@tangle-network/traces 0.15.4 → 0.16.0

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 import { TraceValidation, SpanKind, Outcome } from '@tangle-network/agent-trace-contract';
 export { Capability, ConformanceFinding, ContractSpan, SpanLink, TraceValidation } from '@tangle-network/agent-trace-contract';
-import { SpanSourceReader, TraceAnalysisStore, RedactionRule, RedactionReport } from '@tangle-network/agent-eval/traces';
-export { DEFAULT_REDACTION_RULES, ErrorCluster, RedactionReport, RedactionRule, TraceAnalysisStore, redactString, redactValue } from '@tangle-network/agent-eval/traces';
+import { SpanSourceReader, TraceAnalysisStore, RedactionProfile, RedactionReport, ShareSafetyVerdict } from '@tangle-network/agent-eval/traces';
+export { ErrorCluster, RedactionProfile, RedactionReport, ShareSafetyVerdict, TraceAnalysisStore, assessShareSafety, redact, redactForShare, redactText, shareAllowed } from '@tangle-network/agent-eval/traces';
 import { ToolUseMetrics, InMemoryTraceStore, CostProvenance } from '@tangle-network/agent-eval';
-import { StuckLoopReport, FailureClusterReport } from '@tangle-network/agent-eval/pipelines';
+import { StuckLoopReport, FailureClusterReport, DiffStep, StepDiff } from '@tangle-network/agent-eval/pipelines';
 import { TraceAnalystDefinition, TraceAnalysisEngine, AnalystRegistry, AnalystFinding, buildDefaultAnalystRegistry, AnalystRunSummary, AnalystRunResult, Analyst, RawAnalystFinding, AnalystUsageReceipt, TraceAnalystLimits } from '@tangle-network/agent-eval/analyst';
 export { Analyst, AnalystContext, AnalystFinding, AnalystRegistry, buildDefaultAnalystRegistry, makeFinding } from '@tangle-network/agent-eval/analyst';
 import { ExecutionReport } from '@tangle-network/agent-eval/contract';
+import { FirstFailure } from '@tangle-network/agent-eval/diagnosis';
 import { SpawnEvent, NodeStatus, Runtime, Budget, Spend } from '@tangle-network/agent-runtime/kernel';
 import { SupervisorRunNodeRole, SupervisorRunReader, SupervisorRunSources } from '@tangle-network/agent-eval/supervisor-run';
 import { ReplayExecBackend, VerifiableFinding, FindingReplaySource, VerifyFindingsRun, ChatCompletionCaller } from '@tangle-network/agent-eval/trajectory-replay';
@@ -2586,6 +2587,53 @@ interface ProjectSessionBundleResult {
  */
 declare function projectSessionBundle(opts: ProjectSessionBundleOptions): Promise<ProjectSessionBundleResult>;
 
+/**
+ * `traces diff <a> <b>`: where two runs of the same task stop agreeing.
+ *
+ * The diff is agent-eval's (`diffSteps` in `/pipelines`): steps pair by span id,
+ * then by position with the same name and kind, then by name and kind anywhere,
+ * and the first divergence is classified as changed, replaced, only-in-a,
+ * only-in-b or reordered. This module reads the two runs and prints the result.
+ */
+
+interface RunDiffSide {
+    /** The path as given, without its `#` selector. */
+    readonly path: string;
+    readonly traceId: string;
+    /** The arm read, when the side was given as `path#branch=<id>`. */
+    readonly branch?: string;
+    readonly spans: number;
+    readonly steps: readonly DiffStep[];
+}
+interface RunDiffReport {
+    readonly kind: 'traces.run_diff';
+    /** The span kinds the steps were limited to; absent when every step was kept. */
+    readonly kinds?: readonly string[];
+    readonly a: RunDiffSide;
+    readonly b: RunDiffSide;
+    readonly diff: StepDiff;
+    /**
+     * Set when "the runs agree step for step" would overclaim: neither side has
+     * a step with a definitive OK/ERROR status, or neither side has a TOOL step.
+     * Agreement on unrecorded status, or on non-tool bookkeeping steps, is not
+     * evidence the runs behaved the same — a captured UNSET status means the
+     * outcome was never recorded, on either run.
+     */
+    readonly caveat?: string;
+}
+interface RunDiffOptions {
+    /** Keep only steps of these span kinds (e.g. TOOL), so event noise does not mark a divergence. */
+    readonly kinds?: readonly string[];
+}
+/**
+ * Read one side. `path` must hold one run; `path#<trace id>` picks a run from
+ * a file that holds several; `path#branch=<id>` picks one arm by its
+ * `agent.branch.id` or `agent.branch.arm`, so two arms of one run compare.
+ */
+declare function readRunSide(ref: string, options?: RunDiffOptions): Promise<RunDiffSide>;
+declare function diffRuns(a: string, b: string, options?: RunDiffOptions): Promise<RunDiffReport>;
+declare function renderRunDiff(report: RunDiffReport): string;
+
 type TraceInspectionSeverity = 'high' | 'medium' | 'low';
 type TraceInspectionArea = 'index' | 'session' | 'repo' | 'context';
 interface TraceInspectionFinding {
@@ -2637,7 +2685,7 @@ interface TraceEvidenceExportResult {
     readonly format: TraceEvidenceInputFormat;
     readonly spans: OtlpSpan[];
     readonly redactionCount: number;
-    readonly redactionsByRule: Record<string, number>;
+    readonly redactionsByDetector: Record<string, number>;
 }
 declare function exportTraceEvidenceRows(rows: readonly unknown[], opts?: TraceEvidenceExportOptions, wrapper?: JsonObject$1): TraceEvidenceExportResult;
 declare function exportTraceEvidenceText(text: string, opts?: TraceEvidenceExportOptions): TraceEvidenceExportResult;
@@ -3718,6 +3766,12 @@ interface SessionFacts {
     readonly lastRecordAt: SessionFact<string>;
     /** The harness's own cumulative token total, when a span carries it. */
     readonly tokenTotal: SessionFact<number>;
+    /**
+     * The session's first failure by agent-eval's fixed precedence: the innermost
+     * ERROR span that ended first, else a failed `agent.outcome`, else `none`.
+     * Failures that ended at the same instant are `ambiguous`, never guessed.
+     */
+    readonly firstFailure: FirstFailure;
 }
 interface SessionFactsReport {
     readonly schemaVersion: 1;
@@ -3780,7 +3834,7 @@ declare function sessionFactsContext(spans: readonly OtlpSpan[], options?: {
  * prepared context changed is a different analyst. Wrapping therefore bumps the
  * version instead of quietly changing what the same version does.
