@tangle-network/traces 0.17.0 → 0.18.0

package/dist/{chunk-4QY4U4XW.js → chunk-TCTZ7DUY.js}

@@ -1025,8 +1025,8 @@ var OTLP_WRITE_CHUNK_CHARS = 4 * 1024 * 1024;
 async function writeOtlpFile(spans, outPath) {
   const { mkdtemp: mkdtemp8, open: open2 } = await import("fs/promises");
   const { tmpdir: tmpdir8 } = await import("os");
-  const { join: join35 } = await import("path");
-  const path = outPath ?? join35(await mkdtemp8(join35(tmpdir8(), "traces-")), "spans.otlp.jsonl");
+  const { join: join36 } = await import("path");
+  const path = outPath ?? join36(await mkdtemp8(join36(tmpdir8(), "traces-")), "spans.otlp.jsonl");
   const handle = await open2(path, "w");
   try {
     let chunk = "";
@@ -2448,7 +2448,10 @@ function distinctClaudeEvent(event, seen, sourcePath, fallbackUid) {
       if (previous.fingerprint !== fingerprint) {
         throw new ClaudeEventConflictError(sourcePath, uid);
       }
-      if (previous.originKind === null && originKind !== null) return { originEnrichment: originKind, uid };
+      if (previous.originKind === null && originKind !== null) {
+        seen.set(uid, { fingerprint, originKind });
+        return { originEnrichment: originKind, uid };
+      }
       if (previous.originKind !== null && originKind !== null && previous.originKind !== originKind) {
         throw new ClaudeEventConflictError(sourcePath, uid);
       }
@@ -3982,9 +3985,9 @@ function itemCountsJson(counts) {
 }
 function placeInnerSpans(pending, windows) {
   return pending.map((entry) => {
-    const { parent, join: join35 } = joinItem(windows, entry.startMs, entry.endMs);
+    const { parent, join: join36 } = joinItem(windows, entry.startMs, entry.endMs);
     if (parent) entry.span.parent_span_id = parent.span_id;
-    entry.span.attributes["traces.codex.item_join"] = join35;
+    entry.span.attributes["traces.codex.item_join"] = join36;
     return entry.span;
   });
 }
@@ -15308,6 +15311,7 @@ function assertPositiveInteger(name, value) {
 import { createHash as createHash14 } from "crypto";
 import { request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
+import { join as join25 } from "path";
 var DEFAULT_BRIDGE_URL = "http://localhost:4181";
 var DEFAULT_MODEL = "prime/zai/glm-5.2";
 var DEFAULT_TIMEOUT_MS = 12e5;
@@ -15323,9 +15327,9 @@ async function fileDelivery(otlpPath, perAttributeCharCap, signal) {
   signal?.throwIfAborted();
   const { copyFile: copyFile2, mkdtemp: mkdtemp8, stat: stat19 } = await import("fs/promises");
   const { tmpdir: tmpdir8 } = await import("os");
-  const { join: join35 } = await import("path");
-  const cwd = await mkdtemp8(join35(tmpdir8(), "traces-prime-"));
-  await copyFile2(otlpPath, join35(cwd, TRAJECTORY_FILE_NAME));
+  const { join: join36 } = await import("path");
+  const cwd = await mkdtemp8(join36(tmpdir8(), "traces-prime-"));
+  await copyFile2(otlpPath, join36(cwd, TRAJECTORY_FILE_NAME));
   const artifactBytes = (await stat19(otlpPath)).size;
   return { mode: "file-cwd", perAttributeCharCap, renderedChars: artifactBytes, cwd, fileName: TRAJECTORY_FILE_NAME };
 }
@@ -15478,7 +15482,16 @@ var FILE_DELIVERY_CONTRACT_LINES = [
   '     "confidence": number 0..1}',
   "Do NOT include a rationale field. Keep every string SHORT \u2014 long strings get corrupted in transport and void your work.",
   `Report at most ${MAX_FINDINGS} findings; a finding cites 1..${MAX_SPAN_IDS_PER_FINDING} span_ids, each copied VERBATIM from a span in ${TRAJECTORY_FILE_NAME}.`,
-  '"findings" is [] only for a clean trajectory.'
