@attest-ai/core 1.0.0-rc.2 → 1.0.0-rc.4

package/dist/cjs/index.cjs

@@ -38,6 +38,7 @@ __export(index_exports, {
   AttestClient: () => AttestClient,
   CONFUSED_USER: () => CONFUSED_USER,
   COOPERATIVE_USER: () => COOPERATIVE_USER,
+  CaptureError: () => CaptureError,
   ContinuousEvalRunner: () => ContinuousEvalRunner,
   ENGINE_VERSION: () => ENGINE_VERSION,
   ERR_ASSERTION_ERROR: () => ERR_ASSERTION_ERROR,
@@ -46,6 +47,7 @@ __export(index_exports, {
   ERR_PROVIDER_ERROR: () => ERR_PROVIDER_ERROR,
   ERR_SESSION_ERROR: () => ERR_SESSION_ERROR,
   ERR_TIMEOUT: () => ERR_TIMEOUT,
+  EgressBlockedError: () => EgressBlockedError,
   EngineManager: () => EngineManager,
   EngineTimeoutError: () => EngineTimeoutError,
   ExpectChain: () => ExpectChain,
@@ -70,8 +72,12 @@ __export(index_exports, {
   REASON_MISSING_EVIDENCE: () => REASON_MISSING_EVIDENCE,
   REASON_PROVIDER_NOT_CONFIGURED: () => REASON_PROVIDER_NOT_CONFIGURED,
   REASON_PROVIDER_UNAVAILABLE: () => REASON_PROVIDER_UNAVAILABLE,
+  REASON_REPLAY_MISS: () => REASON_REPLAY_MISS,
   REASON_SHORT_CIRCUITED: () => REASON_SHORT_CIRCUITED,
   REASON_SIMULATION: () => REASON_SIMULATION,
+  ReplayError: () => ReplayError,
+  ReplayMissError: () => ReplayMissError,
+  ReplayNotEvaluatedError: () => ReplayNotEvaluatedError,
   STATUS_HARD_FAIL: () => STATUS_HARD_FAIL,
   STATUS_NOT_EVALUATED: () => STATUS_NOT_EVALUATED,
   STATUS_PASS: () => STATUS_PASS,
@@ -86,6 +92,7 @@ __export(index_exports, {
   TIER_3: () => TIER_3,
   TYPE_CONSTRAINT: () => TYPE_CONSTRAINT,
   TYPE_CONTENT: () => TYPE_CONTENT,
+  TYPE_EFFECT: () => TYPE_EFFECT,
   TYPE_EMBEDDING: () => TYPE_EMBEDDING,
   TYPE_LLM_JUDGE: () => TYPE_LLM_JUDGE,
   TYPE_PLUGIN: () => TYPE_PLUGIN,
@@ -95,6 +102,8 @@ __export(index_exports, {
   TraceBuilder: () => TraceBuilder,
   TraceTree: () => TraceTree,
   VERSION: () => VERSION,
+  WorldChecks: () => WorldChecks,
+  WorldError: () => WorldError,
   activeBuilder: () => activeBuilder,
   addUsage: () => addUsage,
   agent: () => agent,
@@ -105,28 +114,43 @@ __export(index_exports, {
   config: () => config,
   decodeResponse: () => decodeResponse,
   delegate: () => delegate,
+  dslCall: () => dslCall,
+  egressBlockRequested: () => egressBlockRequested,
+  emitVitest: () => emitVitest,
   encodeRequest: () => encodeRequest,
   executePluginAssertion: () => executePluginAssertion,
   extractId: () => extractId,
   extractResult: () => extractResult,
+  firstMiss: () => firstMiss,
   formatUsage: () => formatUsage,
   getSampleRate: () => getSampleRate,
+  installEgressGuard: () => installEgressGuard,
+  isProviderHost: () => isProviderHost,
   isSimulationMode: () => isSimulationMode,
   layerForType: () => layerForType,
+  liveLine: () => liveLine,
+  loadFixture: () => loadFixture,
   loadLabelsCSV: () => loadLabelsCSV,
   loadLabelsJSONL: () => loadLabelsJSONL,
   parseUsage: () => parseUsage,
   previewLine: () => previewLine,
   promptHash: () => promptHash,
+  record: () => record,
   renderAssertionFailure: () => renderAssertionFailure,
   renderDiagnostics: () => renderDiagnostics,
   renderSummary: () => renderSummary,
+  renderVitest: () => renderVitest,
   requireSimulationCapability: () => requireSimulationCapability,
   resetConfig: () => resetConfig,
+  resolveMode: () => resolveMode,
   simulationEnvEnabled: () => simulationEnvEnabled,
+  startReplay: () => startReplay,
+  startWorld: () => startWorld,
   sumUsage: () => sumUsage,
+  testPathFor: () => testPathFor,
   tier: () => tier,
   traceId: () => traceId,
+  uninstallEgressGuard: () => uninstallEgressGuard,
   usageSummaryLine: () => usageSummaryLine,
   zeroUsage: () => zeroUsage
 });
@@ -148,12 +172,14 @@ var REASON_MISSING_EVIDENCE = "missing_evidence";
 var REASON_SHORT_CIRCUITED = "short_circuited";
 var REASON_BUDGET_EXHAUSTED = "budget_exhausted";
 var REASON_JUDGE_ABSTAINED = "judge_abstained";
+var REASON_REPLAY_MISS = "replay_miss";
 var OUTCOME_PASS = "pass";
 var OUTCOME_FAIL = "fail";
 var OUTCOME_SKIP = "skip";
 var TYPE_SCHEMA = "schema";
 var TYPE_CONSTRAINT = "constraint";
 var TYPE_TRACE = "trace";
+var TYPE_EFFECT = "effect";
 var TYPE_CONTENT = "content";
 var TYPE_EMBEDDING = "embedding";
 var TYPE_LLM_JUDGE = "llm_judge";
@@ -191,6 +217,7 @@ function layerForType(assertionType) {
       return 2;
     case "trace":
     case "trace_tree":
+    case "effect":
       return 3;
     case "content":
       return 4;
@@ -350,8 +377,8 @@ function extractId(response) {
 }
 
 // src/version.ts
-var VERSION = "1.0.0-rc.2";
-var ENGINE_VERSION = "1.0.0-rc.2";
+var VERSION = "1.0.0-rc.4";
+var ENGINE_VERSION = "1.0.0-rc.4";
 
 // src/engine-manager.ts
 var import_node_child_process = require("child_process");
@@ -419,7 +446,7 @@ function httpsGet(url, redirectCount = 0) {
       new Error(`Too many redirects (>${MAX_REDIRECTS}) following ${url}`)
     );
   }
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve4, reject) => {
     const client = url.startsWith("https:") ? https : http;
     client.get(url, (res) => {
       const status = res.statusCode ?? 0;
@@ -430,7 +457,7 @@ function httpsGet(url, redirectCount = 0) {
           return;
         }
         res.resume();
-        resolve(httpsGet(location, redirectCount + 1));
+        resolve4(httpsGet(location, redirectCount + 1));
         return;
       }
       if (status < 200 || status >= 300) {
@@ -440,7 +467,7 @@ function httpsGet(url, redirectCount = 0) {
       }
       const chunks = [];
       res.on("data", (chunk) => chunks.push(chunk));
-      res.on("end", () => resolve(Buffer.concat(chunks)));
+      res.on("end", () => resolve4(Buffer.concat(chunks)));
       res.on("error", reject);
     }).on("error", reject);
   });
@@ -571,8 +598,8 @@ Install options:
   }
   return [await downloadEngine(), "download"];
 }
-async function resolveEngine(explicitPath, options = {}) {
-  const [enginePath, source] = await locateEngine(explicitPath, options.allowDownload ?? true);
+async function resolveEngine(explicitPath, options2 = {}) {
+  const [enginePath, source] = await locateEngine(explicitPath, options2.allowDownload ?? true);
   const found = engineVersion(enginePath);
   if (found !== ENGINE_VERSION) {
     throw new EngineVersionMismatchError(enginePath, source, found, ENGINE_VERSION);
@@ -587,9 +614,9 @@ var EngineManager = class {
   initialized = false;
   requestId = 0;
   initResult = null;
-  constructor(options) {
-    this.enginePath = options?.enginePath ?? "";
-    this.logLevel = options?.logLevel ?? "warn";
+  constructor(options2) {
+    this.enginePath = options2?.enginePath ?? "";
+    this.logLevel = options2?.logLevel ?? "warn";
   }
   async start() {
     this.enginePath = await resolveEngine(this.enginePath || void 0);