  */
-declare const SESSION_FACTS_VERSION_SUFFIX = "session-facts.1";
+declare const SESSION_FACTS_VERSION_SUFFIX = "session-facts.2";
 /**
  * Supply the sheet to every definition as prepared context, before the model
  * runs. A definition that already prepares context keeps it; the sheet is
@@ -4512,41 +4566,85 @@ interface WatchRunTargetOptions {
 declare function watchRunTarget(target: RunWatchTarget, opts?: WatchRunTargetOptions): Promise<RunWatchSnapshot>;
 
 /**
- * Privacy redaction for trace spans before upload.
+ * Redaction for trace spans before they leave the machine.
  *
- * Reuses agent-eval's `redactValue` + `DEFAULT_REDACTION_RULES` (email, IPs,
- * generic secret keys, …) and layers on coding-session-specific rules that the
- * defaults miss — GitHub tokens, cloud keys, JWTs, bearer headers, private-key
- * blocks, `key=secret` assignments, and credentials embedded in URLs. Redaction
- * runs over every span attribute + status message (including captured prompt /
- * response `content`), so what leaves the machine is already scrubbed.
+ * The patterns, field-name rules and profiles live in agent-eval's redaction
+ * core (`@tangle-network/agent-eval/traces`, docs/redaction.md). This module
+ * applies the core to OTLP spans: source-location attributes are removed, every
+ * span attribute and status message is redacted in one pass (so a pseudonym
+ * under the `share` profile is the same on every span), and tool I/O
+ * attributes are normalized again afterwards.
  *
- * Scope, stated honestly: this is **best-effort regex** for *structured* secrets
- * and credentials. It does NOT catch free-form PII — names, postal addresses,
- * phone numbers, account numbers in prose — which need a context-aware model.
- * For that assurance, run an ML PII scrubber (e.g. openai/privacy-filter) on the
- * ingest side of the platform, or upload metadata-only with `--no-content`.
+ * Scope: the core finds credentials by field name and value shape, and email,
+ * card, SSN and phone values. It does not find names, postal addresses or
+ * account numbers written in prose. For that, pass an external `Redactor`
+ * (`applyRedactor`) or upload metadata-only with `--no-content`.
  */
 
-/** Secrets common in coding-agent traces that the substrate defaults don't cover. */
-declare const CODING_REDACTION_RULES: RedactionRule[];
-/** Defaults + coding-session rules — the rule set used for upload. */
-declare const TRACES_REDACTION_RULES: RedactionRule[];
 interface SpanRedaction {
     spans: OtlpSpan[];
     report: RedactionReport;
 }
-/** Redact every span's attributes + status message. Returns scrubbed spans and
- *  an aggregate report (count + per-rule breakdown) over the whole set. */
-declare function redactSpans(spans: readonly OtlpSpan[], rules?: RedactionRule[]): SpanRedaction;
+interface RedactSpansOptions {
+    /** Default `default`. */
+    profile?: RedactionProfile;
+    /** Exact secret values to remove in any encoding, such as the API key the run used. */
+    knownSecrets?: readonly string[];
+}
+/**
+ * Redact every string field that leaves the machine: name, attributes, status
+ * message, and each causal link's own attributes. `assessSpans` below (and
+ * the MCP search tools built on this store) all read `span.name` and
+ * `span.links[].attributes` — a secret left in either is as reachable as one
+ * in an attribute — a search for it just works, defeating redaction. The core
+ * redacts nested object keys as well as values (a credential shape glued into
+ * a key name, such as an env-style attribute key carrying a token, is renamed
+ * the same as a credential-shaped value), so link attributes get that same
+ * coverage once they are part of what `redact` walks.
+ */
+declare function redactSpans(spans: readonly OtlpSpan[], options?: RedactSpansOptions): SpanRedaction;
+/**
+ * The share-safety verdict for spans as they would be sent. UNSAFE and UNKNOWN
+ * refuse. Finding paths start with the span id. Covers `links[].attributes`
+ * for the same reason {@link redactSpans} does: a secret reachable through a
+ * causal link is as live as one on the span itself.
+ */
+declare function assessSpans(spans: readonly OtlpSpan[], profile?: RedactionProfile): ShareSafetyVerdict;
 /** Defense-in-depth: run an external {@link Redactor} over captured conversation
- *  and tool values, catching free-form PII the regex pass misses. Compose AFTER
+ *  and tool values, catching free-form PII the core misses. Compose AFTER
  *  `redactSpans`. Returns scrubbed spans and the number of fields changed. */
 declare function applyRedactor(spans: readonly OtlpSpan[], redactor: Redactor): Promise<{
     spans: OtlpSpan[];
     changed: number;
 }>;
 
+/**
+ * `traces verify-safe <file|dir>`: say whether files are safe to share, using
+ * agent-eval's share-safety verdict. It reads and never writes.
+ *
+ * A `.json` file is parsed whole and a `.jsonl` or `.ndjson` file line by
+ * line; any other file is scanned as UTF-8 text. A file that cannot be read, a
+ * line that is not JSON, a symlink, or bytes that are not UTF-8 text make the
+ * verdict UNKNOWN, because an unread part could hold anything. Findings name
+ * the file and JSON Pointer, never the matched value.
+ */
+
+interface VerifySafeOptions {
+    /** Default `share`. */
+    profile?: RedactionProfile;
+    /** Exact secret values; any surviving occurrence in any encoding makes the verdict UNSAFE. */
+    knownSecrets?: readonly string[];
+}
+interface VerifySafeResult extends ShareSafetyVerdict {
+    target: string;
+    files: number;
+}
+declare function verifySafe(target: string, options?: VerifySafeOptions): Promise<VerifySafeResult>;
+/** Exit code for a verdict: 0 SAFE or SAFE_WITH_WARNINGS, 1 UNSAFE, 2 UNKNOWN. */
+declare function verdictExitCode(verdict: ShareSafetyVerdict): number;
+/** Human-readable verdict: status, then one line per finding and unreadable part. */
+declare function formatVerdict(result: VerifySafeResult): string;
+
 /**
  * Batch collection seam — `collectSessions` returns redacted spans per session
  * for a time window / harness selection, so a third party can feed batches or
@@ -4658,13 +4756,15 @@ declare function alreadyUploaded(state: UploadState, harness: string, sessionId:
  * Upload local coding-session traces to the Tangle Intelligence Platform.
