktopMedia, } from "./desktop-media.js";
 import { startDesktopRecorder } from "../evidence/desktop-recorder.js";
@@ -220,7 +220,7 @@ async function verifyBrowserSandbox(context, page, check) {
 function focusGuard(native, window) {
     return async (actionSignal) => {
         if ((await native.activeWindowId(actionSignal)) !== window)
-            throw new CuaExecutorError("action_rejected", "not_dispatched");
+            throw new ComputerUseExecutorError("action_rejected", "not_dispatched");
     };
 }
 async function createGuestExecutorFor(state, browser, signal, onTerminal, check) {

package/dist/guest/runtime-processes.d.ts

@@ -1,6 +1,6 @@
 import { type ChildProcess } from "node:child_process";
-import { CuaExecutorError } from "../actors/computer-use/executor-error.js";
-export declare const setupFailed: () => CuaExecutorError;
+import { ComputerUseExecutorError } from "../actors/computer-use/executor-error.js";
+export declare const setupFailed: () => ComputerUseExecutorError;
 export interface GuestProcesses {
     /** `done` resolves when the child exits 0 within its bounds and rejects otherwise. */
     spawn(binary: string, args: readonly string[], input?: string, persistent?: boolean): {

package/dist/guest/runtime-processes.js

@@ -1,10 +1,10 @@
 import { spawn } from "node:child_process";
-import { CuaExecutorError } from "../actors/computer-use/executor-error.js";
+import { ComputerUseExecutorError } from "../actors/computer-use/executor-error.js";
 /** A short-lived helper that has not exited by then is killed. Persistent children have no bound. */
 const HELPER_TIMEOUT_MS = 2000;
 /** Helpers report success through exit status, so stderr past this budget is a failure. */
 const STDERR_LIMIT_BYTES = 16_384;
-export const setupFailed = () => new CuaExecutorError("execution_failed", "not_dispatched");
+export const setupFailed = () => new ComputerUseExecutorError("execution_failed", "not_dispatched");
 /**
  * The guest desktop's fixed child processes. A persistent child (the display server, the window
  * manager) that exits, fails or is killed by the owner's abort reports `onTerminal` unless the

package/dist/guest/runtime.js

@@ -1,6 +1,6 @@
 import { attachBrowserControlDispatcher } from "../browser-control/dispatcher.js";
 import { encodeGuestBootstrap, GuestBootstrapReader, GUEST_BOOTSTRAP_LIMITS, guestReadyTimeoutMs, } from "./bootstrap.js";
-import { CuaExecutorError } from "../actors/computer-use/executor-error.js";
+import { ComputerUseExecutorError } from "../actors/computer-use/executor-error.js";
 /** One admitted desktop and one dispatcher. The owner retains physical teardown. */
 export async function runGuestRuntime(options) {
     const owner = new AbortController();
@@ -77,7 +77,7 @@ export async function runGuestRuntime(options) {
         reader = new GuestBootstrapReader(options.transport, options.revision, authority, false, terminal);
         const identity = await reader.identity;
         if (authority.aborted)
-            throw new CuaExecutorError("session_revoked", "not_dispatched");
+            throw new ComputerUseExecutorError("session_revoked", "not_dispatched");
         clearTimeout(timer);
         timer = setTimeout(() => {
             void close();
@@ -87,7 +87,7 @@ export async function runGuestRuntime(options) {
         desktop = await Promise.race([
             preparing,
             new Promise((_, reject) => {
-                const stop = () => reject(new CuaExecutorError("session_revoked", "not_dispatched"));
+                const stop = () => reject(new ComputerUseExecutorError("session_revoked", "not_dispatched"));
                 authority.addEventListener("abort", stop, { once: true });
                 void preparing.finally(() => authority.removeEventListener("abort", stop)).catch(() => { });
                 if (authority.aborted)
@@ -95,7 +95,7 @@ export async function runGuestRuntime(options) {
             }),
         ]);
         if (authority.aborted)
-            throw new CuaExecutorError("session_revoked", "not_dispatched");
+            throw new ComputerUseExecutorError("session_revoked", "not_dispatched");
         reader.handoff();
         dispatcher = attachBrowserControlDispatcher({
             transport: options.transport,
@@ -112,7 +112,7 @@ export async function runGuestRuntime(options) {
         });
         options.transport.resume();
         if (authority.aborted || options.transport.destroyed)
-            throw new CuaExecutorError("session_revoked", "not_dispatched");
+            throw new ComputerUseExecutorError("session_revoked", "not_dispatched");
         options.marker("R");
         clearTimeout(timer);
         return { close, closed };