@@ -667,11 +694,11 @@ var EngineManager = class {
     }
     this.requestId += 1;
     const requestStr = encodeRequest(this.requestId, method, params);
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve4, reject) => {
       const onLine = (line) => {
         try {
           const response = decodeResponse(line);
-          resolve(extractResult(response));
+          resolve4(extractResult(response));
         } catch (err) {
           reject(err);
         }
@@ -705,17 +732,17 @@ var EngineManager = class {
 // src/config.ts
 var _simulationMode = false;
 var _sampleRate = 0;
-function config(options) {
-  if (options.simulation !== void 0) {
-    _simulationMode = options.simulation;
+function config(options2) {
+  if (options2.simulation !== void 0) {
+    _simulationMode = options2.simulation;
   }
-  if (options.sampleRate !== void 0) {
-    if (options.sampleRate < 0 || options.sampleRate > 1) {
+  if (options2.sampleRate !== void 0) {
+    if (options2.sampleRate < 0 || options2.sampleRate > 1) {
       throw new RangeError(
-        `sampleRate must be between 0.0 and 1.0, got ${options.sampleRate}`
+        `sampleRate must be between 0.0 and 1.0, got ${options2.sampleRate}`
       );
     }
-    _sampleRate = options.sampleRate;
+    _sampleRate = options2.sampleRate;
   }
 }
 function isSimulationMode() {
@@ -871,16 +898,16 @@ var AttestClient = class {
   desyncThreshold;
   desyncWindowMs;
   desynced = false;
-  constructor(engine, options) {
+  constructor(engine, options2) {
     this.engine = engine;
-    this.logger = options?.logger ?? envLoggerDefault();
+    this.logger = options2?.logger ?? envLoggerDefault();
     this.diagnosticBuffer = new ProtocolDiagnosticBuffer(
-      options?.diagnosticBufferSize ?? DEFAULT_DIAGNOSTIC_BUFFER
+      options2?.diagnosticBufferSize ?? DEFAULT_DIAGNOSTIC_BUFFER
     );
-    this.desyncThreshold = options?.desyncThreshold ?? DEFAULT_DESYNC_THRESHOLD;
-    this.desyncWindowMs = options?.desyncWindowMs ?? DEFAULT_DESYNC_WINDOW_MS;
-    if (options?.onDiagnostic !== void 0) {
-      this.diagnosticListeners.add(options.onDiagnostic);
+    this.desyncThreshold = options2?.desyncThreshold ?? DEFAULT_DESYNC_THRESHOLD;
+    this.desyncWindowMs = options2?.desyncWindowMs ?? DEFAULT_DESYNC_WINDOW_MS;
+    if (options2?.onDiagnostic !== void 0) {
+      this.diagnosticListeners.add(options2.onDiagnostic);
     }
   }
   /** Subscribe to protocol diagnostics. Returns an unsubscribe function. */
@@ -1038,12 +1065,12 @@ var AttestClient = class {
       throw new Error("Engine process not started.");
     }
     let capturedReqId;
-    const requestPromise = new Promise((resolve, reject) => {
+    const requestPromise = new Promise((resolve4, reject) => {
       this.writeChain = this.writeChain.then(() => {
         this.requestId += 1;
         const reqId = this.requestId;
         capturedReqId = reqId;
-        this.pending.set(reqId, { resolve, reject });
+        this.pending.set(reqId, { resolve: resolve4, reject });
         const requestStr = encodeRequest(reqId, method, params);
         cp.stdin.write(requestStr, (err) => {
           if (err) {
@@ -1061,23 +1088,24 @@ var AttestClient = class {
       throw err;
     });
   }
-  async evaluateBatch(trace, assertions, options) {
+  async evaluateBatch(trace, assertions, options2) {
     if (isSimulationMode()) {
       requireSimulationCapability(this.engine["initResult"]);
     }
     const params = {
       trace,
       assertions: [...assertions],
-      ...options?.budget !== void 0 ? { budget: options.budget } : {}
+      ...options2?.budget !== void 0 ? { budget: options2.budget } : {},
+      ...options2?.context !== void 0 ? { context: options2.context } : {}
     };
     const raw = await this.sendRequest(
       "evaluate_batch",
       params,
-      options?.timeout
+      options2?.timeout
     );
     return { ...raw, usage: parseUsage(raw["usage"]) };
   }
-  async submitPluginResult(traceId2, pluginName, assertionId2, status, score, explanation, options) {
+  async submitPluginResult(traceId2, pluginName, assertionId2, status, score, explanation, options2) {
     const result = {
       assertion_id: assertionId2,
       status,
@@ -1095,11 +1123,11 @@ var AttestClient = class {
     const raw = await this.sendRequest(
       "submit_plugin_result",
       params,
-      options?.timeout
+      options2?.timeout
     );
     return Boolean(raw?.accepted ?? false);
   }
-  async queryDrift(assertionId2, windowSize = 50, options) {
+  async queryDrift(assertionId2, windowSize = 50, options2) {
     if (isSimulationMode()) {
       return {
         assertion_id: assertionId2,
@@ -1114,11 +1142,11 @@ var AttestClient = class {
     const raw = await this.sendRequest(
       "query_drift",
       { assertion_id: assertionId2, window_size: windowSize },
-      options?.timeout
+      options2?.timeout
     );
     return raw.report;
   }
-  async generateUserMessage(persona, conversationHistory, faultConfig, options) {
+  async generateUserMessage(persona, conversationHistory, faultConfig, options2) {
     if (isSimulationMode()) {
       return `[simulation] Hello from ${persona.name}`;
     }
@@ -1132,7 +1160,7 @@ var AttestClient = class {
     const raw = await this.sendRequest(
       "generate_user_message",
       params,
-      options?.timeout
+      options2?.timeout
     );
     return String(raw.message);
   }
@@ -1177,33 +1205,33 @@ var TraceBuilder = class {
     this.input = input;
     return this;
   }
-  addLlmCall(name, options) {
+  addLlmCall(name, options2) {
     this.steps.push({
       type: STEP_LLM_CALL,
       name,
-      args: options?.args,
-      result: options?.result,
-      metadata: options?.metadata
+      args: options2?.args,
+      result: options2?.result,
+      metadata: options2?.metadata
     });
     return this;
   }
-  addToolCall(name, options) {
+  addToolCall(name, options2) {
     this.steps.push({
       type: STEP_TOOL_CALL,
       name,
-      args: options?.args,
-      result: options?.result,
-      metadata: options?.metadata
+      args: options2?.args,
+      result: options2?.result,
+      metadata: options2?.metadata
     });
     return this;
   }
-  addRetrieval(name, options) {
+  addRetrieval(name, options2) {
     this.steps.push({
       type: STEP_RETRIEVAL,
       name,
-      args: options?.args,
-      result: options?.result,
-      metadata: options?.metadata
+      args: options2?.args,
+      result: options2?.result,
+      metadata: options2?.metadata
     });
     return this;
   }
@@ -1281,10 +1309,10 @@ var AgentResult = class {
    * not_evaluated skips (fails when `strict`); otherwise pass, including
    * when only soft_fail rows are present (see `softFailures`).
