@tangle-network/traces 0.16.3 → 0.16.4

package/README.md

@@ -739,6 +739,12 @@ Claude Workflow subagents are selected by the run ID and transcript directory re
 Each Workflow child attaches to the latest matching call that started before the child.
 Task selection then keeps only children attached to calls in that task.
 Returned directories from another resumed Claude session are included in parsing and source hashes.
+For a copied Claude session, preserve `<session UUID>/subagents/workflows/<run ID>` beside the parent JSONL file.
+Recorded native `.claude/projects/<project>/<session UUID>/subagents/workflows/<run ID>` paths resolve to that copied subtree when outside the selected store.
+Copy every referenced Workflow directory, including runs stored under another resumed session UUID.
+The original transcript stays unchanged, and child attribution uses its recorded Workflow identity.
+Missing copied directories, conflicting source bindings, and symlinks that change the copied session or run identity stop parsing.
+Copied Workflow directories contain regular transcript and metadata files; symlink entries stop parsing.
 Missing or conflicting Workflow identities stop the parse instead of widening the selected history.
 Cross-harness parent/child trees are not inferred.
 For a reproducible report, run `traces list` first and pass its session ID with `--session`.
@@ -964,7 +970,7 @@ if (input.validation.ok) await analyzeSpans(input.spans)
 
 // Observe live sessions, feed findings anywhere (read-only, cancellable):
 const c = new AbortController()
-await watchSessions({ all: true, signal: c.signal, onLoop: (l) => alert(l.toolName, l.occurrences) })
+await watchSessions({ all: true, signal: c.signal, onLoop: (l) => alert(`${l.toolName} x${l.occurrences}`) })
 
 // Feed a visualizer or dashboard:
 await streamSessions({ all: true, signal: c.signal, includeSpans: false, onEvent: (event) => console.log(event) })
@@ -977,7 +983,7 @@ registry.register({
     return [makeFinding({ analyst_id: 'mine', area: 'custom', claim: '…', severity: 'info', evidence_refs: [], confidence: 0.9 })]
   },
 })
-await analyzeSpans(spans, { registry })
+await analyzeSpans(input.spans, { registry })
 ```
 
 ## Examples

package/dist/{chunk-G5KKIQZ6.js → chunk-SMT635QV.js}

@@ -1814,7 +1814,7 @@ var CORRECTIVE_REACTIONS = ["correction", "frustration", "jargon", "structure"];
 import { createHash as createHash6 } from "crypto";
 import { readdir as readdir5, stat as stat3 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { basename as basename5, join as join5, relative as relative3 } from "path";
+import { basename as basename4, join as join5, relative as relative3 } from "path";
 import {
   applyLlmSpanOtlpAttributes as applyLlmSpanOtlpAttributes2,
   LLM_CACHED_TOKENS,
@@ -1827,7 +1827,7 @@ import { ATTR as ATTR3, deriveHexId as deriveHexId2 } from "@tangle-network/agen
 // src/adapters/claude-subagent-sources.ts
 import { readdir as readdir4, realpath } from "fs/promises";
 import { homedir as homedir2 } from "os";
-import { basename as basename4, dirname as dirname3, isAbsolute as isAbsolute2, join as join4, relative as relative2, resolve as resolve3 } from "path";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join4, relative as relative2, resolve as resolve3 } from "path";
 
 // src/adapters/claude-workflow.ts
 import { basename as basename3, dirname as dirname2, isAbsolute, relative, resolve as resolve2 } from "path";
@@ -1928,7 +1928,7 @@ function workflowRunIdForSubagent(subDir, file) {
   }
   return parts[1];
 }
-function bindWorkflowSubagent(file, runId, transcriptDir, bindings) {
+function bindWorkflowSubagent(file, runId, transcriptDir, bindings, sourceTranscriptDir = transcriptDir) {
   const runBindings = bindings.get(runId);
   if (!runBindings || runBindings.length === 0) {
     throw new ClaudeTaskScopeError(
@@ -1942,7 +1942,7 @@ function bindWorkflowSubagent(file, runId, transcriptDir, bindings) {
     );
   }
   const localBindings = runBindings.filter(
-    (binding) => resolve2(binding.transcriptDir) === expectedDir
+    (binding) => resolve2(binding.transcriptDir) === resolve2(sourceTranscriptDir)
   );
   if (localBindings.length === 0) {
     throw new ClaudeTaskScopeError(
@@ -1995,7 +1995,7 @@ function selectWorkflowBinding(file, bindings, childStartedAt, explicitToolUseId
 }
 
 // src/adapters/claude-subagent-sources.ts
-async function listSubagentFiles(root, signal) {
+async function listSubagentFiles(root, signal, copiedWorkflow = false) {
   const pending = [root];
   const files = [];
   while (pending.length > 0) {
@@ -2012,6 +2012,11 @@ async function listSubagentFiles(root, signal) {
     signal?.throwIfAborted();
     for (const entry of entries) {
       const path = join4(dir, entry.name);
+      if (copiedWorkflow && entry.isSymbolicLink()) {
+        throw new ClaudeTaskScopeError(
+          `Claude Workflow subagent does not match copied source: ${path}`
+        );
+      }
       if (entry.isDirectory()) {
         pending.push(path);
       } else if (entry.isFile() && /^agent-.*\.jsonl$/.test(entry.name)) {
@@ -2029,23 +2034,47 @@ function workflowStorageRoot(ref) {
   const nativeRoot = resolve3(homedir2(), ".claude", "projects");