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-export { runPackageLab as runStudy } from "./run-lab.js";
-export type { LabOutcome as StudyOutcome, LabResult as StudyResult, RunLabOptions as RunStudyOptions, } from "./run-lab.js";
-export type { LabEvent as StudyEvent } from "./lab/run-lab-events.js";
-export type { ProviderContext } from "./lab/run-lab-homes.js";
-export { routeOf } from "./lab/plan.js";
-export type { LabRoute as StudyRoute } from "./lab/plan.js";
-export { parseLabConfig as parseStudy } from "./lab/config.js";
-export { STUDY_SCHEMA } from "./lab/types.js";
-export type { LabConfig as StudyConfig } from "./lab/types.js";
+export { runStudy } from "./run-study.js";
+export type { StudyOutcome, StudyResult, RunStudyOptions } from "./run-study.js";
+export type { StudyEvent } from "./study/run-study-events.js";
+export type { ProviderContext } from "./study/run-study-homes.js";
+export { routeOf } from "./study/plan.js";
+export type { StudyRoute } from "./study/plan.js";
+export { parseStudy } from "./study/config.js";
+export { STUDY_SCHEMA } from "./study/types.js";
+export type { StudyConfig } from "./study/types.js";
 export { verifyRun } from "./verify/verify.js";
 export type { VerifyResult } from "./verify/verify.js";
 export { renderObserver } from "./observer/render.js";
@@ -18,14 +18,12 @@ export type { CuaAction as ComputerUseAction, CuaExecutor as ComputerUseExecutor
 export type { ActorCapabilities } from "./actors/contract.js";
 export { createOpenAiResponsesProvider } from "./actors/computer-use/openai-provider.js";
 export type { OpenAiResponsesProviderOptions } from "./actors/computer-use/openai-provider.js";
-export { CuaAdmissionLimitError as ComputerUseAdmissionLimitError } from "./actors/computer-use/admission-limit.js";
+export { ComputerUseAdmissionLimitError } from "./actors/computer-use/admission-limit.js";
 export { defaultRedactionHooks } from "./evidence/redaction.js";
 export type { RedactionHooks } from "./evidence/redaction.js";
 export type { E2BDesktopSandbox } from "./substrates/e2b/sdk.js";
-export { browserScorer, terminalScorer } from "./lab/adapter-scorer-loader.js";
-export type { AdapterScorerModule, AdapterScoringContext } from "./lab/adapter-scorer-loader.js";
-export type { BrowserLabScoringContext as BrowserScoringContext } from "./lab/adapter-extension.js";
+export { browserScorer, terminalScorer } from "./study/adapter-scorer-loader.js";
+export type { AdapterScorerModule, AdapterScoringContext } from "./study/adapter-scorer-loader.js";
+export type { BrowserScoringContext } from "./study/adapter-extension.js";
 export type { TerminalProductScoringContext } from "./routes/terminal/types.js";
 export type { RunAdapterArtifact, RunAdapterScore } from "./run/bundle.js";
-export { CuaAdmissionLimitError, LAB_CONFIG_SCHEMA, parseLabConfig, runLab, } from "./library-aliases.js";
-export type { BrowserLabScoringContext, CuaAction, CuaExecutor, CuaLoopOptions, CuaLoopResult, CuaObservation, CuaProvider, CuaSafetyCheck, CuaTurn, CuaTurnRequest, LabConfig, LabEvent, LabOutcome, LabResult, LabRoute, RunLabOptions, } from "./library-aliases.js";