  *
  * Pipeline per session: locate (time window) → parse to OTLP spans → REDACT
- * (PII/secrets) → apply the selected privacy mode → augment with metadata →
- * dedup the final events → POST via the hosted `ingestTraces` client. Redaction happens
- * before anything leaves the machine; the dedup is local-state + server
+ * (agent-eval's redaction core) → apply the selected privacy mode → augment
+ * with metadata → CHECK the final events with the share-safety verdict → dedup
+ * → POST via the hosted `ingestTraces` client. A session whose final events are
+ * UNSAFE or UNKNOWN is refused: it is not sent, not written to a dry-run
+ * preview, and not marked uploaded. The dedup is local-state + server
  * idempotency-key.
  *
- * `planUpload` is read-only (select + regex redact); `executeUpload` applies
- * final privacy options, deduplicates, and sends or writes a dry-run preview.
+ * `planUpload` is read-only (select + redact); `executeUpload` applies final
+ * privacy options, checks, deduplicates, and sends or writes a dry-run preview.
  */
 
 interface UploadItem {
@@ -4683,11 +4783,17 @@ interface UploadPlan {
     sinceMs?: number;
 }
 type PlanOptions = ScanOptions;
-/** Read-only: select sessions in the window and apply the built-in regex redaction. */
+/** Read-only: select sessions in the window and redact them with the default profile. */
 declare function planUpload(opts?: PlanOptions): Promise<UploadPlan>;
 /** Map redacted OtlpSpan[] → the hosted TraceSpanEvent[] wire shape, attaching
  *  session metadata to the root span(s). */
 declare function toTraceSpanEvents(spans: readonly OtlpSpan[], rootMeta: Record<string, string | number | boolean>): TraceSpanEvent[];
+/** A session the share-safety check kept on the machine. */
+interface RefusedSession {
+    harness: string;
+    sessionId: string;
+    verdict: ShareSafetyVerdict;
+}
 interface UploadResult {
     uploadedSessions: number;
     skippedSessions: number;
@@ -4695,6 +4801,8 @@ interface UploadResult {
     redactionCount: number;
     dryRun: boolean;
     otlpPath?: string;
+    /** Sessions whose final events were UNSAFE or UNKNOWN. None of them was sent. */
+    refused: RefusedSession[];
 }
 /** A trace sink. The hosted client satisfies this; pass your own to route
  *  redacted+deduped traces into a different system. */
@@ -4726,4 +4834,4 @@ interface ExecuteOptions {
 /** Send the final, new outbound items (or write their dry-run OTLP). */
 declare function executeUpload(plan: UploadPlan, opts?: ExecuteOptions): Promise<UploadResult>;
 
-export { ACTOR_ATTR, ATTR, type Actor, type AdoptionOptions, type AdoptionReport, AmpAdapter, type AnalysisEngineFromEnvOptions, type AnalyzeOptions, type AnalyzeResult, type AnswerSchema, type AssembleSessionBundleOptions, BLOBS_DIR, type BuildPolicyEvidenceOptions, type BuildSessionIndexOptions, type BuildTraceFindingPacketOptions, CHANGED_FILE_LIST_CAP, CITATION_NORMALIZATION_VERSION, CODING_REDACTION_RULES, CONTENT_CAP, COORDINATION_LOG_FILE, CORRECTIVE_REACTIONS, type ChangedFileFact, type ChatTrajectory, type ChatTrajectoryMessage, type ChatTrajectoryOptions, ClaudeAdapter, type CodeTraceBenchFileRef, type CodeTraceBenchImportOptions, type CodeTraceBenchImportReceipt, type CodeTraceBenchImportResult, type CodeTraceBenchImportedTrace, type CodeTraceBenchStep, CodexAdapter, CodexExecAdapter, CodexExecStreamError, CodexTaskScopeError, type CollectOptions, type CollectPolicyEvidenceOptions, type CollectSessionIndexOptions, type CollectSessionSelectionOptions, type CollectSessionWorkflowOptions, type ConformanceRenderOptions, type CoordinationLog, type CoordinationQuestion, type CoordinationSteer, CopilotAdapter, type CorruptionMode, DEFAULT_ANALYST_MODEL, DEFAULT_ASK_CONCURRENCY, DEFAULT_HARNESS, DEFAULT_SANDBOX_BASE_URL, EMPTY_SPAN_RUN_SNAPSHOT, EXPORT_RULE, EmptySessionError, type EvidenceOnlyVerdict, type ExcludedTurnFact, type ExecuteOptions, type ExportRule, type ExternalAnalysisKind, type ExternalAnalysisPayload, type ExternalAnalysisResult, type ExternalAnalyzer, type ExternalAnalyzerOptions, type ExternalDiscoveryCandidate, FACT_LIST_CAP, FACT_TEXT_CAP, FactoryAdapter, type FailureFollowUp, type FailureFollowUpReport, type FileRunContextReaderOptions, type FinalMessageFact, type FindSessionTextLeaksOptions, type FindingRejectionCounts, type FindingRejectionReasons, type FindingRejectionTally, type FollowUpKind, ForgeAdapter, GeminiAdapter, type HaloAnalyzerOptions, type HaloReasoningEffort, type HarnessTraceAdapter, type HodoscopeAnalyzerOptions, type HodoscopeInput, type HodoscopeMessage, type HodoscopeSourceMapEntry, type HodoscopeTrajectory, INGEST_SOURCE_CLI, INHERITED_SOURCE_ATTR, INHERITED_SPANS_OMITTED_ATTR, INHERITED_SPAN_ATTR, INHERITED_SPAN_COUNT_ATTR, type InheritedSpanSource, type InspectSessionIndexOptions, JsonSourceError, type JsonlCorruptionReceipt, JsonlParseError, type JsonlReadOptions, type LiveBatchOptions, type LocateOptions, type LoopConvergence, type LoopConvergenceReport, type LoopIteration, type LoopTrend, type LoopTrendBasis, MAX_SHELL_DEPTH, MAX_TRACE_QUESTION_CHARS, type ObservedLoop, type ObserverOptions, OpencodeAdapter, type OtlpIngestIssue, type OtlpIngestIssueKind, type OtlpInput, type OtlpInputFile, type OtlpRowConversion, type OtlpSpan, type OtlpSpanKind, type