    */
-  outcome(options) {
+  outcome(options2) {
     if (this.hardFailures.length > 0) return OUTCOME_FAIL;
     if (this.notEvaluated.length > 0) {
-      return options?.strict === true ? OUTCOME_FAIL : OUTCOME_SKIP;
+      return options2?.strict === true ? OUTCOME_FAIL : OUTCOME_SKIP;
     }
     return OUTCOME_PASS;
   }
@@ -1394,9 +1422,9 @@ function truncate(value, limit = 280) {
   }
   return value.slice(0, limit - 3) + "...";
 }
-function renderAssertionFailure(result, options = {}) {
-  const color = options.color ?? false;
-  const testFile = options.testFile;
+function renderAssertionFailure(result, options2 = {}) {
+  const color = options2.color ?? false;
+  const testFile = options2.testFile;
   const layer = result.layer ?? 0;
   const label = layerLabel(layer, result.type);
   const lines = [];
@@ -1477,8 +1505,8 @@ function appendJudgeMetadata(lines, meta) {
     );
   }
 }
-function renderSummary(result, options = {}) {
-  const color = options.color ?? false;
+function renderSummary(result, options2 = {}) {
+  const color = options2.color ?? false;
   const passN = result.passCount;
   const soft = result.assertionResults.filter(
     (r) => r.status === STATUS_SOFT_FAIL
@@ -1496,9 +1524,9 @@ function renderSummary(result, options = {}) {
   ];
   return parts.join(" | ");
 }
-function renderDiagnostics(result, options = {}) {
-  const color = options.color ?? false;
-  const includePassing = options.includePassing ?? false;
+function renderDiagnostics(result, options2 = {}) {
+  const color = options2.color ?? false;
+  const includePassing = options2.includePassing ?? false;
   const rows = includePassing ? result.assertionResults : result.assertionResults.filter((r) => r.status !== STATUS_PASS);
   if (rows.length === 0) {
     return dim("  (no failures)\n", color);
@@ -1506,7 +1534,7 @@ function renderDiagnostics(result, options = {}) {
   const out = [""];
   out.push(bold(`Attest diagnostic \u2014 ${headerCounts(result)}:`, color));
   for (const r of rows) {
-    out.push(renderAssertionFailure(r, options));
+    out.push(renderAssertionFailure(r, options2));
   }
   out.push(dim(`  Summary: ${renderSummary(result, { color })}`, color));
   return out.join("\n");
@@ -1623,9 +1651,64 @@ var TraceTree = class {
 
 // src/expect.ts
 var import_node_crypto2 = require("crypto");
+var MAX_WORLD_BYTES = 9 * 1024 * 1024;
+var WorldChecks = class {
+  _snapshot;
+  _add;
+  constructor(snapshot, add) {
+    this._snapshot = snapshot;
+    this._add = add;
+  }
+  addCheck(spec, where) {
+    const full = { ...spec, world: this._snapshot };
+    if (where !== void 0 && Object.keys(where).length > 0) full.where = where;
+    return this._add(full);
+  }
+  /**
+   * Assert how many records of `resource` match `where`. Give `equals`, or `atMost` and/or
+   * `atLeast`. A violation reads `effect violated: 2 refunds for O-1042 (expected 1)`.
+   *
+   * @throws Error when no bound is given, or `equals` is combined with another bound.
+   *
+   * @example
+   * ```ts
+   * expect(trace).world(await world.state()).count("refunds", { equals: 1, where: { order_id: "O-1042" } });
+   * ```
+   */
+  count(resource, opts) {
+    if (opts.equals === void 0 && opts.atMost === void 0 && opts.atLeast === void 0) {
+      throw new Error("count needs equals, atMost or atLeast");
+    }
+    if (opts.equals !== void 0 && (opts.atMost !== void 0 || opts.atLeast !== void 0)) {
+      throw new Error("count: equals excludes atMost and atLeast");
+    }
+    const spec = { check: "count", resource };
+    if (opts.equals !== void 0) spec.equals = opts.equals;
+    if (opts.atMost !== void 0) spec.at_most = opts.atMost;
+    if (opts.atLeast !== void 0) spec.at_least = opts.atLeast;
+    return this.addCheck(spec, opts.where);
+  }
+  /** Assert no two matching records share the same values for field(s) `by`. */
+  unique(resource, opts) {
+    const fields = typeof opts.by === "string" ? [opts.by] : [...opts.by];
+    if (fields.length === 0) throw new Error("unique needs at least one field in by");
+    return this.addCheck({ check: "unique", resource, fields }, opts.where);
+  }
+  /**
+   * Assert every matching record carries a distinct value in field `key` (default
+   * `idempotency_key`), the record field that stores the idempotency key.
+   */
+  idempotent(resource, opts = {}) {
+    return this.addCheck(
+      { check: "idempotent", resource, field: opts.key ?? "idempotency_key" },
+      opts.where
+    );
+  }
+};
 var ExpectChain = class {
   _result;
   _assertions = [];
+  _worldBytes = 0;
   constructor(result) {
     this._result = result;
   }
@@ -2054,6 +2137,24 @@ var ExpectChain = class {
       soft: opts?.soft ?? false
     });
   }
+  // -- Layer 3: Effect checks (the external system the agent acted on) --
+  /**
+   * Check effects in a world snapshot:
+   * `expect(trace).world(await world.state()).count(...)`. `null` means the test ran without
+   * a world helper: the checks are `not_evaluated` (`missing_evidence`).
+   */
+  world(snapshot) {
+    const size = new TextEncoder().encode(JSON.stringify(snapshot)).length;
+    return new WorldChecks(snapshot, (spec) => {
+      this._worldBytes += size;
+      if (this._worldBytes > MAX_WORLD_BYTES) {
+        throw new Error(
+          `effect checks would send the ${size}-byte world snapshot ${Math.floor(this._worldBytes / Math.max(size, 1))} times (${this._worldBytes} bytes), over the ${MAX_WORLD_BYTES}-byte limit of one request; use fewer checks per test or scope the world to less state`
+        );
+      }
+      return this.add(TYPE_EFFECT, spec);
+    });
+  }
   // -- Layer 4: Content --
   /**
    * Assert the output message contains the given string.