+  '"findings" is [] only for a clean trajectory.',
+  `PAYLOAD CHANNEL \u2014 do this BEFORE your final message: WRITE the complete JSON object (same schema as`,
+  "the reply contract) to a file named findings.json in your working directory, using your tools (python",
+  "or shell). One assistant message has an output-token cap and a cut reply is discarded unread;",
+  "findings.json is the durable channel a large result must travel on. Write it first, incrementally if",
+  "it is long, THEN send your final message: the fenced ```json block when it is short enough to fit,",
+  "otherwise ONE line only \u2014 `findings written to findings.json`.",
+  "FINAL MESSAGE RULE: after your REPL work is done, send ONE last message that contains NOTHING BUT the",
+  "fenced ```json block (or the one-line pointer above) \u2014 no preamble, no summary, no code identifiers",
+  "around it. A reply whose last message is prose or a partial block is discarded unread."
 ];
 function buildPrompt(question, projection) {
   if (projection.delivery.mode === "file-cwd") {
@@ -15499,16 +15512,23 @@ function buildPrompt(question, projection) {
     projection.rendered
   ].join("\n");
 }
-function buildRepairPrompt(parseDefect, previousReply) {
+function replyWasTruncated(previousReply, finishReason) {
+  if (finishReason === "length") return true;
+  if (finishReason !== null) return false;
+  return extractJsonObject(previousReply) === null;
+}
+function buildRepairPrompt(parseDefect, previousReply, finishReason) {
+  const truncated = replyWasTruncated(previousReply, finishReason);
   return [
     "Your previous reply to a trace-analysis task was structurally malformed and could not be parsed",
-    `(${parseDefect}). Below is your previous reply verbatim. Re-emit ONLY the corrected JSON \u2014 one`,
-    "fenced ```json block, no other text, no tools. The JSON object has exactly two fields:",
+    `(${parseDefect}${truncated ? "; it was cut off by the output limit" : ""}). Below is your previous reply verbatim.`,
+    "Re-emit ONLY the corrected JSON \u2014 one fenced ```json block, no other text, no tools. The JSON object has exactly two fields:",
     '  "answer": string (ONE short sentence, max 300 chars)',
     '  "findings": array (possibly empty) of {"span_ids": [string, ...],',
     '   "severity": "critical"|"high"|"medium"|"low"|"info", "area": string (max 40 chars),',
     '   "claim": string (max 200 chars), "action": string (optional, max 200 chars), "confidence": number 0..1}',
-    "No rationale field. Keep every string SHORT. Preserve the span ids and verdicts of your previous reply exactly; shorten prose freely.",
+    "No rationale field. Keep every string SHORT.",
+    truncated ? "Your previous reply was cut off by the output limit. Write the corrected JSON to a file named findings.json in your working directory with your tools (at most 3 findings \u2014 your strongest \u2014 with terse strings, claim and action under 120 chars each), then reply with ONE line: findings written to findings.json." : "Preserve the span ids and verdicts of your previous reply exactly; shorten prose freely.",
     "",
     "PREVIOUS REPLY:",
     previousReply
@@ -15543,6 +15563,59 @@ function parseDefectOf(parsed) {
   if (!Array.isArray(parsed.findings)) return 'JSON has no "findings" array';
   return null;
 }
+var FINDINGS_FILE_MAX_BYTES = 256 * 1024;
+var FINDINGS_FILE_NAME = "findings.json";
+async function readFindingsFile2(cwd, signal) {
+  signal?.throwIfAborted();
+  const path = join25(cwd, FINDINGS_FILE_NAME);
+  let raw;
+  const { readFile: readFile20, stat: stat19 } = await import("fs/promises");
+  try {
+    const size = (await stat19(path)).size;
+    if (size > FINDINGS_FILE_MAX_BYTES) {
+      return { parsed: null, receipt: `${FINDINGS_FILE_NAME} is ${size} bytes (cap ${FINDINGS_FILE_MAX_BYTES}); refused` };
+    }
+    raw = await readFile20(path, "utf8");
+  } catch {
+    return void 0;
+  }
+  const direct = extractJsonObject(raw);
+  if (direct !== null && parseDefectOf(direct) === null) {