package/dist/index.js

@@ -2,19 +2,17 @@
 // score a run. Everything else is internal and reached through the `humanish` bin. See
 // docs/contracts/schemas.md, "Library options", and the site's library page.
 // Run a study.
-export { runPackageLab as runStudy } from "./run-lab.js";
-export { routeOf } from "./lab/plan.js";
-export { parseLabConfig as parseStudy } from "./lab/config.js";
-export { STUDY_SCHEMA } from "./lab/types.js";
+export { runStudy } from "./run-study.js";
+export { routeOf } from "./study/plan.js";
+export { parseStudy } from "./study/config.js";
+export { STUDY_SCHEMA } from "./study/types.js";
 // Read a run.
 export { verifyRun } from "./verify/verify.js";
 export { renderObserver } from "./observer/render.js";
 // Bring a participant.
 export { runComputerUseLoop, stableProgressKey } from "./actors/computer-use/loop.js";
 export { createOpenAiResponsesProvider } from "./actors/computer-use/openai-provider.js";
-export { CuaAdmissionLimitError as ComputerUseAdmissionLimitError } from "./actors/computer-use/admission-limit.js";
+export { ComputerUseAdmissionLimitError } from "./actors/computer-use/admission-limit.js";
 export { defaultRedactionHooks } from "./evidence/redaction.js";
 // Score a run.
-export { browserScorer, terminalScorer } from "./lab/adapter-scorer-loader.js";
-// The 0.107 names, deprecated until 0.109 removes them. Each is its new name's value or type.
-export { CuaAdmissionLimitError, LAB_CONFIG_SCHEMA, parseLabConfig, runLab, } from "./library-aliases.js";
+export { browserScorer, terminalScorer } from "./study/adapter-scorer-loader.js";

package/dist/observer/artifact.d.ts

@@ -2,7 +2,7 @@ import type { LoadedAnalysis } from "../analysis/types.js";
 import { type ObserverData } from "./data.js";
 /**
  * Resolve (and in a repo checkout, build) the Observer artifact before any run or
- * lab work starts. A missing artifact must cost seconds at startup, never a completed
+ * study work starts. A missing artifact must cost seconds at startup, never a completed
  * session (a live participant spends real money before the render step would have noticed).
  * Unconditional on purpose: the artifact is the only renderer now, so the fail-before-
  * spend property this preflight bought under the flag matters more, not less.

package/dist/observer/artifact.js

@@ -12,7 +12,7 @@ const OBSERVER_DATA_SLOT = `<script id="observer-data" type="application/json">$
 let cachedObserverArtifact = null;
 /**
  * Resolve (and in a repo checkout, build) the Observer artifact before any run or
- * lab work starts. A missing artifact must cost seconds at startup, never a completed
+ * study work starts. A missing artifact must cost seconds at startup, never a completed
  * session (a live participant spends real money before the render step would have noticed).
  * Unconditional on purpose: the artifact is the only renderer now, so the fail-before-
  * spend property this preflight bought under the flag matters more, not less.

package/dist/observer/data.d.ts

@@ -42,7 +42,7 @@ export interface ObserverData {
         /** The same thing as one readable line, so a renderer cannot accidentally show a number
          *  without its denominator. */
         participantsLine?: string;
-        /** The study's per-task completion rates, when the lab declared a protocol. */
+        /** The study's per-task completion rates, when the study declared a protocol. */
         tasks?: RunBundle["review"]["tasks"];
         /** Pre-formatted like participantsLine, denominator on every number. */
         tasksLine?: string;

package/dist/observer/library.d.ts

@@ -13,6 +13,8 @@ export interface LibraryHistory {
         estimatedCostUsd: number | null;
         costRatesAsOf: string | null;
         costPlaceholder: boolean;
+        /** The row's cost text: participants and desktops plus the run's analyses (src/run/run-cost.ts). */
+        costLabel: string | null;
     }>;
 }
 export interface LibraryRenderOptions {