   return pathIsWithin(nativeRoot, ref.path) ? nativeRoot : dirname3(resolve3(ref.path));
 }
+function relocatedWorkflowDirectory(ref, binding) {
+  const source = binding.transcriptDir;
+  if (resolve3(source) !== source || source.includes("\\")) return void 0;
+  const parts = source.split("/").slice(-7);
+  const sessionId = parts[3];
+  if (parts[0] !== ".claude" || parts[1] !== "projects" || !parts[2] || !sessionId || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(sessionId) || parts[4] !== "subagents" || parts[5] !== "workflows" || parts[6] !== binding.runId) return void 0;
+  const sessionRoot2 = join4(dirname3(resolve3(ref.path)), sessionId);
+  return {
+    sessionRoot: sessionRoot2,
+    transcriptDir: join4(sessionRoot2, "subagents", "workflows", binding.runId)
+  };
+}
 async function workflowTranscriptDirectories(ref, bindings) {
   const allowedRoot = workflowStorageRoot(ref);
   const allowedRealRoot = await realpath(allowedRoot);
   const directories = /* @__PURE__ */ new Map();
   for (const runBindings of bindings.values()) {
     for (const binding of runBindings) {
-      const directory = resolve3(binding.transcriptDir);
+      let directory = resolve3(binding.transcriptDir);
+      let relocation;
       if (!pathIsWithin(allowedRoot, directory)) {
-        throw new ClaudeTaskScopeError(
-          `Claude Workflow transcript directory escapes ${allowedRoot}: ${directory}`
-        );
+        relocation = relocatedWorkflowDirectory(ref, binding);
+        if (!relocation || !pathIsWithin(allowedRoot, relocation.transcriptDir)) {
+          throw new ClaudeTaskScopeError(
+            `Claude Workflow transcript directory escapes ${allowedRoot}: ${directory}`
+          );
+        }
+        directory = relocation.transcriptDir;
       }
       let realDirectory;
       try {
         realDirectory = await realpath(directory);
       } catch (error) {
-        if (isMissingPathError(error)) continue;
+        if (isMissingPathError(error)) {
+          if (relocation) {
+            throw new ClaudeTaskScopeError(
+              `Cannot relocate Claude Workflow run ${binding.runId}: copied transcript directory is missing: ${directory}`
+            );
+          }
+          continue;
+        }
         throw error;
       }
       if (!pathIsWithin(allowedRealRoot, realDirectory)) {
@@ -2053,10 +2082,38 @@ async function workflowTranscriptDirectories(ref, bindings) {
           `Claude Workflow transcript directory escapes ${allowedRoot}: ${directory}`
         );
       }
-      directories.set(realDirectory, directory);
+      if (relocation) {
+        const copiedRoot = dirname3(resolve3(ref.path));
+        const copiedRealRoot = await realpath(copiedRoot);
+        const sessionRealRoot = await realpath(relocation.sessionRoot);
+        const expectedSessionRealRoot = resolve3(
+          copiedRealRoot,
+          relative2(copiedRoot, relocation.sessionRoot)
+        );
+        const expectedRealDirectory = resolve3(copiedRealRoot, relative2(copiedRoot, directory));
+        if (sessionRealRoot !== expectedSessionRealRoot || realDirectory !== expectedRealDirectory) {
+          throw new ClaudeTaskScopeError(
+            `Claude Workflow transcript directory does not match copied session subtree ${relocation.sessionRoot}: ${directory}`
+          );
+        }
+      }
+      const previous = directories.get(realDirectory);
+      if (previous && (previous.runId !== binding.runId || resolve3(previous.sourceTranscriptDir ?? previous.transcriptDir) !== resolve3(binding.transcriptDir))) {
+        throw new ClaudeTaskScopeError(
+          `Claude Workflow transcript directory ${directory} has conflicting source bindings`
+        );
+      }
+      directories.set(realDirectory, {
+        runId: binding.runId,
+        transcriptDir: directory,
+        sourceTranscriptDir: binding.transcriptDir,
+        ...relocation ? { copiedWorkflow: true } : {}
+      });
     }
   }
-  return [...directories.values()].sort();
+  return [...directories.values()].sort(
+    (left, right) => left.transcriptDir.localeCompare(right.transcriptDir)
+  );
 }
 async function collectClaudeSubagentSources(ref, bindings, signal) {
   const subDir = join4(ref.path.replace(/\.jsonl$/, ""), "subagents");
@@ -2073,10 +2130,11 @@ async function collectClaudeSubagentSources(ref, bindings, signal) {
       });
     }
   }
-  for (const transcriptDir of await workflowTranscriptDirectories(ref, bindings)) {
+  for (const location of await workflowTranscriptDirectories(ref, bindings)) {
     signal?.throwIfAborted();
-    const runId = basename4(transcriptDir);
-    for (const file of await listSubagentFiles(transcriptDir, signal)) {
+    const { runId, transcriptDir } = location;
+    const files2 = await listSubagentFiles(transcriptDir, signal, location.copiedWorkflow);
+    for (const file of files2) {
       const path = resolve3(file);
       filesByPath.set(path, file);
       const previous = workflowByPath.get(path);
@@ -2085,7 +2143,7 @@ async function collectClaudeSubagentSources(ref, bindings, signal) {
           `Claude Workflow subagent ${file} belongs to multiple transcript directories`
         );
       }
-      workflowByPath.set(path, { runId, transcriptDir });