@@ -2547,6 +2648,728 @@ function attestExpect(result) {
   return new ExpectChain(new AgentResult(result));
 }
 
+// src/capture.ts
+var import_node_child_process2 = require("child_process");
+var fs2 = __toESM(require("fs"), 1);
+var path2 = __toESM(require("path"), 1);
+var import_node_url = require("url");
+var FIXTURE_VERSION = 1;
+var DEFAULT_FIXTURE_DIR = path2.join("tests", "attest", "fixtures");
+var CaptureError = class extends Error {
+  /** The fixture written, when the engine wrote one. */
+  fixture;
+  constructor(message, fixture = null) {
+    super(message);
+    this.name = "CaptureError";
+    this.fixture = fixture;
+  }
+};
+function toPath(p) {
+  return p instanceof URL ? (0, import_node_url.fileURLToPath)(p) : p;
+}
+function loadFixture(file) {
+  const p = toPath(file);
+  const doc = JSON.parse(fs2.readFileSync(p, "utf8"));
+  if (!isObject(doc) || doc["fixture_version"] !== FIXTURE_VERSION) {
+    throw new CaptureError(`${p}: not a fixture_version ${FIXTURE_VERSION} capture fixture`);
+  }
+  validate(p, doc);
+  return doc;
+}
+var NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+function isObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function kindOf(v) {
+  if (Array.isArray(v)) return "array";
+  if (isObject(v)) return "object";
+  if (typeof v === "string" || typeof v === "boolean") return typeof v;
+  return "other";
+}
+function validate(p, doc) {
+  const need = (where, obj, fields) => {
+    if (!isObject(obj)) throw new CaptureError(`${p}: ${where} is not an object`);
+    for (const [key, kind] of Object.entries(fields)) {
+      if (kindOf(obj[key]) !== kind) throw new CaptureError(`${p}: ${where}.${key} is missing or not a ${kind}`);
+    }
+    return obj;
+  };
+  need("fixture", doc, { name: "string", source: "object", trace: "object", exchanges: "array", contracts: "array", verification: "object" });
+  if (!("world" in doc)) throw new CaptureError(`${p}: fixture.world is missing`);
+  if (!NAME_PATTERN.test(doc["name"])) {
+    throw new CaptureError(`${p}: fixture name ${JSON.stringify(doc["name"])} is not a valid fixture name`);
+  }
+  const v = need("fixture.verification", doc["verification"], {
+    verified: "boolean",
+    expect_fail: "boolean",
+    results: "array",
+    expected_failures: "array"
+  });
+  doc["contracts"].forEach(
+    (c, i) => need(`fixture.contracts[${i}]`, c, { id: "string", kind: "string", description: "string", type: "string", spec: "object" })
+  );
+  v["results"].forEach(
+    (r, i) => need(`fixture.verification.results[${i}]`, r, { contract: "string", status: "string", explanation: "string" })
+  );
+}
+function objectKey(k) {
+  if (k === "__proto__") return `[${JSON.stringify(k)}]`;
+  return /^[A-Za-z_$][\w$]*$/.test(k) ? k : JSON.stringify(k);
+}
+function comment(text) {
+  return text.replace(/[\p{Cc}\p{Zl}\p{Zp}]/gu, " ");
+}
+function ts(value) {
+  if (value === null || typeof value === "boolean" || typeof value === "number") {
+    return JSON.stringify(value);
+  }
+  if (typeof value === "string") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(ts).join(", ")}]`;
+  if (typeof value === "object") {
+    const entries = Object.entries(value).map(
+      ([k, v]) => `${objectKey(k)}: ${ts(v)}`
+    );
+    return entries.length === 0 ? "{}" : `{ ${entries.join(", ")} }`;
+  }
+  throw new Error(`value ${String(value)} has no literal`);
+}
+function str(spec, key) {
+  const v = spec[key];
+  if (typeof v !== "string") throw new Error(`missing ${key}`);
+  return v;
+}
+function options(entries) {
+  const set = entries.filter(([, v]) => v !== void 0 && v !== null && v !== false);
+  return set.length === 0 ? "" : `{ ${set.map(([k, v]) => `${k}: ${ts(v)}`).join(", ")} }`;
+}
+function call(method, args, opts) {
+  return `.${method}(${[...args, ...opts ? [opts] : []].join(", ")})`;
+}
+function dslCall(contract) {
+  const s = contract.spec;
+  const soft = s["soft"] === true ? true : void 0;
+  try {
+    if (contract.type === "trace") {
+      const check = s["check"];
+      if (check === "trajectory" && s["mode"] !== "partial_order") {
+        const mode = s["mode"] === "strict" || s["mode"] === void 0 ? void 0 : s["mode"];
+        if (!Array.isArray(s["tools"])) throw new Error("missing tools");
+        return call("trajectory", [ts(s["tools"])], options([["mode", mode], ["soft", soft]]));
+      }
+      if (check === "tool_order") {
+        return call("toolCalledBefore", [ts(str(s, "before")), ts(str(s, "after"))], options([["soft", soft]]));
+      }
+      if (check === "tool_cardinality") {
+        return call(
+          "toolCardinality",
+          [ts(str(s, "tool"))],
+          options([
+            ["per", s["per"]],
+            ["atLeast", s["min"]],
+            ["atMost", s["max"]],
+            ["soft", soft]
+          ])
+        );
+      }
+    }
+    if (contract.type === "schema" && s["target"] === "output.structured") {
+      if (typeof s["schema"] !== "object" || s["schema"] === null) throw new Error("missing schema");
+      return call("outputMatchesSchema", [ts(s["schema"])], "");
+    }
+    if (contract.type === "constraint" && s["field"] === "metadata.cost_usd" && s["operator"] === "lte") {
+      if (typeof s["value"] !== "number") throw new Error("missing value");
+      return call("costUnder", [ts(s["value"])], options([["soft", soft]]));
+    }
+  } catch (err) {
+    throw new Error(`contract ${contract.id}: malformed spec (${err.message})`);
+  }
+  throw new Error(`contract ${contract.id}: no TypeScript DSL call for ${contract.type} spec`);
+}
+function testPathFor(fixturePath) {
+  const name = path2.basename(fixturePath).replace(/\.attest\.json$/, "");
+  return path2.join(path2.dirname(path2.dirname(fixturePath)), `${name}.test.ts`);
+}
+function renderVitest(fixture, fixturePath, testPath) {
+  const calls = [];
+  const skipped = [];
+  for (const c of fixture.contracts) {
+    try {
+      calls.push([c, dslCall(c)]);
+    } catch (err) {
+      skipped.push(err.message);
+    }
+  }
+  const rel = path2.relative(path2.dirname(testPath), fixturePath).split(path2.sep).join("/");
+  const status = new Map(fixture.verification.results.map((r) => [r.contract, r.status]));
+  const expectFail = fixture.verification.expect_fail;
+  const lines = [
+    `// Contracts drafted by \`attest capture\` from fixture ${comment(ts(fixture.name))}.`,
+    "//",
+    "// Review and edit before committing: they check the captured trace without running",
+    "// the agent. Re-capturing does not overwrite this file.",
+    `import { attestExpect, loadFixture, type ExpectChain } from "@attest-ai/core";`,
+    `import { ${expectFail ? "inspect" : "evaluate"} } from "@attest-ai/vitest";`,
+    `import { describe, ${expectFail ? "expect, " : ""}it } from "vitest";`,
+    "",
+    `const FIXTURE = loadFixture(new URL(${ts(rel.startsWith(".") ? rel : `./${rel}`)}, import.meta.url));`
+  ];
+  if (skipped.length > 0) {
+    lines.push("", "// Drafted contracts without a TypeScript DSL call (left out):");
+    for (const s of skipped) lines.push(`// - ${comment(s)}`);
+  }
+  lines.push("", "function contracts(): ExpectChain {", "  return attestExpect(FIXTURE.trace)");
+  for (const [c, dsl] of calls) {
+    lines.push(`    // ${comment(`${c.id}: ${c.description}`)}`, `    ${dsl}`);
+  }
+  lines[lines.length - 1] += ";";
+  lines.push("}");
+  if (expectFail) {
+    lines.push("", "// Status of each contract on the captured incident, in contracts() order.");
+    lines.push("const EXPECTED: Array<[string, string]> = [");
+    for (const [c] of calls) lines.push(`  [${ts(c.id)}, ${ts(status.get(c.id) ?? "pass")}],`);
+    lines.push(
+      "];",
+      "",
+      `describe(${ts(fixture.name)}, () => {`,
+      `  it("reproduces the incident", async () => {`,
+      "    const result = await inspect(contracts());",