+    return { parsed: direct, receipt: `${FINDINGS_FILE_NAME} read (${raw.length} chars)` };
+  }
+  const rows = [];
+  let droppedLines = 0;
+  let answer = null;
+  for (const [index, line] of raw.split("\n").entries()) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0) continue;
+    const row = extractJsonObject(trimmed);
+    if (row === null) {
+      droppedLines += 1;
+      continue;
+    }
+    if (typeof row.answer === "string" && !Array.isArray(row.findings)) {
+      if (answer === null) answer = row.answer;
+      continue;
+    }
+    if (Array.isArray(row.findings)) {
+      rows.push(...row.findings);
+      if (answer === null && typeof row.answer === "string") answer = row.answer;
+      continue;
+    }
+    rows.push(row);
+  }
+  if (rows.length === 0) {
+    return {
+      parsed: null,
+      receipt: `${FINDINGS_FILE_NAME} unreadable (no parseable object${droppedLines > 0 ? `, ${droppedLines} malformed line(s) dropped` : ""})`
+    };
+  }
+  return {
+    parsed: { ...answer !== null ? { answer } : {}, findings: rows },
+    receipt: `${FINDINGS_FILE_NAME} read as JSONL (${rows.length} row(s)${droppedLines > 0 ? `, ${droppedLines} malformed line(s) dropped` : ""})`
+  };
+}
 function findingRowDefect(row, spanTraces) {
   if (!row || typeof row !== "object" || Array.isArray(row)) return "row is not an object";
   const record2 = row;
@@ -15675,7 +15748,12 @@ async function callBridge(transport, url, model, content, timeoutMs, callerSigna
   if (typeof replyContent !== "string" || replyContent.length === 0) {
     throw new PrimeBridgeError(`${turn}bridge reply carries no message content`);
   }
-  return { content: replyContent, usage: normalizeUsage(record2.usage) };
+  const finishReason = record2.choices?.[0]?.finish_reason;
+  return {
+    content: replyContent,
+    usage: normalizeUsage(record2.usage),
+    finishReason: typeof finishReason === "string" && finishReason.length > 0 ? finishReason : null
+  };
 }
 function failure(output, error) {
   return { analyzer: ANALYST_ID, kind: "report", ok: false, output, error };
@@ -15748,7 +15826,7 @@ function primeAnalyzer(opts = {}) {
             transport,
             url,
             model,
-            buildRepairPrompt(parseDefect, reply.content),
+            buildRepairPrompt(parseDefect, reply.content, reply.finishReason),
             timeoutMs,
             analyzeOpts.signal,
             "repair-turn "
@@ -15761,11 +15839,25 @@ function primeAnalyzer(opts = {}) {
         parsed = extractJsonObject(repairReply.content);
         parseDefect = parseDefectOf(parsed);
       }
+      let channel = "reply";
+      let channelReceipt = "";
       if (parseDefect !== null) {
-        return failure(
-          reply.content,
-          `${parseDefect} in prime reply${repairAttempted ? " even after the bounded repair turn" : ""}; ` + renderUsage(usage)
-        );
+        const deliveryCwd2 = projection.delivery.mode === "file-cwd" ? projection.delivery.cwd : void 0;
+        const file = deliveryCwd2 !== void 0 ? await readFindingsFile2(deliveryCwd2, analyzeOpts.signal).catch(() => void 0) : void 0;
+        if (file?.parsed !== null && file !== void 0) {
+          parsed = file.parsed;
+          parseDefect = parseDefectOf(parsed);
+          if (parseDefect === null) {
+            channel = FINDINGS_FILE_NAME;
+            channelReceipt = file.receipt;
+          }
+        }
+        if (parseDefect !== null) {
+          return failure(
+            reply.content,
+            `${parseDefect} in prime reply${repairAttempted ? " even after the bounded repair turn" : ""}` + (file === void 0 ? "; no findings.json in the run directory" : `; ${file.receipt}`) + `; ${renderUsage(usage)}`
+          );
+        }
       }
       const rows = parsed.findings.slice(0, MAX_FINDINGS);
       const overflow = parsed.findings.length - rows.length;
@@ -15786,6 +15878,7 @@ function primeAnalyzer(opts = {}) {
         `findings: ${findings.length} mapped, ${rejected.length} rejected` + (overflow > 0 ? `, ${overflow} over the ${MAX_FINDINGS}-finding cap dropped` : ""),