+      workflowByPath.set(path, location);
     }
   }
   const files = [...filesByPath.values()].sort();
@@ -2794,7 +2852,7 @@ var ClaudeAdapter = class {
         if (opts.sinceMs && st.mtimeMs < opts.sinceMs) continue;
         const cwd = `/${dir.replace(/^-/, "").replace(/-/g, "/")}`;
         if (opts.cwd && !cwd.startsWith(opts.cwd)) continue;
-        refs.push({ harness: this.harness, sessionId: basename5(f, ".jsonl"), path, cwd, mtimeMs: st.mtimeMs });
+        refs.push({ harness: this.harness, sessionId: basename4(f, ".jsonl"), path, cwd, mtimeMs: st.mtimeMs });
       }
     }
     return refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
@@ -2945,7 +3003,7 @@ var ClaudeAdapter = class {
       const agent = {
         file,
         sourceKey,
-        agentId: basename5(file, ".jsonl").replace(/^agent-/, ""),
+        agentId: basename4(file, ".jsonl").replace(/^agent-/, ""),
         meta,
         ...meta.toolUseId ? { parentToolUseId: meta.toolUseId } : {}
       };
@@ -2954,11 +3012,12 @@ var ClaudeAdapter = class {
           file,
           workflowRunId,
           workflowLocation.transcriptDir,
-          workflowBindings
+          workflowBindings,
+          workflowLocation.sourceTranscriptDir
         );
         const parsed = await parseClaudeSubagent(ref, traceId, agent, options);
         const { binding, confidence } = selectWorkflowBinding(
-          basename5(file),
+          basename4(file),
           runBindings,
           firstSubagentTimestamp(agent, parsed),
           meta.toolUseId
@@ -3527,7 +3586,7 @@ async function resolveCodexParentTask(ref, childSessionId, options = {}) {
 // src/adapters/codex.ts
 import { readdir as readdir6, stat as stat4 } from "fs/promises";
 import { homedir as homedir4 } from "os";
-import { basename as basename6, join as join6 } from "path";
+import { basename as basename5, join as join6 } from "path";
 import { deriveHexId as deriveHexId3 } from "@tangle-network/agent-trace-contract";
 var SERVICE3 = "codex";
 var SESSION_HEAD_LINES = 40;
@@ -3999,7 +4058,7 @@ var CodexAdapter = class {
     }
     if (opts.sinceMs && st.mtimeMs < opts.sinceMs) return void 0;
     let cwd = null;
-    let id = basename6(path).replace(/^rollout-[\dT-]+-/, "").replace(/\.jsonl$/, "");
+    let id = basename5(path).replace(/^rollout-[\dT-]+-/, "").replace(/\.jsonl$/, "");
     const ref = { harness: this.harness, sessionId: id, path, cwd, mtimeMs: st.mtimeMs };
     const head = await takeJsonl(path, SESSION_HEAD_LINES, sessionJsonlOptions(ref));
     for (const parsed of head) {
@@ -4027,7 +4086,7 @@ var CodexAdapter = class {
   async locateBySessionId(sessionId, opts = {}) {
     const refs = [];
     for await (const path of walkRollouts(this.root())) {
-      if (!basename6(path).includes(sessionId)) continue;
+      if (!basename5(path).includes(sessionId)) continue;
       const ref = await this.refFromPath(path, opts);
       if (ref?.sessionId === sessionId) refs.push(ref);
     }
@@ -5276,7 +5335,7 @@ var CopilotAdapter = class {
 // src/adapters/factory.ts
 import { readdir as readdir8, stat as stat6 } from "fs/promises";
 import { homedir as homedir6 } from "os";
-import { basename as basename7, join as join8 } from "path";
+import { basename as basename6, join as join8 } from "path";
 var SERVICE6 = "factory";
 function textOf4(content) {
   return capText(
@@ -5321,7 +5380,7 @@ var FactoryAdapter = class {
           throw error;
         }
         if (opts.sinceMs && st.mtimeMs < opts.sinceMs) continue;
-        refs.push({ harness: this.harness, sessionId: basename7(f, ".jsonl"), path, cwd, mtimeMs: st.mtimeMs });
+        refs.push({ harness: this.harness, sessionId: basename6(f, ".jsonl"), path, cwd, mtimeMs: st.mtimeMs });
       }
     }
     return refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
@@ -5460,7 +5519,7 @@ var FactoryAdapter = class {
 // src/adapters/forge.ts
 import { readdir as readdir9, stat as stat7 } from "fs/promises";
 import { homedir as homedir7 } from "os";
-import { basename as basename8, join as join9 } from "path";
+import { basename as basename7, join as join9 } from "path";
 var SERVICE7 = "forge";
 function tokens(t) {
   if (!t) return null;
@@ -5498,7 +5557,7 @@ var ForgeAdapter = class {
           throw error;
         }
         if (opts.sinceMs && st.mtimeMs < opts.sinceMs) continue;
-        refs.push({ harness: this.harness, sessionId: basename8(f, ".json"), path, cwd: dir, mtimeMs: st.mtimeMs });
+        refs.push({ harness: this.harness, sessionId: basename7(f, ".json"), path, cwd: dir, mtimeMs: st.mtimeMs });
       }
     }
     return refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
@@ -5960,7 +6019,7 @@ var OpencodeAdapter = class {
 // src/adapters/pi.ts
 import { readdir as readdir12, stat as stat10 } from "fs/promises";
 import { homedir as homedir10 } from "os";
-import { basename as basename9, join as join12, resolve as resolve4 } from "path";
+import { basename as basename8, join as join12, resolve as resolve4 } from "path";
 var SERVICE9 = "pi";
 function terminalStatus(message) {
   const stopReason = message?.stopReason ?? "missing";
@@ -6042,7 +6101,7 @@ var PiAdapter = class {
     }