+      "",
+      "    expect(result.assertionResults.map((row) => row.status)).toEqual(EXPECTED.map(([, s]) => s));",
+      "  });",
+      "});"
+    );
+  } else {
+    lines.push(
+      "",
+      `describe(${ts(fixture.name)}, () => {`,
+      `  it("keeps its drafted contracts", async () => {`,
+      "    await evaluate(contracts());",
+      "  });",
+      "});"
+    );
+  }
+  return `${lines.join("\n")}
+`;
+}
+function emitVitest(fixturePath) {
+  const testPath = testPathFor(fixturePath);
+  const existing = fs2.lstatSync(testPath, { throwIfNoEntry: false });
+  if (existing?.isSymbolicLink()) {
+    throw new CaptureError(`${testPath} is a symbolic link; refusing to draft a test through it`);
+  }
+  if (existing !== void 0) return null;
+  const source = renderVitest(loadFixture(fixturePath), fixturePath, testPath);
+  fs2.mkdirSync(path2.dirname(testPath), { recursive: true });
+  try {
+    fs2.writeFileSync(testPath, source, { encoding: "utf8", flag: "wx" });
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      throw new CaptureError(`${testPath} appeared while drafting; left unchanged`);
+    }
+    throw err;
+  }
+  return testPath;
+}
+function serve(engine, args) {
+  const child = (0, import_node_child_process2.spawn)(engine, args, { stdio: ["pipe", "pipe", "pipe"] });
+  let stdout = "";
+  let stderr = "";
+  let resolveReady = () => void 0;
+  const ready = new Promise((resolve4) => {
+    resolveReady = resolve4;
+  });
+  const exited = new Promise((resolve4) => {
+    child.on("close", (code, signal) => {
+      resolveReady(null);
+      resolve4({ code, signal });
+    });
+    child.on("error", (err) => {
+      stderr += err.message;
+      resolveReady(null);
+      resolve4({ code: null, signal: null });
+    });
+  });
+  child.stdout.setEncoding("utf8").on("data", (chunk) => {
+    stdout += chunk;
+    const nl = stdout.indexOf("\n");
+    if (nl >= 0) resolveReady(stdout.slice(0, nl));
+  });
+  child.stderr.setEncoding("utf8").on("data", (chunk) => {
+    stderr += chunk;
+  });
+  child.stdin.on("error", () => void 0);
+  return {
+    ready,
+    async finish(finalize) {
+      if (finalize) {
+        const environ = Object.entries(process.env).flatMap(([k, v]) => v === void 0 ? [] : [`${k}=${v}`]);
+        child.stdin.write(`${JSON.stringify({ finalize: true, environ })}
+`);
+      }
+      child.stdin.end();
+      const { code, signal } = await exited;
+      return { code, signal, stdout, stderr };
+    }
+  };
+}
+function readyEnv(line) {
+  if (line === null) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(line);
+  } catch {
+    return null;
+  }
+  const env = parsed?.env;
+  if (typeof env !== "object" || env === null) return null;
+  const entries = Object.entries(env);
+  if (!entries.every(([, v]) => typeof v === "string")) return null;
+  return Object.fromEntries(entries);
+}
+function exitDetail(exit) {
+  const how = exit.signal !== null ? `killed by ${exit.signal}` : `exit ${String(exit.code)}`;
+  const err = exit.stderr.trim();
+  return err ? `${how}: ${err}` : how;
+}
+function restore(saved) {
+  for (const [k, v] of saved) {
+    if (v === void 0) delete process.env[k];
+    else process.env[k] = v;
+  }
+}
+var recording = false;
+async function record(name, fn, opts = {}) {
+  if (recording) throw new CaptureError("record() is already running; captures cannot overlap");
+  recording = true;
+  try {
+    return await recordExclusive(name, fn, opts);
+  } finally {
+    recording = false;
+  }
+}
+async function recordExclusive(name, fn, opts) {
+  const engine = await resolveEngine(opts.enginePath);
+  const args = ["capture", "--serve", "--name", name, "--out-dir", opts.outDir ?? DEFAULT_FIXTURE_DIR];
+  if (opts.expectFail) args.push("--expect-fail");
+  if (opts.agentId !== void 0) args.push("--agent-id", opts.agentId);
+  if (opts.world !== void 0) args.push("--world", path2.resolve(opts.world));
+  const proc = serve(engine, args);
+  const env = readyEnv(await proc.ready);
+  if (env === null) {
+    const exit2 = await proc.finish(false);
+    throw new CaptureError(`attest-engine capture --serve did not start (${exitDetail(exit2)})`);
+  }
+  const saved = new Map(Object.keys(env).map((k) => [k, process.env[k]]));
+  Object.assign(process.env, env);
+  let value;
+  try {
+    value = await fn({ name, env });
+    if (opts.flush) await opts.flush();
+  } catch (err) {
+    restore(saved);
+    await proc.finish(false);
+    throw err;
+  }
+  restore(saved);
+  const exit = await proc.finish(true);
+  process.stderr.write(exit.stderr);
+  const lines = exit.stdout.trim().split("\n");
+  if (lines.length < 2) {
+    throw new CaptureError(`capture ${name} wrote no fixture (${exitDetail(exit)})`);
+  }
+  const outcome = JSON.parse(lines[lines.length - 1] ?? "");
+  if (exit.code !== 0 || !outcome.verified) {
+    throw new CaptureError(`capture ${name}: fixture ${outcome.fixture} is not verified; no test drafted`, outcome.fixture);
+  }
+  const testFile = opts.emitTest === false ? null : emitVitest(outcome.fixture);
+  return { value, fixture: outcome.fixture, verified: true, testFile };
+}
+
+// src/replay.ts
+var import_node_child_process3 = require("child_process");
+var path3 = __toESM(require("path"), 1);
+
+// src/egress.ts
+var net = __toESM(require("net"), 1);
+var PROVIDER_HOSTS = [
+  "api.openai.com",
+  "api.anthropic.com",
+  "generativelanguage.googleapis.com",
+  /\.openai\.azure\.com$/
+];
+var EgressBlockedError = class extends Error {
+  constructor(host) {
+    super(
+      `attest egress guard: connection to model provider ${host} blocked; the agent must reach models through the replay proxy (OPENAI_BASE_URL / ANTHROPIC_BASE_URL)`
+    );
+    this.host = host;
+    this.name = "EgressBlockedError";
+  }
+  host;
+};
+function isProviderHost(host) {
+  const h = host.toLowerCase().replace(/\.$/, "");
+  return PROVIDER_HOSTS.some((p) => typeof p === "string" ? p === h : p.test(h));
+}
+function egressBlockRequested(env = process.env) {
+  const v = (env.ATTEST_EGRESS ?? "").trim().toLowerCase();
+  if (v !== "" && v !== "block" && v !== "allow") {
+    throw new Error(`ATTEST_EGRESS must be block or allow, got ${JSON.stringify(env.ATTEST_EGRESS)}`);
+  }
+  return v === "block";
+}
+var original = null;
+var installs = 0;
+function hostOf(args) {
+  const first = Array.isArray(args[0]) ? args[0][0] : args[0];
+  if (typeof first === "object" && first !== null) {
+    const o = first;
+    return typeof o.host === "string" ? o.host : null;
+  }
+  if (typeof first === "number" || typeof first === "string" && /^\d+$/.test(first)) {
+    return typeof args[1] === "string" ? args[1] : null;
+  }
+  return null;
+}
+function installEgressGuard() {
+  installs++;
+  if (original === null) {
+    const proto = net.Socket.prototype;
+    const orig = proto.connect;
+    original = orig;
+    proto.connect = function(...args) {
+      const host = hostOf(args);
+      if (host !== null && isProviderHost(host)) {
+        const err = new EgressBlockedError(host);
+        process.nextTick(() => this.destroy(err));
+        return this;
+      }
+      return orig.apply(this, args);
+    };
+  }
+  let released = false;
+  return () => {
+    if (released) return;
+    released = true;
+    installs--;
+    if (installs === 0) uninstallEgressGuard();
+  };
+}
+function egressGuardActive() {
+  return installs > 0;
+}
+function uninstallEgressGuard() {
+  installs = 0;
+  if (original === null) return;
+  net.Socket.prototype.connect = original;
+  original = null;
+}
+
+// src/replay.ts
+var ReplayMissError = class extends Error {
+  constructor(message, summary) {
+    super(message);
+    this.summary = summary;
+    this.name = "ReplayMissError";
+  }
+  summary;
+};
+var ReplayNotEvaluatedError = class extends Error {
+  constructor(message, summary) {