package/dist/observer/library.js

@@ -127,7 +127,10 @@ function libraryClientJs() {
       var metaBits = [run.mode || "unknown", run.streamCount + " participants", run.createdAt || ""];
       // Labeled cost token: ALWAYS "~$X est." (never a bare "$X"), so the library never implies an
       // authoritative charge. Null = omitted (advisory, fail-open on display).
-      if (run.estimatedCostUsd != null) {
+      if (run.costLabel) {
+        metaBits.push(run.costLabel + (run.costPlaceholder ? " (placeholder)" : ""));
+        if (run.costRatesAsOf) meta.title = "estimated, rates as of " + run.costRatesAsOf;
+      } else if (run.estimatedCostUsd != null) {
         metaBits.push("~$" + Number(run.estimatedCostUsd).toFixed(2) + " est." + (run.costPlaceholder ? " (placeholder)" : ""));
         if (run.costRatesAsOf) meta.title = "estimated, rates as of " + run.costRatesAsOf;
       }

package/dist/observer/render.js

@@ -1,5 +1,7 @@
 import { spawn } from "node:child_process";
 import { runNotFoundMessage } from "../run/run-not-found.js";
+import { readAnalysisAccounting } from "../run/costs.js";
+import { analysisCostOf } from "../run/run-cost.js";
 import { accessSync, constants } from "node:fs";
 import { realpath } from "node:fs/promises";
 import { createServer } from "node:http";
@@ -92,7 +94,11 @@ export async function renderObserver(cwdInput, runInput, options = {}) {
         throw new Error("Observer output directory does not match the selected run.");
     }
     const observerPath = path.join(preparedRunPaths.physicalRunRoot, "observer", "index.html");
-    const analysis = projectShareCheckedAnalysis(await loadAnalysis(preparedRunPaths));
+    const spend = analysisCostOf(await readAnalysisAccounting(preparedRunPaths));
+    const analysis = {
+        ...projectShareCheckedAnalysis(await loadAnalysis(preparedRunPaths)),
+        ...(spend === null ? {} : { spend }),
+    };
     const observerData = buildObserverData(loaded.bundle);
     observerData.publicSafety.share = {
         status: verified.shareSafety.status,

package/dist/observer/run-routes.d.ts

@@ -27,6 +27,7 @@ export declare function buildHistoryIndex(proofRoot: PinnedDirectory, admitRun?:
         estimatedCostUsd: number | null;
         costRatesAsOf: string | null;
         costPlaceholder: boolean;
+        costLabel: string | null;
     }>;
 }>;
 /** internal: consumed by src/observer/serve.ts */