     const refs = [];
     for (const path of paths) {
-      const f = basename9(path);
+      const f = basename8(path);
       let st;
       try {
         st = await stat10(path);
@@ -6051,7 +6110,7 @@ var PiAdapter = class {
         throw error;
       }
       if (opts.sinceMs && st.mtimeMs < opts.sinceMs) continue;
-      let id = basename9(f, ".jsonl").replace(/^[\dTZ.-]+_/, "");
+      let id = basename8(f, ".jsonl").replace(/^[\dTZ.-]+_/, "");
       let cwd = null;
       const ref = {
         harness: this.harness,
@@ -6263,7 +6322,7 @@ var PiAdapter = class {
 // src/adapters/qwen.ts
 import { readdir as readdir13, stat as stat11 } from "fs/promises";
 import { homedir as homedir11 } from "os";
-import { basename as basename10, join as join13 } from "path";
+import { basename as basename9, join as join13 } from "path";
 var SERVICE10 = "qwen";
 function textOf9(parts) {
   if (!parts) return "";
@@ -6306,7 +6365,7 @@ var QwenAdapter = class {
           throw error;
         }
         if (opts.sinceMs && st.mtimeMs < opts.sinceMs) continue;
-        refs.push({ harness: this.harness, sessionId: basename10(f, ".jsonl"), path, cwd: null, mtimeMs: st.mtimeMs });
+        refs.push({ harness: this.harness, sessionId: basename9(f, ".jsonl"), path, cwd: null, mtimeMs: st.mtimeMs });
       }
     }
     return refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
@@ -6719,7 +6778,7 @@ function extractAbsolutePaths(spans) {
 async function resolveRepoAttrs(cwd) {
   if (!cwd) return {};
   const attrs = { [ATTR.CWD]: cwd };
-  const basename19 = (() => {
+  const basename18 = (() => {
     const trimmed = cwd.replace(/\/+$/g, "");
     const idx = trimmed.lastIndexOf("/");
     const name = idx === -1 ? trimmed : trimmed.slice(idx + 1);
@@ -6741,7 +6800,7 @@ async function resolveRepoAttrs(cwd) {
     if (commit) attrs[ATTR.GIT_COMMIT] = commit;
   } catch {
   }
-  attrs[ATTR.SUBJECT_KEY] = basename19;
+  attrs[ATTR.SUBJECT_KEY] = basename18;
   return attrs;
 }
 async function repoCandidateForPath(path) {
@@ -7933,7 +7992,7 @@ var COMMAND_PREFIXES = /* @__PURE__ */ new Set([
 var ASSIGNMENT = /^[A-Za-z_][A-Za-z0-9_]*=/;
 var MAX_SHELL_DEPTH = 4;
 var MAX_WORDS = 2e4;
-function basename11(word) {
+function basename10(word) {
   const cut = word.lastIndexOf("/");
   return cut === -1 ? word : word.slice(cut + 1);
 }
@@ -8032,7 +8091,7 @@ var ShellScanner = class {
     let start = 0;
     while (start < words.length) {
       const word = words[start];
-      if (ASSIGNMENT.test(word) || COMMAND_PREFIXES.has(basename11(word))) start += 1;
+      if (ASSIGNMENT.test(word) || COMMAND_PREFIXES.has(basename10(word))) start += 1;
       else break;
     }
     return start === 0 || start >= words.length ? words : words.slice(start);
@@ -8173,7 +8232,7 @@ function shellCommands(script, depth = 0) {
   const out = [];
   for (const words of commands) {
     out.push(words);
-    const name = basename11(words[0] ?? "");
+    const name = basename10(words[0] ?? "");
     if (!SHELLS.has(name) || depth >= MAX_SHELL_DEPTH) continue;
     for (let index = 1; index < words.length; index += 1) {
       const word = words[index];
@@ -8201,7 +8260,7 @@ function commandTextFromInput(input) {
   if (!Array.isArray(value) || value.length === 0) return void 0;
   const words = value.filter((entry) => typeof entry === "string");
   if (words.length !== value.length) return void 0;
-  const head = basename11(words[0] ?? "");
+  const head = basename10(words[0] ?? "");
   if (SHELLS.has(head)) {
     const flag = words.findIndex((word, position) => position > 0 && /^-[a-z]*c$/.test(word));
     if (flag !== -1 && words[flag + 1] !== void 0) return words[flag + 1];
@@ -8263,7 +8322,7 @@ function stringAttribute2(span2, key) {
   const value = span2.attributes[key];
   return typeof value === "string" ? value : null;
 }
-function basename12(word) {
+function basename11(word) {
   const cut = word.lastIndexOf("/");
   return cut === -1 ? word : word.slice(cut + 1);
 }
@@ -8346,7 +8405,7 @@ function numbersInLine(line) {
 function inferHeadBranch(commands, upTo, output) {
   for (let index = upTo - 1; index >= 0; index -= 1) {
     const words = commands[index];
-    if (basename12(words[0] ?? "") !== "git" || words.length < 2) continue;
+    if (basename11(words[0] ?? "") !== "git" || words.length < 2) continue;
     const sub = words[1];
     const rest = words.slice(2);
     if (sub === "push") {
@@ -8421,7 +8480,7 @@ function eventsFromRecord(record2, recordIndex) {
   let createIndex = 0;
   for (let index = 0; index < commands.length; index += 1) {
     const words = commands[index];
-    if (words.length < 3 || !GH_NAMES.has(basename12(words[0])) || words[1] !== "pr") continue;
+    if (words.length < 3 || !GH_NAMES.has(basename11(words[0])) || words[1] !== "pr") continue;
     const action = words[2];
     if (action === "create") {
       const printedNumber = printed[createIndex] ?? null;
@@ -13178,7 +13237,7 @@ import {
   readFile as readFile10,
   rm as rm2
 } from "fs/promises";
-import { basename as basename14, dirname as dirname10, join as join23, resolve as resolve9 } from "path";
+import { basename as basename13, dirname as dirname10, join as join23, resolve as resolve9 } from "path";
 