         ...rejected,
         deliveryLine,
+        ...channel !== "reply" ? [`reply channel: ${channel} \u2014 ${channelReceipt}; the chat reply was unparseable, the payload file carried the result`] : [],
         `repair: ${repairAttempted ? "attempted (succeeded)" : "not needed"}`,
         renderUsage(usage),
         ...findings.length === 0 ? ["zero findings \u2014 an honest null, not a failure"] : []
@@ -15890,7 +15983,7 @@ async function applyRedactor(spans, redactor) {
 import { createHash as createHash15 } from "crypto";
 import { mkdtemp as mkdtemp6, readFile as readFile12, writeFile as writeFile8 } from "fs/promises";
 import { tmpdir as tmpdir6 } from "os";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 import {
   firstNumberAttr as firstNumberAttr2,
   LLM_CACHED_TOKEN_ATTR_KEYS,
@@ -16561,7 +16654,7 @@ async function exportTraceEvidenceFile(inputPath, opts = {}) {
 }
 async function writeTraceEvidenceExportFile(inputPath, outPath, opts = {}) {
   const result = await exportTraceEvidenceFile(inputPath, opts);
-  const path = outPath ?? join25(await mkdtemp6(join25(tmpdir6(), "traces-export-")), "spans.openinference.jsonl");
+  const path = outPath ?? join26(await mkdtemp6(join26(tmpdir6(), "traces-export-")), "spans.openinference.jsonl");
   await writeFile8(path, serializeSpans(result.spans), "utf8");
   return { ...result, path };
 }
@@ -16569,7 +16662,7 @@ async function writeTraceEvidenceExportFile(inputPath, outPath, opts = {}) {
 // src/inspect.ts
 import { mkdtemp as mkdtemp7, readFile as readFile13, writeFile as writeFile9 } from "fs/promises";
 import { tmpdir as tmpdir7 } from "os";
-import { basename as basename14, join as join26 } from "path";
+import { basename as basename14, join as join27 } from "path";
 var severityRank2 = {
   high: 0,
   medium: 1,
@@ -16858,7 +16951,7 @@ async function readSessionIndexFile(path) {
   return parsed;
 }
 async function writeInspectionReportFile(report, outPath) {
-  const path = outPath ?? join26(await mkdtemp7(join26(tmpdir7(), "traces-inspect-")), "inspection-report.md");
+  const path = outPath ?? join27(await mkdtemp7(join27(tmpdir7(), "traces-inspect-")), "inspection-report.md");
   await writeFile9(path, renderInspectionReport(report), "utf8");
   return path;
 }
@@ -17292,7 +17385,7 @@ async function streamSessions(opts) {
 
 // src/supervisor-run-context.ts
 import { readFile as readFile14, stat as stat16 } from "fs/promises";
-import { basename as basename15, join as join27 } from "path";
+import { basename as basename15, join as join28 } from "path";
 import { materializeTreeView } from "@tangle-network/agent-runtime/kernel";
 import {
   readRuntimeSupervisorRun
@@ -17454,14 +17547,14 @@ function parseInstant(v) {
 }
 async function readFileRunContext(runDir, opts = {}) {
   const sources = await readRuntimeSupervisorRun(runDir);
-  const coordination = readCoordinationLog(await readMaybe(join27(runDir, COORDINATION_LOG_FILE)));
+  const coordination = readCoordinationLog(await readMaybe(join28(runDir, COORDINATION_LOG_FILE)));
   return {
     ...sources,
     instanceId: opts.instanceId !== void 0 ? opts.instanceId : sources.instanceId,
     arm: opts.arm !== void 0 ? opts.arm : basename15(runDir),
     workers: sources.workers !== null && coordination.present ? workerSources(sources.workers, coordination) : sources.workers,
     ...sources.journal !== null ? {
-      rootTranscriptRef: join27(runDir, SPAWN_JOURNAL_FILE),
+      rootTranscriptRef: join28(runDir, SPAWN_JOURNAL_FILE),
       traceCommand: `traces watch ${runDir}`
     } : {}
   };
@@ -17470,7 +17563,7 @@ function fileRunContextSupervisorRunReader(runDir, opts = {}) {
   return { runRef: runDir, read: () => readFileRunContext(runDir, opts) };
 }
 async function isFileRunContextDir(runDir) {
-  return stat16(join27(runDir, SPAWN_JOURNAL_FILE)).then((s) => s.isFile()).catch(() => false);
+  return stat16(join28(runDir, SPAWN_JOURNAL_FILE)).then((s) => s.isFile()).catch(() => false);
 }
 function parseJsonObject(text2) {
   if (text2 === null) return null;