package/dist/observer/run-routes.js

@@ -5,34 +5,55 @@ import path from "node:path";
 import { isAnalysisRecordPath, projectShareCheckedAnalysis } from "../analysis/sharing.js";
 import { loadAnalysis } from "../analysis/load.js";
 import { listRuns } from "../run/stored-runs.js";
-import { bindExistingRunArtifactPaths, isPathInside, isSafeRunIdSegment } from "../run/paths.js";
+import { readAnalysisAccounting } from "../run/costs.js";
+import { bindExistingRunArtifactPaths, isPathInside, isSafeRunIdSegment, } from "../run/paths.js";
+import { analysisCostOf, runCost, runCostLabel } from "../run/run-cost.js";
 import { RUN_STATUS_FILE, RUN_STATUS_STALE_MS, isRunStatusRecord } from "../run/status.js";
 import { renderObserverHtml } from "./artifact.js";
 import { buildObserverData, recordedStreamEmbed, withObserverEndings, } from "./data.js";
 import { buildArtifactSecurityHeaders } from "./http.js";
 import { assertPinnedDirectory, openContainedFile, pinDirectChildDirectory, readContainedFile, relativeToRoot, sha256OfOpenedFile, } from "./pinned-files.js";
+/** The run's artifact paths, only when they are still the pinned directory being served. */
+async function servedRunPaths(runRoot) {
+    const runId = path.basename(runRoot.physicalPath);
+    const cwd = path.dirname(path.dirname(path.dirname(runRoot.physicalPath)));
+    const prepared = await bindExistingRunArtifactPaths(cwd, runId);
+    if (prepared.physicalRunRoot !== runRoot.physicalPath ||
+        prepared.runRootIdentity.birthtimeNs !== runRoot.birthtimeNs ||
+        prepared.runRootIdentity.dev !== runRoot.dev ||
+        prepared.runRootIdentity.ino !== runRoot.ino) {
+        throw new Error("ANALYSIS_STORAGE_CHANGED");
+    }
+    return prepared;
+}
 /** Analysis cannot grant filesystem authority or make an otherwise readable recording disappear. */
 async function readObserverAnalysis(runRoot) {
+    let loaded;
     try {
-        const runId = path.basename(runRoot.physicalPath);
-        const cwd = path.dirname(path.dirname(path.dirname(runRoot.physicalPath)));
-        const prepared = await bindExistingRunArtifactPaths(cwd, runId);
-        if (prepared.physicalRunRoot !== runRoot.physicalPath ||
-            prepared.runRootIdentity.birthtimeNs !== runRoot.birthtimeNs ||
-            prepared.runRootIdentity.dev !== runRoot.dev ||
-            prepared.runRootIdentity.ino !== runRoot.ino) {
-            throw new Error("ANALYSIS_STORAGE_CHANGED");
-        }
-        return projectShareCheckedAnalysis(await loadAnalysis(prepared));
+        loaded = projectShareCheckedAnalysis(await loadAnalysis(await servedRunPaths(runRoot)));
     }
     catch {
-        return {
+        loaded = {
             state: "invalid",
             analysis: null,
             corrections: [],
             warnings: ["Analysis could not be validated against this recording."],
         };
     }
+    const spend = await readServedAnalysisSpend(runRoot);
+    return spend === undefined ? loaded : { ...loaded, spend };
+}
+/**
+ * The run's analysis spend, read by the same reader as stats, so a request whose report could not
+ * be validated still counts. Undefined when the run sent none or its history cannot be bound.
+ */
+async function readServedAnalysisSpend(runRoot) {
+    try {
+        return analysisCostOf(await readAnalysisAccounting(await servedRunPaths(runRoot))) ?? undefined;
+    }
+    catch {
+        return undefined;
+    }
 }
 /** internal: consumed by src/observer/serve.ts */
 export async function serveRunPath(runRoot, relativePath, response, runtimeStreamUrls = [], request) {
@@ -219,6 +240,7 @@ admitRun) {
         if (admitRun && !root)
             return null;
         const data = root ? await readObserverData(root) : null;
+        const spend = root && data ? await readServedAnalysisSpend(root) : undefined;
         // listRuns read run.json before admission, so an admitted run's fields come from its
         // guarded read instead.
         return {
@@ -233,6 +255,9 @@ admitRun) {
             estimatedCostUsd: data?.cost?.estimatedTotalUsd ?? null,
             costRatesAsOf: data?.cost?.ratesAsOf ?? null,
             costPlaceholder: data?.cost?.placeholder ?? false,
+            // What the row shows: participants and desktops plus the run's analyses, as every
+            // surface that shows one run's cost reads it.
+            costLabel: data ? (runCostLabel(runCost(data.cost, spend)) ?? null) : null,
         };
     }));
     await assertPinnedDirectory(proofRoot);

package/dist/observer/serve.d.ts

@@ -41,7 +41,7 @@ export interface ServeResult {
 }
 interface ServeControlPlane {
     startRun?(request: {
-        labId: string;
+        studyId: string;
         dryRun: boolean;
     }): Promise<{
         accepted: boolean;