OtlpSpanLink, type OtlpStatusCode, POLICY_EVIDENCE_NOTE, PREPARED_CONTEXT_BYTE_CEILING, type ParentTaskResolution, type ParseOptions, PartialUploadError, PiAdapter, type PiAdapterOptions, type PipelineOptions, type PipelineReport, type PlanOptions, type PolicyEvidenceLoopSummary, type PolicyEvidenceRecord, type PolicyEvidenceToolSummary, type PrimeAnalyzerOptions, type PrimeTransport, type PrimeTransportRequest, type PrimeTransportResponse, type ProjectSessionBundleOptions, type ProjectSessionBundleResult, type PullRequestFact, type PullRequestFacts, type PullRequestReading, QwenAdapter, REACTIONS, RESULT_FILE, RULE, type Reaction, type ReactionReport, type ReactionSessionReport, type Redactor, type RepoAttrs, type RepoResolution, type RepoResolutionSource, type ResolvedOtlpInput, type RunContextJournal, type RunContextNode, type RunContextResult, type RunContextSnapshot, type RunResult, type RunWatchSnapshot, type RunWatchTarget, type RuntimeTrace, SESSION_FACTS_VERSION_SUFFIX, SESSION_TOKEN_TOTAL_ATTR, SOURCE_ATTRIBUTE_PREFIX, SPAN_SYNTHESIZED_ATTR, SPAWN_JOURNAL_FILE, STATUS_MARK, SYNTHESIZED_SOURCE_ATTR, SYNTHESIZED_SPAN_ATTR, type SandboxReplayBackendOptions, type ScanOptions, type ScannedSession, type SessionBatch, type SessionBundleAbsence, type SessionBundleCarriedSignatures, type SessionBundleExclusion, type SessionBundleExclusionRule, type SessionBundleFile, type SessionBundleIssue, type SessionBundleIssueKind, type SessionBundleLeakCheck, type SessionBundleLedgerSlice, type SessionBundleManifest, type SessionBundleProjection, type SessionBundleResult, type SessionBundleSliceRule, type SessionBundleVerification, type SessionBundleView, type SessionCorruptionReceipt, type SessionEnvironment, type SessionFact, type SessionFacts, type SessionFactsReport, type SessionIdentityConflict, type SessionIdentityIndex, type SessionIntegrity, type SessionRef, type SessionRelationship, type SessionRole, type SessionSeedGroup, type SessionSelection, type SessionSelectionRow, type SessionSourceFile, type SessionTextLeak, type SessionTextLeakReport, type SessionTurnFact, type SessionWorkflow, SessionWorkflowError, type SessionWorkflowErrorCode, type SessionWorkflowIssue, type SessionWorkflowSession, type SessionWorkflowSummary, type SkippedAnalysis, type SkippedInputFile, type SourceRecordReference, type SpanInput, type SpanNodeStatus, type SpanRedaction, type SpanRunNode, type SpanRunSnapshot, type SpanStructure, type SpawnedChildResolution, type SpendRoll, type SteeringChainReport, type SteeringEdge, type SubagentSpawnFact, TRACES_REDACTION_RULES, TRACE_QUESTION_PREVIEW_HEAD_CHARS, type TraceAgenticRoute, type TraceAgenticRouteReason, type TraceAgenticRouteReasonCode, type TraceContextIndex, type TraceContextRoot, type TraceEvidenceExportOptions, type TraceEvidenceExportResult, type TraceEvidenceFormatOption, type TraceEvidenceInputFormat, type TraceEvidenceRow, type TraceExecutionOptions, type TraceFindingPacket, type TraceImprovementArtifacts, type TraceImprovementOptions, type TraceImprovementResult, type TraceIndexedFile, type TraceInspectionArea, type TraceInspectionFinding, type TraceInspectionReport, type TraceInspectionSeverity, type TraceInvestigationOptions, type TraceInvestigationResult, type TraceLiveAction, type TraceLiveActionKind, type TraceLiveAnalysisContext, type TraceLiveAnalyst, type TraceLiveBatch, type TraceLiveEvidence, type TraceLiveFinding, type TraceLiveLoop, type TraceLiveSeverity, type TraceQuestion, type TraceQuestionAnswer, type TraceQuestionCitation, type TraceQuestionFailureKind, type TraceQuestionTrace, type TraceQuestionsArtifacts, type TraceQuestionsOptions, type TraceQuestionsResult, type TraceQuestionsTotals, type TraceSessionIndex, type TraceSessionIndexRow, type TraceStoreInvestigationOptions, type TraceStoreInvestigationResult, type TraceStreamEvent, type TraceStreamOptions, type TraceStreamReplayOptions, type TraceStreamSession, type TracesConfig, type TriggerPair, type TurnActorCount, type UnavailableCapabilities, type UploadBackend, type UploadIdentity, type UploadItem, type UploadPlan, type UploadRecord, type UploadResult, type UploadState, type UserPromptInput, type WatchRunTargetOptions, ZERO_ROLL, type ZaiChatCallerOptions, addSpend, alreadyUploaded, analysisEngineFromEnv, analyzeAdoption, analyzeLiveBatch, analyzeLoopConvergence, analyzeReactions, analyzeSpans, analyzeSteeringChain, answerSchemaErrors, applyRedactor, assembleSessionBundle, assertAnswerSchema, assertSandboxReachable, buildPolicyEvidenceRecord, buildSessionFactsReport, buildSessionIndex, buildSessionIndexFromRows, buildSpanRunTree, buildTraceFindingPacket, capText, chatTrajectoryToSpans, classifyEvidenceOnlyPath, classifyFailureFollowUps, classifyLiveActions, classifyReaction, claudeActor, codexActor, collectPolicyEvidence, collectSessionIndex, collectSessionSelection, collectSessionWorkflow, collectSessions, commandAnalyzer, commandRedactor, commandTextFromInput, computeSessionFacts, conformanceOfSpans, connectors, countSkillRunsJsonl, createBundleSourceReader, createFindingRejectionTally, cwdMatchesSelection, cwdMatchesSelectionResolved, defaultTraceLiveAnalysts, describeSessionRelationship, engineCallReservationFloorUsd, environmentAttributes, environmentFromSpanAttributes, equivalentGitCwds, executeUpload, exportTraceEvidenceFile, exportTraceEvidenceRows, exportTraceEvidenceText, externalFailureMessage, fileRunContextSupervisorRunReader, fileSha256, findContextRoot, findSessionTextLeaks, findSpanSourceFiles, findingRejection, findingRejectionDetail, forEachTreeNode, formatFindingRejections, haloAnalyzer, hashSessionBundleFiles, hodoscopeAnalyzer, httpJsonTransport, importCodeTraceBench, incompleteInputsNote, indexSessionIdsByTrace, inferRole, inferSpanKind, inspectSessionIndex, int, isBridgeMismatchError, isChatTrajectory, isChatTrajectoryMessage, isFileRunContextDir, isInheritedSpan, isSynthesizedSpan, knownHarnesses, listAdapters, listSessionBundleFiles, loadState, loadTraceQuestionsFile, loadTracesConfig, locateSessions, looksLikeAgentPrompt, mergeRolls, mergeTracesConfig, ms, normalizeAnalystCitations, normalizeRemote, normalizeTraceQuestions, otlpRowToSpan, outboundHash, parseIsoToEpochMs, parseJsonAnswer, parseSession, parseSince, planTraceAgenticRoute, planUpload, primeAnalyzer, projectSessionBundle, readCoordinationLog, readFileRunContext, readJsonFile, readJsonl, readOtlpInput, readPullRequests, readRunContextJournal, readRunContextSnapshot, readRunWatchSnapshot, readSessionBundleManifest, readSessionIndexFile, readSpanRunSnapshot, recordSessionCorruption, redactSpans, renderConformance, renderInspectionReport, renderRunContextSnapshot, renderRunWatchSnapshot, renderSessionFacts, renderSessionFactsContext, renderSpanRunSnapshot, renderTraceQuestionInstructions, renderTraceQuestionPrompt, renderTraceQuestionsReport, renderValidation, resolveAdapter, resolveOtlpInputFiles, resolveRepoAttrs, resolveRunContextDir, resolveRunWatchTarget, resolveSessionRepoAttrs, runCommand, runExternalAnalyzers, runPipelines, runTotals, runTraceImprovement, runTraceInvestigation, runTraceQuestions, runTraceStoreInvestigation, sandboxReplayBackend, saveReport, saveState, scanSessions, selectAdapters, serializeInspectionReport, serializePolicyEvidence, serializeSessionIndex, serializeSpans, serializeTraceStreamEvent, sessionFactsContext, sessionHash, sessionIdFromAttributes, sessionIntegrityAttributes, sessionTextSignatures, shellCommands, skippedAnalyses, span, spanRunTotals, stampEnvironmentAttrs, stampRepoAttrs, stampSessionIdentity, stampSessionIntegrity, stampSpanWorkdirRepoAttrs, streamSessions, summarizeOtlpExecution, summarizeSpanExecution, summarizeSpanStructure, takeJsonl, textIsSynthetic, toOpenInferenceSpan, toRuntimeStore, toTraceSpanEvents, tokens, totalAgenticFailureMessage, totalFindingRejections, traceAgenticKinds, traceCitationsInText, traceStreamEventsFromSpans, unavailableCapabilities, uploadKey, usd, userPromptSpan, validateOtlpSpans, validationExitCode, verifyFindingsInSandbox, verifySessionBundle, watchRunTarget, watchSessions, withSessionFactsContext, wrap, writeHodoscopeInput, writeInspectionReportFile, writeOtlpFile, writePolicyEvidenceFile, writeSessionBundleManifest, writeSessionIndexFile, writeTraceEvidenceExportFile, writeTraceImprovementArtifacts, writeTraceQuestionsArtifacts, zaiChatCaller, zeroPricedCost };
+export { ACTOR_ATTR, ATTR, type Actor, type AdoptionOptions, type AdoptionReport, AmpAdapter, type AnalysisEngineFromEnvOptions, type AnalyzeOptions, type AnalyzeResult, type AnswerSchema, type AssembleSessionBundleOptions, BLOBS_DIR, type BuildPolicyEvidenceOptions, type BuildSessionIndexOptions, type BuildTraceFindingPacketOptions, CHANGED_FILE_LIST_CAP, CITATION_NORMALIZATION_VERSION, CONTENT_CAP, COORDINATION_LOG_FILE, CORRECTIVE_REACTIONS, type ChangedFileFact, type ChatTrajectory, type ChatTrajectoryMessage, type ChatTrajectoryOptions, ClaudeAdapter, type CodeTraceBenchFileRef, type CodeTraceBenchImportOptions, type CodeTraceBenchImportReceipt, type CodeTraceBenchImportResult, type CodeTraceBenchImportedTrace, type CodeTraceBenchStep, CodexAdapter, CodexExecAdapter, CodexExecStreamError, CodexTaskScopeError, type CollectOptions, type CollectPolicyEvidenceOptions, type CollectSessionIndexOptions, type CollectSessionSelectionOptions, type CollectSessionWorkflowOptions, type ConformanceRenderOptions, type CoordinationLog, type CoordinationQuestion, type CoordinationSteer, CopilotAdapter, type CorruptionMode, DEFAULT_ANALYST_MODEL, DEFAULT_ASK_CONCURRENCY, DEFAULT_HARNESS, DEFAULT_SANDBOX_BASE_URL, EMPTY_SPAN_RUN_SNAPSHOT, EXPORT_RULE, EmptySessionError, type EvidenceOnlyVerdict, type ExcludedTurnFact, type ExecuteOptions, type ExportRule, type ExternalAnalysisKind, type ExternalAnalysisPayload, type ExternalAnalysisResult, type ExternalAnalyzer, type ExternalAnalyzerOptions, type ExternalDiscoveryCandidate, FACT_LIST_CAP, FACT_TEXT_CAP, FactoryAdapter, type FailureFollowUp, type FailureFollowUpReport, type FileRunContextReaderOptions, type FinalMessageFact, type FindSessionTextLeaksOptions, type FindingRejectionCounts, type FindingRejectionReasons, type FindingRejectionTally, type FollowUpKind, ForgeAdapter, GeminiAdapter, type HaloAnalyzerOptions, type HaloReasoningEffort, type HarnessTraceAdapter, type HodoscopeAnalyzerOptions, type HodoscopeInput, type HodoscopeMessage, type HodoscopeSourceMapEntry, type HodoscopeTrajectory, INGEST_SOURCE_CLI, INHERITED_SOURCE_ATTR, INHERITED_SPANS_OMITTED_ATTR, INHERITED_SPAN_ATTR, INHERITED_SPAN_COUNT_ATTR, type InheritedSpanSource, type