 // src/codetracebench-files.ts
 import { createHash as createHash11, randomUUID } from "crypto";
@@ -13196,13 +13255,13 @@ import {
   writeFile as writeFile6
 } from "fs/promises";
 import { hostname } from "os";
-import { basename as basename13, dirname as dirname9, isAbsolute as isAbsolute5, join as join21, relative as relative6, resolve as resolve8, sep as sep3 } from "path";
+import { basename as basename12, dirname as dirname9, isAbsolute as isAbsolute5, join as join21, relative as relative6, resolve as resolve8, sep as sep3 } from "path";
 async function claimImportLock(input) {
   const claimId = randomUUID();
   const path = `${input.outputDirectory}.lock`;
   const temporary = join21(
     dirname9(path),
-    `.${basename13(path)}.${claimId}.tmp`
+    `.${basename12(path)}.${claimId}.tmp`
   );
   const metadata = {
     kind: "traces.codetracebench-import-lock",
@@ -13364,7 +13423,7 @@ async function atomicWriteFile(path, content, signal) {
   signal.throwIfAborted();
   const temporary = join21(
     dirname9(path),
-    `.${basename13(path)}.${randomUUID()}.tmp`
+    `.${basename12(path)}.${randomUUID()}.tmp`
   );
   try {
     await writeFile6(temporary, content, {
@@ -13697,7 +13756,7 @@ async function importCodeTraceBench(options) {
   const rowsPath = resolve9(options.rowsPath);
   const trajectoryPath = resolve9(options.trajectoryDir);
   const outputDirectory = resolve9(options.outDir);
-  const outputBase = basename14(outputDirectory);
+  const outputBase = basename13(outputDirectory);
   if (!outputBase || outputDirectory === dirname10(outputDirectory)) {
     throw new Error("CodeTraceBench output directory must not be a filesystem root");
   }
@@ -13801,10 +13860,10 @@ async function runCodeTraceBenchImport(input) {
       generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
       input: {
         revision,
-        rowsFile: basename14(rowsPath),
+        rowsFile: basename13(rowsPath),
         rowsSha256,
         rowsBytes: rowsBytes.byteLength,
-        trajectoryDirectory: basename14(trajectoryDirectory),
+        trajectoryDirectory: basename13(trajectoryDirectory),
         sha256: inputSha256
       },
       settings: {
@@ -16148,7 +16207,7 @@ async function writeTraceEvidenceExportFile(inputPath, outPath, opts = {}) {
 // src/inspect.ts
 import { mkdtemp as mkdtemp7, readFile as readFile13, writeFile as writeFile9 } from "fs/promises";
 import { tmpdir as tmpdir7 } from "os";
-import { basename as basename15, join as join26 } from "path";
+import { basename as basename14, join as join26 } from "path";
 var severityRank2 = {
   high: 0,
   medium: 1,
@@ -16331,7 +16390,7 @@ function addContextFindings(index, findings) {
       refs: invalidJsonlFiles.slice(0, 5).map((file) => file.path)
     });
   }
-  const skillRunFiles = files.filter((file) => basename15(file.path) === "skill-runs.jsonl" && (file.jsonl?.rows ?? 0) > 0).map((file) => {
+  const skillRunFiles = files.filter((file) => basename14(file.path) === "skill-runs.jsonl" && (file.jsonl?.rows ?? 0) > 0).map((file) => {
     const rows = file.jsonl?.rows ?? 0;
     const keys = file.jsonl?.keys ?? {};
     const linkKeyCounts = {
@@ -16871,7 +16930,7 @@ async function streamSessions(opts) {
 
 // src/supervisor-run-context.ts
 import { readFile as readFile14, stat as stat16 } from "fs/promises";
-import { basename as basename16, join as join27 } from "path";
+import { basename as basename15, join as join27 } from "path";
 import { materializeTreeView } from "@tangle-network/agent-runtime/kernel";
 import {
   readRuntimeSupervisorRun
@@ -17037,7 +17096,7 @@ async function readFileRunContext(runDir, opts = {}) {
   return {
     ...sources,
     instanceId: opts.instanceId !== void 0 ? opts.instanceId : sources.instanceId,
-    arm: opts.arm !== void 0 ? opts.arm : basename16(runDir),
+    arm: opts.arm !== void 0 ? opts.arm : basename15(runDir),
     workers: sources.workers !== null && coordination.present ? workerSources(sources.workers, coordination) : sources.workers,
     ...sources.journal !== null ? {
       rootTranscriptRef: join27(runDir, SPAWN_JOURNAL_FILE),
@@ -19169,7 +19228,7 @@ function alreadyUploaded(state, harness, sessionId, hash2) {
 import { readFile as readFile18 } from "fs/promises";
 import { createRequire as createRequire2 } from "module";
 import { hostname as hostname2 } from "os";
-import { basename as basename17, join as join33 } from "path";
+import { basename as basename16, join as join33 } from "path";
 import { hostedClientFromEnv } from "@tangle-network/agent-eval/hosted";
 import { assessShareSafety as assessShareSafety2, REDACTION_VERSION, redact as redact2, shareAllowed } from "@tangle-network/agent-eval/traces";
 var require2 = createRequire2(import.meta.url);
@@ -19203,7 +19262,7 @@ async function gitBranch(cwd) {
 async function sessionMeta(item) {
   const meta = {
     [ATTR.HARNESS]: item.ref.harness,
-    [ATTR.SESSION_FILE]: basename17(item.ref.path),
+    [ATTR.SESSION_FILE]: basename16(item.ref.path),
     [ATTR.HOST]: hostname2(),
     [ATTR.UPLOADER]: `tangle-traces@${TRACES_VERSION}`,
     [ATTR.REDACTION_VERSION]: REDACTION_VERSION,
@@ -19369,7 +19428,7 @@ async function executeUpload(plan, opts = {}) {
 