+    super(message);
+    this.summary = summary;
+    this.name = "ReplayNotEvaluatedError";
+  }
+  summary;
+};
+function escapeControl(text) {
+  return text.replace(/[\p{Cc}\p{Cf}]/gu, (c) => `\\u${(c.codePointAt(0) ?? 0).toString(16).padStart(4, "0")}`);
+}
+var ReplayError = class extends Error {
+  constructor(message) {
+    super(escapeControl(message));
+    this.name = "ReplayError";
+  }
+};
+function resolveMode(explicit, env = process.env) {
+  if (explicit !== void 0) return checkMode(explicit, "mode");
+  const fromEnv = (env.ATTEST_REPLAY ?? "").trim().toLowerCase();
+  if (fromEnv !== "") return checkMode(fromEnv, "ATTEST_REPLAY");
+  const ci = (env.CI ?? "").trim().toLowerCase();
+  return ci !== "" && ci !== "false" && ci !== "0" ? "strict" : "auto";
+}
+function checkMode(value, where) {
+  if (value === "strict" || value === "auto" || value === "off") return value;
+  throw new ReplayError(`${where} must be strict, auto or off, got ${JSON.stringify(value)}`);
+}
+var active = null;
+async function startReplay(name, opts = {}) {
+  if (!NAME_PATTERN.test(name)) throw new ReplayError(`invalid fixture name ${JSON.stringify(name)}`);
+  const resolved = resolveMode(opts.mode);
+  if (resolved === "off") return offSession(name);
+  const mode = resolved;
+  if (active !== null) throw new ReplayError(`replay of ${active} is already running; sessions cannot overlap`);
+  active = name;
+  try {
+    return await start(name, mode, opts);
+  } catch (err) {
+    active = null;
+    throw err;
+  }
+}
+function offSession(name) {
+  return {
+    name,
+    mode: "off",
+    env: {},
+    summary: null,
+    finish: () => Promise.resolve(null),
+    error: () => null,
+    check: () => Promise.resolve()
+  };
+}
+function missError(mode, summary) {
+  if (summary.misses === 0) return null;
+  const message = escapeControl(firstMiss(summary) ?? "replay miss");
+  return mode === "auto" ? new ReplayNotEvaluatedError(message, summary) : new ReplayMissError(message, summary);
+}
+async function start(name, mode, opts) {
+  const engine = await resolveEngine(opts.enginePath);
+  const fixturesDir = path3.resolve(opts.fixturesDir ?? DEFAULT_FIXTURE_DIR);
+  const blocking = egressGuardActive() || (opts.noLive ?? egressBlockRequested());
+  const args = ["replay", "--serve", "--name", name, "--fixtures-dir", fixturesDir, "--mode", mode];
+  if (blocking) args.push("--no-live");
+  const child = (0, import_node_child_process3.spawn)(engine, args, { stdio: ["pipe", "pipe", "pipe"] });
+  let stdout = "";
+  let stderr = "";
+  let resolveReady = () => void 0;
+  const ready = new Promise((resolve4) => {
+    resolveReady = resolve4;
+  });
+  const exited = new Promise((resolve4) => {
+    child.on("close", (code) => {
+      resolveReady(null);
+      resolve4(code);
+    });
+    child.on("error", (err) => {
+      stderr += err.message;
+      resolveReady(null);
+      resolve4(null);
+    });
+  });
+  child.stdout.setEncoding("utf8").on("data", (chunk) => {
+    stdout += chunk;
+    const nl = stdout.indexOf("\n");
+    if (nl >= 0) resolveReady(stdout.slice(0, nl));
+  });
+  child.stderr.setEncoding("utf8").on("data", (chunk) => {
+    stderr += chunk;
+  });
+  child.stdin.on("error", () => void 0);
+  const stop = async () => {
+    child.stdin.write("stop\n");
+    child.stdin.end();
+    return { code: await exited, stdout, stderr };
+  };
+  const env = parseEnv(await ready);
+  if (env === null) {
+    const out = await stop();
+    active = null;
+    throw new ReplayError(`attest-engine replay --serve did not start: ${out.stderr.trim() || `exit ${String(out.code)}`}`);
+  }
+  const saved = new Map(Object.keys(env).map((k) => [k, process.env[k]]));
+  Object.assign(process.env, env);
+  let summary = null;
+  let finishing = null;
+  const finish = () => {
+    finishing ??= (async () => {
+      for (const [k, v] of saved) {
+        if (v === void 0) delete process.env[k];
+        else process.env[k] = v;
+      }
+      const out = await stop();
+      active = null;
+      const parsed = parseSummary(out.stdout);
+      if (parsed === null) {
+        throw new ReplayError(`replay ${name} wrote no summary (exit ${String(out.code)}): ${out.stderr.trim()}`);
+      }
+      if (blocking && parsed.live > 0) {
+        throw new ReplayError(
+          `replay ${name}: ${String(parsed.live)} live model calls while the egress guard is blocking`
+        );
+      }
+      summary = parsed;
+      return parsed;
+    })();
+    return finishing;
+  };
+  return {
+    name,
+    mode,
+    env,
+    get summary() {
+      return summary;
+    },
+    finish,
+    error: () => summary === null ? null : missError(mode, summary),
+    check: async () => {
+      await finish();
+      const err = summary === null ? null : missError(mode, summary);
+      if (err !== null) throw err;
+    }
+  };
+}
+function parseEnv(line) {
+  if (line === null) return null;
+  try {
+    const env = JSON.parse(line).env;
+    if (typeof env !== "object" || env === null) return null;
+    const entries = Object.entries(env);
+    if (!entries.every(([, v]) => typeof v === "string")) return null;
+    return Object.fromEntries(entries);
+  } catch {
+    return null;
+  }
+}
+function parseSummary(out) {
+  const lines = out.trim().split("\n");
+  try {
+    const s = JSON.parse(lines[lines.length - 1] ?? "").summary;
+    if (s === void 0 || !Array.isArray(s.records)) return null;
+    for (const r of s.records) if (r.message !== void 0) r.message = escapeControl(r.message);
+    return s;
+  } catch {
+    return null;
+  }
+}
+function firstMiss(summary) {
+  return summary.records.find((r) => r.outcome === "miss")?.message ?? null;
+}
+function liveLine(live, costUsd, unpriced = 0) {
+  const line = `${String(live)} live model ${live === 1 ? "call" : "calls"} \xB7 $${costUsd.toFixed(2)}`;
+  return unpriced > 0 ? `${line} (+${String(unpriced)} unpriced)` : line;
+}
+
+// src/world.ts
+var import_node_child_process4 = require("child_process");
+var path4 = __toESM(require("path"), 1);
+var STATE_PATH = "/_attest/state";
+var STATE_TIMEOUT_MS = 1e4;
+var WorldError = class extends Error {
+  constructor(message) {
+    super(escapeControl(message));
+    this.name = "WorldError";
+  }
+};
+var active2 = null;
+async function startWorld(worldFile, opts = {}) {
+  if (active2 !== null) throw new WorldError(`world ${active2} is already running; worlds cannot overlap`);
+  const file = path4.resolve(worldFile);
+  active2 = file;
+  try {
+    return await start2(file, opts);
+  } catch (err) {
+    active2 = null;
+    throw err;
+  }
+}
+async function start2(file, opts) {
+  const engine = await resolveEngine(opts.enginePath);
+  const child = (0, import_node_child_process4.spawn)(engine, ["world", "--file", file, "--serve"], { stdio: ["pipe", "pipe", "pipe"] });
+  let stdout = "";
+  let stderr = "";
+  let resolveReady = () => void 0;
+  const ready = new Promise((resolve4) => {
+    resolveReady = resolve4;
+  });
+  const exited = new Promise((resolve4) => {
+    child.on("close", (code) => {
+      resolveReady(null);
+      resolve4(code);
+    });
+    child.on("error", (err) => {
+      stderr += err.message;
+      resolveReady(null);
+      resolve4(null);
+    });
+  });
+  child.stdout.setEncoding("utf8").on("data", (chunk) => {
+    stdout += chunk;
+    const nl = stdout.indexOf("\n");
+    if (nl >= 0) resolveReady(stdout.slice(0, nl));
+  });
+  child.stderr.setEncoding("utf8").on("data", (chunk) => {
+    stderr += chunk;
+  });
+  child.stdin.on("error", () => void 0);
+  const halt = async () => {
+    child.stdin.write("stop\n");
+    child.stdin.end();
+    return { code: await exited, stdout, stderr };
+  };
+  const env = parseEnv(await ready);
+  if (env === null) {
+    const out = await halt();