InspectSessionIndexOptions, JsonSourceError, type JsonlCorruptionReceipt, JsonlParseError, type JsonlReadOptions, type LiveBatchOptions, type LocateOptions, type LoopConvergence, type LoopConvergenceReport, type LoopIteration, type LoopTrend, type LoopTrendBasis, MAX_SHELL_DEPTH, MAX_TRACE_QUESTION_CHARS, type ObservedLoop, type ObserverOptions, OpencodeAdapter, type OtlpIngestIssue, type OtlpIngestIssueKind, type OtlpInput, type OtlpInputFile, type OtlpRowConversion, type OtlpSpan, type OtlpSpanKind, type OtlpSpanLink, type OtlpStatusCode, POLICY_EVIDENCE_NOTE, PREPARED_CONTEXT_BYTE_CEILING, type ParentTaskResolution, type ParseOptions, PartialUploadError, PiAdapter, type PiAdapterOptions, type PipelineOptions, type PipelineReport, type PlanOptions, type PolicyEvidenceLoopSummary, type PolicyEvidenceRecord, type PolicyEvidenceToolSummary, type PrimeAnalyzerOptions, type PrimeTransport, type PrimeTransportRequest, type PrimeTransportResponse, type ProjectSessionBundleOptions, type ProjectSessionBundleResult, type PullRequestFact, type PullRequestFacts, type PullRequestReading, QwenAdapter, REACTIONS, RESULT_FILE, RULE, type Reaction, type ReactionReport, type ReactionSessionReport, type RedactSpansOptions, type Redactor, type RefusedSession, type RepoAttrs, type RepoResolution, type RepoResolutionSource, type ResolvedOtlpInput, type RunContextJournal, type RunContextNode, type RunContextResult, type RunContextSnapshot, type RunDiffOptions, type RunDiffReport, type RunDiffSide, type RunResult, type RunWatchSnapshot, type RunWatchTarget, type RuntimeTrace, SESSION_FACTS_VERSION_SUFFIX, SESSION_TOKEN_TOTAL_ATTR, SOURCE_ATTRIBUTE_PREFIX, SPAN_SYNTHESIZED_ATTR, SPAWN_JOURNAL_FILE, STATUS_MARK, SYNTHESIZED_SOURCE_ATTR, SYNTHESIZED_SPAN_ATTR, type SandboxReplayBackendOptions, type ScanOptions, type ScannedSession, type SessionBatch, type SessionBundleAbsence, type SessionBundleCarriedSignatures, type SessionBundleExclusion, type SessionBundleExclusionRule, type SessionBundleFile, type SessionBundleIssue, type SessionBundleIssueKind, type SessionBundleLeakCheck, type SessionBundleLedgerSlice, type SessionBundleManifest, type SessionBundleProjection, type SessionBundleResult, type SessionBundleSliceRule, type SessionBundleVerification, type SessionBundleView, type SessionCorruptionReceipt, type SessionEnvironment, type SessionFact, type SessionFacts, type SessionFactsReport, type SessionIdentityConflict, type SessionIdentityIndex, type SessionIntegrity, type SessionRef, type SessionRelationship, type SessionRole, type SessionSeedGroup, type SessionSelection, type SessionSelectionRow, type SessionSourceFile, type SessionTextLeak, type SessionTextLeakReport, type SessionTurnFact, type SessionWorkflow, SessionWorkflowError, type SessionWorkflowErrorCode, type SessionWorkflowIssue, type SessionWorkflowSession, type SessionWorkflowSummary, type SkippedAnalysis, type SkippedInputFile, type SourceRecordReference, type SpanInput, type SpanNodeStatus, type SpanRedaction, type SpanRunNode, type SpanRunSnapshot, type SpanStructure, type SpawnedChildResolution, type SpendRoll, type SteeringChainReport, type SteeringEdge, type SubagentSpawnFact, TRACE_QUESTION_PREVIEW_HEAD_CHARS, type TraceAgenticRoute, type TraceAgenticRouteReason, type TraceAgenticRouteReasonCode, type TraceContextIndex, type TraceContextRoot, type TraceEvidenceExportOptions, type TraceEvidenceExportResult, type TraceEvidenceFormatOption, type TraceEvidenceInputFormat, type TraceEvidenceRow, type TraceExecutionOptions, type TraceFindingPacket, type TraceImprovementArtifacts, type TraceImprovementOptions, type TraceImprovementResult, type TraceIndexedFile, type TraceInspectionArea, type TraceInspectionFinding, type TraceInspectionReport, type TraceInspectionSeverity, type TraceInvestigationOptions, type TraceInvestigationResult, type TraceLiveAction, type TraceLiveActionKind, type TraceLiveAnalysisContext, type TraceLiveAnalyst, type TraceLiveBatch, type TraceLiveEvidence, type TraceLiveFinding, type TraceLiveLoop, type TraceLiveSeverity, type TraceQuestion, type TraceQuestionAnswer, type TraceQuestionCitation, type TraceQuestionFailureKind, type TraceQuestionTrace, type TraceQuestionsArtifacts, type TraceQuestionsOptions, type TraceQuestionsResult, type TraceQuestionsTotals, type TraceSessionIndex, type TraceSessionIndexRow, type TraceStoreInvestigationOptions, type TraceStoreInvestigationResult, type TraceStreamEvent, type TraceStreamOptions, type TraceStreamReplayOptions, type TraceStreamSession, type TracesConfig, type TriggerPair, type TurnActorCount, type UnavailableCapabilities, type UploadBackend, type UploadIdentity, type UploadItem, type UploadPlan, type UploadRecord, type UploadResult, type UploadState, type UserPromptInput, type VerifySafeOptions, type VerifySafeResult, type WatchRunTargetOptions, ZERO_ROLL, type