 // src/verify-safe.ts
 import { lstat as lstat4, readdir as readdir21, readFile as readFile19 } from "fs/promises";
-import { basename as basename18, extname, join as join34, relative as relative7 } from "path";
+import { basename as basename17, extname, join as join34, relative as relative7 } from "path";
 import {
   assessShareSafety as assessShareSafety3,
   combineVerdicts as combineVerdicts2
@@ -19382,7 +19441,7 @@ async function verifySafe(target, options = {}) {
   const unreadable = [];
   const files = await listFiles(target, unreadable);
   for (const file of files) {
-    const label2 = relative7(target, file) || basename18(file);
+    const label2 = relative7(target, file) || basename17(file);
     let bytes;
     try {
       bytes = await readFile19(file);

package/dist/cli.js

@@ -83,7 +83,7 @@ import {
   writeSessionIndexFile,
   writeTraceEvidenceExportFile,
   writeTraceQuestionsArtifacts
-} from "./chunk-G5KKIQZ6.js";
+} from "./chunk-SMT635QV.js";
 
 // src/cli.ts
 import { readFileSync } from "fs";

package/dist/index.js

@@ -267,7 +267,7 @@ import {
   writeTraceQuestionsArtifacts,
   zaiChatCaller,
   zeroPricedCost
-} from "./chunk-G5KKIQZ6.js";
+} from "./chunk-SMT635QV.js";
 
 // src/collect.ts
 async function collectSessions(opts = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/traces",
-  "version": "0.16.3",
+  "version": "0.16.4",
   "description": "Point it at your coding-agent session traces (Claude Code, Codex, OpenCode, Gemini, Pi, …) and get failure-mode + efficiency findings. CLI + SDK over the @tangle-network/agent-eval analyst suite — observe live sessions, run your own analysts, redact, and upload to the Tangle Intelligence Platform.",
   "type": "module",
   "license": "MIT",
@@ -61,11 +61,11 @@
     "prepublishOnly": "pnpm check:source && pnpm build && pnpm check:package"
   },
   "dependencies": {
-    "@tangle-network/agent-eval": "0.197.0",
-    "@tangle-network/agent-interface": "2.12.0",
-    "@tangle-network/agent-runtime": "0.277.0",
-    "@tangle-network/agent-trace-contract": "1.3.0",
-    "@tangle-network/sandbox": "0.45.0"
+    "@tangle-network/agent-eval": "0.205.1",
+    "@tangle-network/agent-interface": "2.17.0",
+    "@tangle-network/agent-runtime": "0.293.0",
+    "@tangle-network/agent-trace-contract": "2.0.0",
+    "@tangle-network/sandbox": "0.60.10"
   },
   "devDependencies": {
     "@types/node": "^22.20.4",

package/skills/inspect-agent-traces/SKILL.md

@@ -9,37 +9,30 @@ Use the deterministic CLI first; keep inspection local and read-only.
 
 ## Choose the way in
 
-If the trace is already OTLP (any `@tangle-network/agent-trace-contract` emitter or other
-conforming exporter), read it directly. No adapter is involved.
+Read conforming OTLP directly, including `@tangle-network/agent-trace-contract` exports.
 
 ```bash
-traces validate spans.otlp.jsonl          # what can this trace answer? exit 1 on error findings
+traces validate spans.otlp.jsonl          # exit 1 on error findings
 traces analyze --otlp spans.otlp.jsonl --out .traces/current.md
 traces analyze --otlp results/sessions --out .traces/all.md   # a directory of exports
 ```
 
-Use `--harness` only for coding agents whose on-disk format we do not control.
-Those adapters are the legacy edge, not the way to integrate a system you own.
+Use `--harness` for native coding-agent formats; integrate systems you own through OTLP.
 
-In a run directory only the OTLP files are read; other `*.jsonl` logs are listed with
-what they hold. An `otlp/` subdirectory, when present, is read on its own.
+Directories read only OTLP files, preferring an `otlp/` subdirectory; other JSONL logs are listed separately.
 
-A section headed `inputs incomplete`, or carrying an `Inputs incomplete` line above its
-table, is computed from a field the trace does not carry everywhere. Report those numbers
-as uncaptured, never as zero spend. The `trace conformance` section names each such
-capability once; the markers repeat it at the number.
+Report `Inputs incomplete` values as uncaptured, never zero spend.
+The `trace conformance` section lists missing capabilities.
 
-For a loop trace, read `round-over-round convergence` (did round N+1 improve on N) and
-`steering chain` (which verdict caused which retry) before drawing any conclusion about
-whether the agent was making progress.
+For loops, inspect `round-over-round convergence` and `steering chain` before judging progress.
 
 ## Select the workflow
 
 ```bash
 traces --version
 traces list --harness codex --cwd "$PWD"
-traces analyze --harness codex --current --latest-turn --workflow \
-  --out .traces/current.md
+traces facts --harness codex --current --latest-turn --workflow \
+  --format text --out .traces/current-facts.txt
 ```
 
 - Use `--current` for the active Codex session.
@@ -50,6 +43,19 @@ traces analyze --harness codex --current --latest-turn --workflow \
 - For Claude Code, use `--harness claude-code --session <path> --latest-turn`; nested subagents are included.
 
 Never join agents by display name or timestamp when Traces reports missing or conflicting IDs.
+Read facts before full transcripts or analysis.
+Check parent and worker counts against the task being investigated.