+    throw new WorldError(`attest-engine world ${file} did not start: ${out.stderr.trim() || `exit ${String(out.code)}`}`);
+  }
+  const urls = Object.values(env);
+  if (urls.length !== 1) {
+    await halt();
+    throw new WorldError(`attest-engine world ${file}: want one env variable, got ${JSON.stringify(env)}`);
+  }
+  const baseUrl = urls[0];
+  const saved = new Map(Object.keys(env).map((k) => [k, process.env[k]]));
+  Object.assign(process.env, env);
+  let stopped = false;
+  let stopping = null;
+  const stop = () => {
+    stopped = true;
+    stopping ??= (async () => {
+      for (const [k, v] of saved) {
+        if (v === void 0) delete process.env[k];
+        else process.env[k] = v;
+      }
+      const out = await halt();
+      active2 = null;
+      const final = parseFinal(out.stdout);
+      if (out.code !== 0 || final === null) {
+        throw new WorldError(`attest-engine world ${file} failed (exit ${String(out.code)}): ${out.stderr.trim()}`);
+      }
+      return final;
+    })();
+    return stopping;
+  };
+  const state = async () => {
+    if (stopped) throw new WorldError(`world ${file} is stopped; use the snapshot stop() returned`);
+    const url = baseUrl + STATE_PATH;
+    let res;
+    try {
+      res = await fetch(url, { signal: AbortSignal.timeout(STATE_TIMEOUT_MS) });
+    } catch (err) {
+      throw new WorldError(`GET ${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (res.status !== 200) throw new WorldError(`GET ${url}: HTTP ${String(res.status)}`);
+    const body = await res.json().catch(() => {
+      throw new WorldError(`GET ${url}: the body is not JSON`);
+    });
+    if (typeof body !== "object" || body === null || Array.isArray(body)) {
+      throw new WorldError(`GET ${url}: the body is not a snapshot object`);
+    }
+    return body;
+  };
+  return { path: file, env, baseUrl, state, stop };
+}
+function parseFinal(out) {
+  const lines = out.trim().split("\n");
+  try {
+    const world = JSON.parse(lines[lines.length - 1] ?? "").world;
+    if (typeof world !== "object" || world === null || Array.isArray(world)) return null;
+    return world;
+  } catch {
+    return null;
+  }
+}
+
 // src/context.ts
 var import_node_async_hooks = require("async_hooks");
 var activeBuilder = new import_node_async_hooks.AsyncLocalStorage();
@@ -2750,12 +3573,12 @@ var ContinuousEvalRunner = class {
   maxSize;
   running = false;
   loopTimer = null;
-  constructor(client, assertions, options) {
+  constructor(client, assertions, options2) {
     this.client = client;
     this.assertions = assertions;
-    this.sampler = new Sampler(options?.sampleRate ?? 1);
-    this.dispatcher = new AlertDispatcher(options?.alertWebhook, options?.alertSlackUrl);
-    this.maxSize = options?.maxSize ?? resolveQueueSize();
+    this.sampler = new Sampler(options2?.sampleRate ?? 1);
+    this.dispatcher = new AlertDispatcher(options2?.alertWebhook, options2?.alertSlackUrl);
+    this.maxSize = options2?.maxSize ?? resolveQueueSize();
   }
   get alertEmitter() {
     return this.dispatcher;
@@ -2866,13 +3689,13 @@ function loadLabelsCSV(text) {
   if (rows.length === 0) {
     throw new Error("empty CSV");
   }
-  let start = 0;
+  let start3 = 0;
   if (rows[0].length >= 2) {
     const firstHuman = parseFloatStrict(rows[0][1]);
-    if (firstHuman === null) start = 1;
+    if (firstHuman === null) start3 = 1;
   }
   const out = [];
-  for (let idx = start; idx < rows.length; idx++) {
+  for (let idx = start3; idx < rows.length; idx++) {
     const row = rows[idx];
     const lineNum = idx + 1;
     if (row.length === 0) continue;
@@ -3081,10 +3904,10 @@ var OpenAIAdapter = class {
   constructor(agentId2) {
     this.agentId = agentId2;
   }
-  traceFromResponse(response, options) {
+  traceFromResponse(response, options2) {
     const builder = new TraceBuilder(this.agentId);
-    if (options?.inputMessages) {
-      builder.setInput({ messages: options.inputMessages });
+    if (options2?.inputMessages) {
+      builder.setInput({ messages: options2.inputMessages });
     }
     const message = response.choices[0].message;
     const completionText = message.content ?? "";
@@ -3104,12 +3927,12 @@ var OpenAIAdapter = class {
     }
     builder.setOutput({
       message: completionText,
-      structured: options?.structuredOutput ?? {}
+      structured: options2?.structuredOutput ?? {}
     });
     builder.setMetadata({
       total_tokens: response.usage?.total_tokens,
-      cost_usd: options?.costUsd,
-      latency_ms: options?.latencyMs,
+      cost_usd: options2?.costUsd,
+      latency_ms: options2?.latencyMs,
       model: response.model
     });
     return builder.build();
@@ -3122,10 +3945,10 @@ var AnthropicAdapter = class {
   constructor(agentId2) {
     this.agentId = agentId2;
   }
-  traceFromResponse(response, options) {
+  traceFromResponse(response, options2) {
     const builder = new TraceBuilder(this.agentId);
-    if (options?.inputMessages) {
-      builder.setInput({ messages: options.inputMessages });
+    if (options2?.inputMessages) {
+      builder.setInput({ messages: options2.inputMessages });
     }
     const completionParts = [];
     for (const block of response.content) {
@@ -3148,8 +3971,8 @@ var AnthropicAdapter = class {
     }
     builder.setMetadata({
       total_tokens: totalTokens,
-      cost_usd: options?.costUsd,
-      latency_ms: options?.latencyMs,
+      cost_usd: options2?.costUsd,
+      latency_ms: options2?.latencyMs,
       model: response.model
     });
     return builder.build();
@@ -3162,10 +3985,10 @@ var GeminiAdapter = class {
   constructor(agentId2) {
     this.agentId = agentId2;
   }
-  traceFromResponse(response, options) {
+  traceFromResponse(response, options2) {
     const builder = new TraceBuilder(this.agentId);
-    if (options?.inputText) {
-      builder.setInput({ text: options.inputText });
+    if (options2?.inputText) {
+      builder.setInput({ text: options2.inputText });
     }
     let completionText = "";
     if (response.text != null) {
@@ -3185,9 +4008,9 @@ var GeminiAdapter = class {
     builder.addLlmCall("completion", { result: { completion: completionText } });
     builder.setOutput({ message: completionText });
     builder.setMetadata({
-      cost_usd: options?.costUsd,
-      latency_ms: options?.latencyMs,
-      model: options?.model
+      cost_usd: options2?.costUsd,
+      latency_ms: options2?.latencyMs,
+      model: options2?.model
     });
     return builder.build();
   }
@@ -3199,10 +4022,10 @@ var OllamaAdapter = class {
   constructor(agentId2) {
     this.agentId = agentId2;
   }
-  traceFromResponse(response, options) {
+  traceFromResponse(response, options2) {
     const builder = new TraceBuilder(this.agentId);
-    if (options?.inputMessages) {
-      builder.setInput({ messages: options.inputMessages });
+    if (options2?.inputMessages) {
+      builder.setInput({ messages: options2.inputMessages });
     }
     const completionText = response.message?.content ?? "";
     builder.addLlmCall("completion", {
@@ -3216,7 +4039,7 @@ var OllamaAdapter = class {
     }
     builder.setMetadata({
       total_tokens: totalTokens,
-      latency_ms: options?.latencyMs,
+      latency_ms: options2?.latencyMs,
       model: response.model
     });
     return builder.build();
@@ -3224,7 +4047,7 @@ var OllamaAdapter = class {
 };
 
 // src/adapters/otel.ts
-var import_node_child_process2 = require("child_process");
+var import_node_child_process5 = require("child_process");
 var CONVERT_TIMEOUT_MS = 6e4;
 var MAX_TRACE_OUTPUT_BYTES = 64 * 1024 * 1024;
 var STATUS_CODE_ERROR = 2;
@@ -3247,7 +4070,7 @@ var OTelAdapter = class _OTelAdapter {
    * @throws RangeError when a parsed export holds a non-finite number.
    * @throws OTLPConversionError when the engine times out, overflows the output buffer or
    *   prints no trace.