ZaiChatCallerOptions, addSpend, alreadyUploaded, analysisEngineFromEnv, analyzeAdoption, analyzeLiveBatch, analyzeLoopConvergence, analyzeReactions, analyzeSpans, analyzeSteeringChain, answerSchemaErrors, applyRedactor, assembleSessionBundle, assertAnswerSchema, assertSandboxReachable, assessSpans, buildPolicyEvidenceRecord, buildSessionFactsReport, buildSessionIndex, buildSessionIndexFromRows, buildSpanRunTree, buildTraceFindingPacket, capText, chatTrajectoryToSpans, classifyEvidenceOnlyPath, classifyFailureFollowUps, classifyLiveActions, classifyReaction, claudeActor, codexActor, collectPolicyEvidence, collectSessionIndex, collectSessionSelection, collectSessionWorkflow, collectSessions, commandAnalyzer, commandRedactor, commandTextFromInput, computeSessionFacts, conformanceOfSpans, connectors, countSkillRunsJsonl, createBundleSourceReader, createFindingRejectionTally, cwdMatchesSelection, cwdMatchesSelectionResolved, defaultTraceLiveAnalysts, describeSessionRelationship, diffRuns, engineCallReservationFloorUsd, environmentAttributes, environmentFromSpanAttributes, equivalentGitCwds, executeUpload, exportTraceEvidenceFile, exportTraceEvidenceRows, exportTraceEvidenceText, externalFailureMessage, fileRunContextSupervisorRunReader, fileSha256, findContextRoot, findSessionTextLeaks, findSpanSourceFiles, findingRejection, findingRejectionDetail, forEachTreeNode, formatFindingRejections, formatVerdict, haloAnalyzer, hashSessionBundleFiles, hodoscopeAnalyzer, httpJsonTransport, importCodeTraceBench, incompleteInputsNote, indexSessionIdsByTrace, inferRole, inferSpanKind, inspectSessionIndex, int, isBridgeMismatchError, isChatTrajectory, isChatTrajectoryMessage, isFileRunContextDir, isInheritedSpan, isSynthesizedSpan, knownHarnesses, listAdapters, listSessionBundleFiles, loadState, loadTraceQuestionsFile, loadTracesConfig, locateSessions, looksLikeAgentPrompt, mergeRolls, mergeTracesConfig, ms, normalizeAnalystCitations, normalizeRemote, normalizeTraceQuestions, otlpRowToSpan, outboundHash, parseIsoToEpochMs, parseJsonAnswer, parseSession, parseSince, planTraceAgenticRoute, planUpload, primeAnalyzer, projectSessionBundle, readCoordinationLog, readFileRunContext, readJsonFile, readJsonl, readOtlpInput, readPullRequests, readRunContextJournal, readRunContextSnapshot, readRunSide, readRunWatchSnapshot, readSessionBundleManifest, readSessionIndexFile, readSpanRunSnapshot, recordSessionCorruption, redactSpans, renderConformance, renderInspectionReport, renderRunContextSnapshot, renderRunDiff, renderRunWatchSnapshot, renderSessionFacts, renderSessionFactsContext, renderSpanRunSnapshot, renderTraceQuestionInstructions, renderTraceQuestionPrompt, renderTraceQuestionsReport, renderValidation, resolveAdapter, resolveOtlpInputFiles, resolveRepoAttrs, resolveRunContextDir, resolveRunWatchTarget, resolveSessionRepoAttrs, runCommand, runExternalAnalyzers, runPipelines, runTotals, runTraceImprovement, runTraceInvestigation, runTraceQuestions, runTraceStoreInvestigation, sandboxReplayBackend, saveReport, saveState, scanSessions, selectAdapters, serializeInspectionReport, serializePolicyEvidence, serializeSessionIndex, serializeSpans, serializeTraceStreamEvent, sessionFactsContext, sessionHash, sessionIdFromAttributes, sessionIntegrityAttributes, sessionTextSignatures, shellCommands, skippedAnalyses, span, spanRunTotals, stampEnvironmentAttrs, stampRepoAttrs, stampSessionIdentity, stampSessionIntegrity, stampSpanWorkdirRepoAttrs, streamSessions, summarizeOtlpExecution, summarizeSpanExecution, summarizeSpanStructure, takeJsonl, textIsSynthetic, toOpenInferenceSpan, toRuntimeStore, toTraceSpanEvents, tokens, totalAgenticFailureMessage, totalFindingRejections, traceAgenticKinds, traceCitationsInText, traceStreamEventsFromSpans, unavailableCapabilities, uploadKey, usd, userPromptSpan, validateOtlpSpans, validationExitCode, verdictExitCode, verifyFindingsInSandbox, verifySafe, verifySessionBundle, watchRunTarget, watchSessions, withSessionFactsContext, wrap, writeHodoscopeInput, writeInspectionReportFile, writeOtlpFile, writePolicyEvidenceFile, writeSessionBundleManifest, writeSessionIndexFile, writeTraceEvidenceExportFile, writeTraceImprovementArtifacts, writeTraceQuestionsArtifacts, zaiChatCaller, zeroPricedCost };

package/dist/index.js

@@ -5,7 +5,6 @@ import {
   BLOBS_DIR,
   CHANGED_FILE_LIST_CAP,
   CITATION_NORMALIZATION_VERSION,
-  CODING_REDACTION_RULES,
   CONTENT_CAP,
   COORDINATION_LOG_FILE,
   CORRECTIVE_REACTIONS,
@@ -54,7 +53,6 @@ import {
   SYNTHESIZED_SOURCE_ATTR,
   SYNTHESIZED_SPAN_ATTR,
   SessionWorkflowError,
-  TRACES_REDACTION_RULES,
   TRACE_QUESTION_PREVIEW_HEAD_CHARS,
   ZERO_ROLL,
   addSpend,
@@ -71,6 +69,7 @@ import {
   assembleSessionBundle,
   assertAnswerSchema,
   assertSandboxReachable,
+  assessSpans,
   buildPolicyEvidenceRecord,
   buildSessionFactsReport,
   buildSessionIndex,
@@ -102,6 +101,7 @@ import {
   cwdMatchesSelectionResolved,
   defaultTraceLiveAnalysts,
   describeSessionRelationship,
+  diffRuns,
   engineCallReservationFloorUsd,
   environmentAttributes,
   environmentFromSpanAttributes,
@@ -120,6 +120,7 @@ import {
   findingRejectionDetail,
   forEachTreeNode,
   formatFindingRejections,
+  formatVerdict,
   haloAnalyzer,
   hashSessionBundleFiles,
   hodoscopeAnalyzer,
@@ -169,6 +170,7 @@ import {
   readPullRequests,
   readRunContextJournal,
   readRunContextSnapshot,
+  readRunSide,
   readRunWatchSnapshot,
   readSessionBundleManifest,
   readSessionIndexFile,
@@ -178,6 +180,7 @@ import {
   renderConformance,
   renderInspectionReport,
   renderRunContextSnapshot,
+  renderRunDiff,
   renderRunWatchSnapshot,
   renderSessionFacts,
   renderSessionFactsContext,
@@ -245,7 +248,9 @@ import {
   userPromptSpan,
   validateOtlpSpans,
   validationExitCode,