+Run `analyze` only for questions the facts sheet cannot answer:
+
+```bash
+traces analyze --harness codex --current --latest-turn --workflow \
+  --out .traces/current.md
+```
+
+For moved evidence, keep byte-identical transcripts and record their source paths and hashes.
+Preserve Claude's `<session UUID>/subagents/workflows/<run ID>` subtree beside the copied parent JSONL file.
+Restore missing child files from the source; rewriting recorded paths loses the original evidence.
+Check current branches, edits, commits, and PRs before reporting unfinished work; transcripts describe past actions.
 
 ## Export
 
@@ -70,41 +76,37 @@ traces improve --harness codex --current --latest-turn --workflow \
 `improve` writes findings, evidence, a report, and spans.
 It edits no agent, repository, memory store, or knowledge base.
 
-Write one session's durable evidence directory for a later reader:
+Preserve a session for later inspection:
 
 ```bash
 traces bundle --harness claude-code --session <id-or-path> --out .traces/bundle
 ```
 
-`bundle` copies the transcript, the derived report and spans, the `.evolve` ledger rows inside the session window, and a `manifest.json` with a SHA-256 per file.
-It spends no model call.
-A missing transcript stops the assembly; an absent optional input is recorded in `manifest.absent` with the probed path.
+`bundle` copies transcripts, report, spans, and session-window `.evolve` rows with per-file SHA-256 hashes.
+It uses no model calls.
+Missing transcripts stop assembly; optional missing inputs appear in `manifest.absent`.
 
 ## Pick the view for the reader
 
-That bundle is the FULL view (`manifest.view: "full"`) and holds the whole session transcript.
-Never give it to a writer that must not see an earlier conclusion: the transcript holds the text of every file the session wrote, so a check for the earlier report FILE passes while its CONTENT is still readable.
-
-Project the writer's copy instead:
+The full bundle includes transcripts containing prior reports, even when report files are removed.
+For a writer who must not see earlier conclusions, project an evidence-only copy:
 
 ```bash
 traces bundle-view .traces/bundle --view evidence-only --out .traces/writer
 ```
 
-It carries `derived/session-index.json`, `derived/evidence.jsonl`, and the structured `ledger/` records.
-It excludes the transcripts, report, spans, and every prose ledger file by name, with the rules and hashes in `manifest.excluded`.
-It also drops any carried file that repeats an 8-word run of prose from an excluded one.
-`manifest.view` names which copy you hold.
+This retains the session index, evidence JSONL, and structured ledger records.
+It excludes transcripts, reports, spans, prose ledgers, and files repeating an eight-word passage from excluded prose.
+Check `manifest.view` and the rules and hashes in `manifest.excluded`.
 
 ## Ask your own question
 
-`traces ask --last 1 --question "<text>" --budget 2 --dir .traces/ask` keeps the engine's
-prose answer, resolves every `trace://` citation in it, and spends model calls to do it.
+`traces ask --last 1 --question "<text>" --budget 2 --dir .traces/ask` spends model calls and resolves answer citations.
 
 ## Report
 
 - State the source (`--otlp <path>` or the harness), selected task boundary, session and span counts, and integrity warnings.
-- State which capabilities the trace could not support, and name the analyses that reported nothing because of it.
+- Name missing capabilities and analyses affected by them.
 - Cite each finding with its exact `trace://` reference.
 - Mark missing outcome, cost, token, skill, or relationship data unknown.
 - Do not infer task success from a completion message.

package/docs/replay-batch-20260802.md

@@ -1,76 +0,0 @@
-# Replay-verify batch — first measured replayability and fix-flip rates (2026-08-02)
-
-Provenance: labels shas in `~/bench-cache/ctb-20260801/replay-batch/label-shas.txt`; docker 29.6.1; node v24.16.0; orchestrator :4095 + SDK adapter :4097; seed 17; fix model glm-5.2 via z.ai direct (16k cap, one doubled retry on length-empty); command recorded in `run2-20260802.log` header.
-Corpora: dev-32, holdout-1, holdout-2, split3 (all spent mini-SWE splits; submit-only golds excluded per the split3 positional-degeneracy finding).
-
-## Headline (n=22 replayable of 133 label entries)
-
-| Rate | Value |
-| --- | --- |
-| Replayability (prefix ≤10% divergence AND arm A reproduces recorded returncode at the gold step) | 16/22 = 72.7% |
-| Strict signature match (returncode + output substring) | 13/22 = 59.1% |
-| Fix-flip (one-shot glm-5.2 corrected command makes the failure vanish) | 9/11 = 81.8% |
-| Fix-flip, nonzero-returncode subset | 7/9 = 77.8% |
-
-Exclusions (101 of 133, all named): 65 no-swe-raw-trajectory, 21 no-docker-image, 21 gold-only-submit-step, 4 no-gold-incorrect-step.
-LLM: 16 calls, 5 residual failures (long-reasoning cases exceeding the doubled cap), 41,878 prompt + 51,312 completion tokens (~$0.14).
-
-
-Generated 2026-08-02T00:55:37.309Z.
-
-## Headline
-
-- **Replayability rate: 72.7%** (16/22 replayable cases where the prefix replayed with ≤10% returncode divergence AND arm A reproduced the recorded returncode at the gold step k).
-- Signature-strict rate: 59.1% (13/22; additionally requires the recorded error substring in arm A output).
-- **Fix-flip rate: 81.8%** (9/11 arm-B-executed cases where the generated fix made the failure vanish).
-- Fix-flip rate on recorded-rc≠0 cases: 77.8% (7/9; real recorded failures — a gold step recorded with rc 0 flips vacuously).
-
-## Enumeration
-
-133 label entries across 4 corpora → 22 replayable (SWE-style docker image + ≥1 gold incorrect step), 22 executed.