@@ -17536,9 +17629,9 @@ function mergeRolls(a, b) {
   };
 }
 async function readRunContextSnapshot(runDir) {
-  const journal = readRunContextJournal(await readMaybe(join27(runDir, SPAWN_JOURNAL_FILE)));
-  const coordination = readCoordinationLog(await readMaybe(join27(runDir, COORDINATION_LOG_FILE)));
-  const resultText = await readMaybe(join27(runDir, RESULT_FILE));
+  const journal = readRunContextJournal(await readMaybe(join28(runDir, SPAWN_JOURNAL_FILE)));
+  const coordination = readCoordinationLog(await readMaybe(join28(runDir, COORDINATION_LOG_FILE)));
+  const resultText = await readMaybe(join28(runDir, RESULT_FILE));
   const result = parseResult(resultText);
   const view = safeTreeView(journal.events);
   const nodes = view === null ? [] : orderNodes(view, journal);
@@ -17721,7 +17814,7 @@ function wrap(text2, indent) {
 
 // src/run-span-tree.ts
 import { readdir as readdir18 } from "fs/promises";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 import {
   firstNumberAttr as firstNumberAttr3,
   LLM_COST_ATTR_KEYS as LLM_COST_ATTR_KEYS2,
@@ -17996,7 +18089,7 @@ async function findSpanSourceFiles(dir) {
   const found = [];
   const entries = await readdir18(dir, { withFileTypes: true }).catch(() => []);
   for (const entry of entries) {
-    const child = join28(dir, entry.name);
+    const child = join29(dir, entry.name);
     if (entry.isFile()) {
       if (SPAN_FILE_PATTERN.test(entry.name)) found.push(child);
       continue;
@@ -18004,7 +18097,7 @@ async function findSpanSourceFiles(dir) {
     if (!entry.isDirectory()) continue;
     const nested = await readdir18(child, { withFileTypes: true }).catch(() => []);
     for (const inner of nested) {
-      if (inner.isFile() && SPAN_FILE_PATTERN.test(inner.name)) found.push(join28(child, inner.name));
+      if (inner.isFile() && SPAN_FILE_PATTERN.test(inner.name)) found.push(join29(child, inner.name));
     }
   }
   return found.sort();
@@ -18012,7 +18105,7 @@ async function findSpanSourceFiles(dir) {
 
 // src/supervisor-run-watch.ts
 import { readdir as readdir19 } from "fs/promises";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 function budget(node) {
   const parts = [`${int(node.budget.maxIterations)}it`, `${int(node.budget.maxTokens)}tok`];
   if (node.budget.maxUsd !== void 0) parts.push(`$${node.budget.maxUsd.toFixed(2)}`);
@@ -18156,7 +18249,7 @@ async function resolveRunContextDir(dir) {
   const candidates = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const child = join29(dir, entry.name);
+    const child = join30(dir, entry.name);
     if (await isFileRunContextDir(child)) candidates.push(child);
   }
   if (candidates.length === 1) return candidates[0];
@@ -18492,7 +18585,7 @@ function parseJsonAnswer(text2) {
 
 // src/ask.ts
 import { mkdir as mkdir6, readFile as readFile15, writeFile as writeFile10 } from "fs/promises";
-import { join as join30, resolve as resolve11 } from "path";
+import { join as join31, resolve as resolve11 } from "path";
 import { performance } from "perf_hooks";
 import { CostCeilingReachedError, CostLedger } from "@tangle-network/agent-eval";
 import {
@@ -19047,8 +19140,8 @@ async function writeTraceQuestionsArtifacts(result, outDir) {
   await mkdir6(directory, { recursive: true });
   const paths = {
     directory,
-    result: join30(directory, "answers.json"),
-    report: join30(directory, "report.md"),
+    result: join31(directory, "answers.json"),
+    report: join31(directory, "report.md"),
     traces: result.otlpPath
   };
   const { report, ...machine } = result;
@@ -19112,7 +19205,7 @@ async function watchSessions(opts) {
 // src/bundle-view.ts
 import { createHash as createHash17 } from "crypto";
 import { mkdir as mkdir7, readdir as readdir20, readFile as readFile16, writeFile as writeFile11 } from "fs/promises";
-import { dirname as dirname11, join as join31, resolve as resolve12 } from "path";
+import { dirname as dirname11, join as join32, resolve as resolve12 } from "path";
 var EVIDENCE_ONLY_ALLOW_LIST = [
   {
     path: "derived/session-index.json",