+  verdictExitCode,
   verifyFindingsInSandbox,
+  verifySafe,
   verifySessionBundle,
   watchRunTarget,
   watchSessions,
@@ -262,7 +267,7 @@ import {
   writeTraceQuestionsArtifacts,
   zaiChatCaller,
   zeroPricedCost
-} from "./chunk-SKOW5V5U.js";
+} from "./chunk-G5KKIQZ6.js";
 
 // src/collect.ts
 async function collectSessions(opts = {}) {
@@ -286,7 +291,13 @@ import {
   makeFinding
 } from "@tangle-network/agent-eval/analyst";
 import { createHostedClient, hostedClientFromEnv } from "@tangle-network/agent-eval/hosted";
-import { DEFAULT_REDACTION_RULES, redactString, redactValue } from "@tangle-network/agent-eval/traces";
+import {
+  assessShareSafety,
+  redact,
+  redactForShare,
+  redactText,
+  shareAllowed
+} from "@tangle-network/agent-eval/traces";
 export {
   ACTOR_ATTR,
   ATTR,
@@ -295,7 +306,6 @@ export {
   BLOBS_DIR,
   CHANGED_FILE_LIST_CAP,
   CITATION_NORMALIZATION_VERSION,
-  CODING_REDACTION_RULES,
   CONTENT_CAP,
   COORDINATION_LOG_FILE,
   CORRECTIVE_REACTIONS,
@@ -308,7 +318,6 @@ export {
   DEFAULT_ANALYST_MODEL,
   DEFAULT_ASK_CONCURRENCY,
   DEFAULT_HARNESS,
-  DEFAULT_REDACTION_RULES,
   DEFAULT_SANDBOX_BASE_URL,
   EMPTY_SPAN_RUN_SNAPSHOT,
   EXPORT_RULE,
@@ -345,7 +354,6 @@ export {
   SYNTHESIZED_SOURCE_ATTR,
   SYNTHESIZED_SPAN_ATTR,
   SessionWorkflowError,
-  TRACES_REDACTION_RULES,
   TRACE_QUESTION_PREVIEW_HEAD_CHARS,
   ZERO_ROLL,
   addSpend,
@@ -362,6 +370,8 @@ export {
   assembleSessionBundle,
   assertAnswerSchema,
   assertSandboxReachable,
+  assessShareSafety,
+  assessSpans,
   buildDefaultAnalystRegistry,
   buildPolicyEvidenceRecord,
   buildSessionFactsReport,
@@ -396,6 +406,7 @@ export {
   cwdMatchesSelectionResolved,
   defaultTraceLiveAnalysts,
   describeSessionRelationship,
+  diffRuns,
   engineCallReservationFloorUsd,
   environmentAttributes,
   environmentFromSpanAttributes,
@@ -414,6 +425,7 @@ export {
   findingRejectionDetail,
   forEachTreeNode,
   formatFindingRejections,
+  formatVerdict,
   haloAnalyzer,
   hashSessionBundleFiles,
   hodoscopeAnalyzer,
@@ -465,17 +477,20 @@ export {
   readPullRequests,
   readRunContextJournal,
   readRunContextSnapshot,
+  readRunSide,
   readRunWatchSnapshot,
   readSessionBundleManifest,
   readSessionIndexFile,
   readSpanRunSnapshot,
   recordSessionCorruption,
+  redact,
+  redactForShare,
   redactSpans,
-  redactString,
-  redactValue,
+  redactText,
   renderConformance,
   renderInspectionReport,
   renderRunContextSnapshot,
+  renderRunDiff,
   renderRunWatchSnapshot,
   renderSessionFacts,
   renderSessionFactsContext,
@@ -513,6 +528,7 @@ export {
   sessionIdFromAttributes,
   sessionIntegrityAttributes,
   sessionTextSignatures,
+  shareAllowed,
   shellCommands,
   skippedAnalyses,
   span,
@@ -543,7 +559,9 @@ export {
   userPromptSpan,
   validateOtlpSpans,
   validationExitCode,
+  verdictExitCode,
   verifyFindingsInSandbox,
+  verifySafe,
   verifySessionBundle,
   watchRunTarget,
   watchSessions,

package/docs/trace-analysts.md

@@ -241,7 +241,7 @@ It reaches the built-in kinds run by `analyze --llm`, `investigate`, and `improv
 
 - The sheet is bounded at `PREPARED_CONTEXT_BYTE_CEILING` (30,000 bytes), a fifth of the `perCallByteCeiling` of 150,000 the trace tools work to, so the rest of the budget stays available for the tool calls the model still makes.
 - When the sheet does not fit, fields are shed from the largest downward and the shed is listed in `omitted_fields`. The tool-call counts are the last facts to go.
-- Receiving the sheet changes an analyst's behavior, so its version carries `+session-facts.1`. `createTraceAnalyst` records `prepare_context` in the exact-run identity, and a changed prepared context must not hide behind an unchanged version.
+- Receiving the sheet changes an analyst's behavior, so its version carries `+session-facts.2`. `createTraceAnalyst` records `prepare_context` in the exact-run identity, and a changed prepared context must not hide behind an unchanged version.
 - The sheet is not evidence. Citations still resolve against the raw spans, which is why every fact names its span ids rather than asking the model to trust the sheet.
 
 Pass `sessionFactsContext: false` to `analyzeSpans` to run an analyst without it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/traces",
-  "version": "0.15.4",
+  "version": "0.16.0",
   "description": "Point it at your coding-agent session traces (Claude Code, Codex, OpenCode, Gemini, Pi, …) and get failure-mode + efficiency findings. CLI + SDK over the @tangle-network/agent-eval analyst suite — observe live sessions, run your own analysts, redact, and upload to the Tangle Intelligence Platform.",
   "type": "module",
   "license": "MIT",
@@ -57,12 +57,13 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
+    "verify:contracts-corpus": "tsx tests/contracts-corpus/verify.mjs",
     "prepublishOnly": "pnpm check:source && pnpm build && pnpm check:package"
   },
   "dependencies": {
-    "@tangle-network/agent-eval": "0.186.2",
+    "@tangle-network/agent-eval": "0.193.2",
     "@tangle-network/agent-interface": "2.12.0",
-    "@tangle-network/agent-runtime": "0.257.0",
+    "@tangle-network/agent-runtime": "0.274.0",
     "@tangle-network/agent-trace-contract": "1.3.0",
     "@tangle-network/sandbox": "0.45.0"
   },