-   * @throws Error from `spawnSync` when the engine cannot start.
+   * @throws Error when the engine cannot start.
    */
   static async fromOtlp(otlp, agentId2) {
     const payload = typeof otlp === "string" || otlp instanceof Uint8Array ? otlp : JSON.stringify(otlp, (_key, v) => {
@@ -3259,33 +4082,9 @@ var OTelAdapter = class _OTelAdapter {
     const args = ["trace", "convert"];
     if (agentId2 !== void 0) args.push("--agent-id", agentId2);
     args.push("-");
-    const proc = (0, import_node_child_process2.spawnSync)(await resolveEngine(), args, {
-      input: payload,
-      timeout: CONVERT_TIMEOUT_MS,
-      maxBuffer: MAX_TRACE_OUTPUT_BYTES
-    });
-    if (proc.error) {
-      const code = proc.error.code;
-      if (code === "ETIMEDOUT") {
-        throw new OTLPConversionError(
-          `attest-engine trace convert timed out after ${CONVERT_TIMEOUT_MS / 1e3}s`
-        );
-      }
-      if (code === "ENOBUFS") {
-        throw new OTLPConversionError(
-          `attest-engine trace convert printed more than ${MAX_TRACE_OUTPUT_BYTES} bytes`
-        );
-      }
-      throw proc.error;
-    }
-    if (proc.status !== 0) {
-      const message = proc.stderr.toString("utf8").trim();
-      throw new OTLPConversionError(
-        message || `attest-engine trace convert exited ${String(proc.status ?? proc.signal)}`
-      );
-    }
+    const stdout = await runConvert(await resolveEngine(), args, payload);
     try {
-      return JSON.parse(proc.stdout.toString("utf8"));
+      return JSON.parse(stdout);
     } catch (err) {
       throw new OTLPConversionError(
         `attest-engine trace convert printed output that is not JSON: ${String(err)}`
@@ -3293,6 +4092,65 @@ var OTelAdapter = class _OTelAdapter {
     }
   }
 };
+function runConvert(engine, args, payload) {
+  return new Promise((resolve4, reject) => {
+    const child = (0, import_node_child_process5.spawn)(engine, args, { stdio: ["pipe", "pipe", "pipe"] });
+    let timer;
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      reject(e);
+    });
+    const { stdin, stdout, stderr } = child;
+    if (stdin === null || stdout === null || stderr === null) return;
+    const out = [];
+    const err = [];
+    let outBytes = 0;
+    let failure = null;
+    const fail = (e) => {
+      failure ??= e;
+      child.kill("SIGKILL");
+    };
+    timer = setTimeout(() => {
+      fail(
+        new OTLPConversionError(
+          `attest-engine trace convert timed out after ${CONVERT_TIMEOUT_MS / 1e3}s`
+        )
+      );
+    }, CONVERT_TIMEOUT_MS);
+    stdout.on("data", (chunk) => {
+      outBytes += chunk.length;
+      if (outBytes > MAX_TRACE_OUTPUT_BYTES) {
+        fail(
+          new OTLPConversionError(
+            `attest-engine trace convert printed more than ${MAX_TRACE_OUTPUT_BYTES} bytes`
+          )
+        );
+        return;
+      }
+      out.push(chunk);
+    });
+    stderr.on("data", (chunk) => err.push(chunk));
+    stdin.on("error", () => void 0);
+    child.on("close", (code, signal) => {
+      clearTimeout(timer);
+      if (failure !== null) {
+        reject(failure);
+        return;
+      }
+      if (code !== 0) {
+        const message = Buffer.concat(err).toString("utf8").trim();
+        reject(
+          new OTLPConversionError(
+            message || `attest-engine trace convert exited ${String(code ?? signal)}`
+          )
+        );
+        return;
+      }
+      resolve4(Buffer.concat(out).toString("utf8"));
+    });
+    stdin.end(payload);
+  });
+}
 function hrTimeToNanos(time, spanName) {
   if (!Number.isSafeInteger(time[0]) || !Number.isSafeInteger(time[1])) {
     throw new RangeError(`span ${JSON.stringify(spanName)} has a non-integer HrTime`);
@@ -3398,13 +4256,13 @@ var LangChainAdapter = class {
    * @param options.model - Model name override.
    * @returns A finalized Trace object.
    */
-  buildTrace(options) {
+  buildTrace(options2) {
     const builder = new TraceBuilder(this.agentId);
     const latencyMs = this.startTime > 0 ? Date.now() - this.startTime : void 0;
     let totalTokens;
     for (const llm of this.llmCalls) {
       const args = {};
-      if (llm.model ?? options?.model) args.model = llm.model ?? options?.model;
+      if (llm.model ?? options2?.model) args.model = llm.model ?? options2?.model;
       const result = { completion: llm.text };
       if (llm.tokens !== void 0) {
         result.tokens = llm.tokens;
@@ -3421,9 +4279,9 @@ var LangChainAdapter = class {
     builder.setOutput({ message: outputMessage });
     builder.setMetadata({
       total_tokens: totalTokens,
-      cost_usd: options?.costUsd,
+      cost_usd: options2?.costUsd,
       latency_ms: latencyMs,
-      model: options?.model ?? this.llmCalls[0]?.model
+      model: options2?.model ?? this.llmCalls[0]?.model
     });
     return builder.build();
   }
@@ -3438,6 +4296,7 @@ var LangChainAdapter = class {
   AttestClient,
   CONFUSED_USER,
   COOPERATIVE_USER,
+  CaptureError,
   ContinuousEvalRunner,
   ENGINE_VERSION,
   ERR_ASSERTION_ERROR,
@@ -3446,6 +4305,7 @@ var LangChainAdapter = class {
   ERR_PROVIDER_ERROR,
   ERR_SESSION_ERROR,
   ERR_TIMEOUT,
+  EgressBlockedError,
   EngineManager,
   EngineTimeoutError,
   ExpectChain,
@@ -3470,8 +4330,12 @@ var LangChainAdapter = class {
   REASON_MISSING_EVIDENCE,
   REASON_PROVIDER_NOT_CONFIGURED,
   REASON_PROVIDER_UNAVAILABLE,
+  REASON_REPLAY_MISS,
   REASON_SHORT_CIRCUITED,
   REASON_SIMULATION,
+  ReplayError,
+  ReplayMissError,
+  ReplayNotEvaluatedError,
   STATUS_HARD_FAIL,
   STATUS_NOT_EVALUATED,
   STATUS_PASS,
@@ -3486,6 +4350,7 @@ var LangChainAdapter = class {
   TIER_3,
   TYPE_CONSTRAINT,
   TYPE_CONTENT,
+  TYPE_EFFECT,
   TYPE_EMBEDDING,
   TYPE_LLM_JUDGE,
   TYPE_PLUGIN,
@@ -3495,6 +4360,8 @@ var LangChainAdapter = class {
   TraceBuilder,
   TraceTree,
   VERSION,
+  WorldChecks,
+  WorldError,
   activeBuilder,
   addUsage,
   agent,
@@ -3505,28 +4372,43 @@ var LangChainAdapter = class {
   config,
   decodeResponse,
   delegate,
+  dslCall,
+  egressBlockRequested,
+  emitVitest,
   encodeRequest,
   executePluginAssertion,
   extractId,
   extractResult,
+  firstMiss,
   formatUsage,
   getSampleRate,
+  installEgressGuard,
+  isProviderHost,
   isSimulationMode,
   layerForType,
+  liveLine,
+  loadFixture,
   loadLabelsCSV,
   loadLabelsJSONL,
   parseUsage,
   previewLine,
   promptHash,
+  record,
   renderAssertionFailure,
   renderDiagnostics,
   renderSummary,
+  renderVitest,
   requireSimulationCapability,
   resetConfig,
+  resolveMode,
   simulationEnvEnabled,
+  startReplay,
+  startWorld,
   sumUsage,
+  testPathFor,
   tier,
   traceId,
+  uninstallEgressGuard,
   usageSummaryLine,
   zeroUsage
 });