-
-| exclusion reason | count |
-| --- | --- |
-| no-swe-raw-trajectory | 65 |
-| no-docker-image | 21 |
-| gold-only-submit-step | 21 |
-| no-gold-incorrect-step | 4 |
-
-Submit-command golds are never counterfactual targets (a gold on the submit step marks a bad submit decision, not a failed command):
-
-| corpus | cases excluded (all golds = submit) | golds skipped within replayable cases |
-| --- | --- | --- |
-| dev-32 | 1 | 0 |
-| holdout-1 | 2 | 0 |
-| split3 | 18 | 0 |
-
-## Per-case results
-
-| corpus | trajectory | k | rc@k | prefix | div | div% | armA exit | rc match | sig match | replayed | fix | armB exit | vanished | wall s |
-| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-holdout-1 | miniswe-OpenAI__GPT-5-clap-rs__clap-3179-107b… | 33 | 0 | 32 | 4 | 12.5 | 0 | yes | yes | no | — | — | — | 10.6
-holdout-1 | miniswe-OpenAI__GPT-5-clap-rs__clap-3421-8c92… | 23 | 2 | 22 | 1 | 4.5 | 2 | yes | no | **yes** | llm-failed | — | — | 7.2
-holdout-1 | miniswe-OpenAI__GPT-5-clap-rs__clap-3975-5f1a… | 33 | 101 | 32 | 1 | 3.1 | 127 | no | no | no | — | — | — | 13.0
-holdout-1 | miniswe-OpenAI__GPT-5-clap-rs__clap-4248-85bd… | 23 | 2 | 22 | 0 | 0 | 2 | yes | no | **yes** | generated | 0 | **yes** | 35.3
-holdout-2 | miniswe-OpenAI__GPT-5-instance_ansible__ansib… | 7 | 127 | 6 | 0 | 0 | 127 | yes | yes | **yes** | generated | 0 | **yes** | 20.0
-holdout-2 | miniswe-OpenAI__GPT-5-instance_ansible__ansib… | 13 | 0 | 12 | 0 | 0 | 0 | yes | yes | **yes** | llm-failed | — | — | 13.5
-holdout-2 | miniswe-OpenAI__GPT-5-instance_element-hq__el… | 17 | 2 | 16 | 0 | 0 | 2 | yes | no | **yes** | llm-failed | — | — | 25.9
-holdout-2 | miniswe-OpenAI__GPT-5-instance_internetarchiv… | 10 | 0 | 9 | 0 | 0 | 0 | yes | yes | **yes** | generated | 0 | **yes** | 4.8
-holdout-2 | miniswe-OpenAI__GPT-5-instance_qutebrowser__q… | 15 | 127 | 14 | 0 | 0 | 127 | yes | yes | **yes** | generated | 0 | **yes** | 4.1
-holdout-2 | miniswe-OpenAI__GPT-5-instance_qutebrowser__q… | 18 | 127 | 17 | 0 | 0 | 127 | yes | yes | **yes** | generated | 0 | **yes** | 4.1
-holdout-2 | miniswe-OpenAI__GPT-5-ponylang__ponyc-1057-56… | 35 | 127 | 34 | 0 | 0 | 127 | yes | yes | **yes** | generated | 0 | **yes** | 4.4
-holdout-2 | miniswe-OpenAI__GPT-5-ponylang__ponyc-2532-98… | 12 | 1 | 11 | 0 | 0 | 1 | yes | yes | **yes** | generated | 0 | **yes** | 4.4
-holdout-2 | miniswe-OpenAI__GPT-5-sveltejs__svelte-10608-… | 23 | 127 | 22 | 0 | 0 | 127 | yes | yes | **yes** | generated | 0 | **yes** | 4.7
-split3 | miniswe-OpenAI__GPT-5-fasterxml__jackson-data… | 18 | 127 | 17 | 0 | 0 | 127 | yes | yes | **yes** | generated | 127 | no | 5.7
-split3 | miniswe-OpenAI__GPT-5-instance_ansible__ansib… | 21 | 0 | 20 | 1 | 5 | 2 | no | no | no | — | — | — | 4.8
-split3 | miniswe-OpenAI__GPT-5-instance_element-hq__el… | 21 | 0 | 20 | 0 | 0 | 2 | no | no | no | — | — | — | 6.3
-split3 | miniswe-OpenAI__GPT-5-nushell__nushell-13357-… | 28 | 127 | 27 | 0 | 0 | 127 | yes | yes | **yes** | generated | 127 | no | 5.9
-split3 | miniswe-OpenAI__GPT-5-ponylang__ponyc-2205-2a… | 27 | 127 | 26 | 0 | 0 | 0 | no | no | no | — | — | — | 5.4
-split3 | miniswe-OpenAI__GPT-5-ponylang__ponyc-3973-60… | 20 | 0 | 19 | 0 | 0 | 127 | no | no | no | — | — | — | 5.8
-split3 | miniswe-OpenAI__GPT-5-simdjson__simdjson-2016… | 24 | 0 | 23 | 0 | 0 | 0 | yes | yes | **yes** | llm-failed | — | — | 5.2
-split3 | miniswe-OpenAI__GPT-5-sveltejs__svelte-11913-… | 19 | 0 | 18 | 0 | 0 | 0 | yes | yes | **yes** | generated | 0 | **yes** | 41.2
-split3 | miniswe-OpenAI__GPT-5-sveltejs__svelte-9962-5… | 21 | 127 | 20 | 0 | 0 | 127 | yes | yes | **yes** | llm-failed | — | — | 4.3
-
-## LLM fix generation
-
-Model glm-5.2: 16 calls (5 failed), 41878 prompt + 51312 completion tokens.