@@ -19236,7 +19329,7 @@ async function findSessionTextLeaks(opts) {
   const index = /* @__PURE__ */ new Map();
   const carried = [];
   for (const path of opts.carriedPaths) {
-    const signatures = sessionTextSignatures(await readFile16(join31(opts.viewDir, path), "utf8"));
+    const signatures = sessionTextSignatures(await readFile16(join32(opts.viewDir, path), "utf8"));
     carried.push({ path, signatures: signatures.size });
     for (const signature of signatures) if (!index.has(signature)) index.set(signature, path);
   }
@@ -19244,7 +19337,7 @@ async function findSessionTextLeaks(opts) {
   const comparedSources = [];
   let sourceSignatures = 0;
   for (const sourcePath of opts.excludedPaths) {
-    const signatures = sessionTextSignatures(await readFile16(join31(opts.sourceDir, sourcePath), "utf8"));
+    const signatures = sessionTextSignatures(await readFile16(join32(opts.sourceDir, sourcePath), "utf8"));
     comparedSources.push(sourcePath);
     sourceSignatures += signatures.size;
     for (const signature of signatures) {
@@ -19303,17 +19396,17 @@ async function projectSessionBundle(opts) {
   const candidates = [];
   for (const path of await listSessionBundleFiles(sourceDir)) {
     if (path === "manifest.json") continue;
-    const bytes2 = await readFile16(join31(sourceDir, path));
+    const bytes2 = await readFile16(join32(sourceDir, path));
     const sha2562 = createHash17("sha256").update(bytes2).digest("hex");
     const recorded = sourceHashes.get(path);
     if (!recorded) {
       throw new Error(
-        `${join31(sourceDir, path)} is not listed in the bundle manifest \u2014 the bundle changed after assembly and cannot be projected; re-run \`traces bundle\``
+        `${join32(sourceDir, path)} is not listed in the bundle manifest \u2014 the bundle changed after assembly and cannot be projected; re-run \`traces bundle\``
       );
     }
     if (recorded.sha256 !== sha2562) {
       throw new Error(
-        `${join31(sourceDir, path)} does not match its manifest hash (${recorded.sha256} recorded, ${sha2562} on disk) \u2014 the bundle changed after assembly and cannot be projected; re-run \`traces bundle\``
+        `${join32(sourceDir, path)} does not match its manifest hash (${recorded.sha256} recorded, ${sha2562} on disk) \u2014 the bundle changed after assembly and cannot be projected; re-run \`traces bundle\``
       );
     }
     const verdict = classifyEvidenceOnlyPath(path);
@@ -19349,7 +19442,7 @@ async function projectSessionBundle(opts) {
       });
       continue;
     }
-    const target = join31(outDir, candidate.path);
+    const target = join32(outDir, candidate.path);
     await mkdir7(dirname11(target), { recursive: true });
     await writeFile11(target, candidate.bytes);
     carriedPaths.push(candidate.path);
@@ -19366,7 +19459,7 @@ async function projectSessionBundle(opts) {
     })),
     matches: 0
   };
-  const sourceManifestBytes = await readFile16(join31(sourceDir, "manifest.json"));
+  const sourceManifestBytes = await readFile16(join32(sourceDir, "manifest.json"));
   const manifest = {
     schemaVersion: 2,
     kind: "traces.session_bundle",
@@ -19554,11 +19647,11 @@ function renderRunDiff(report) {
 // src/upload-state.ts
 import { mkdir as mkdir8, readFile as readFile17, writeFile as writeFile12 } from "fs/promises";
 import { homedir as homedir12 } from "os";
-import { dirname as dirname12, join as join32 } from "path";
+import { dirname as dirname12, join as join33 } from "path";
 import { contentHash } from "@tangle-network/agent-eval";
 function stateFile() {
-  const base = process.env.XDG_STATE_HOME ?? join32(homedir12(), ".local", "state");
-  return join32(base, "tangle-traces", "uploaded.json");
+  const base = process.env.XDG_STATE_HOME ?? join33(homedir12(), ".local", "state");
+  return join33(base, "tangle-traces", "uploaded.json");
 }
 function uploadKey(harness, sessionId) {
   return `${harness}:${sessionId}`;
@@ -19590,7 +19683,7 @@ function alreadyUploaded(state, harness, sessionId, hash2) {
 import { readFile as readFile18 } from "fs/promises";
 import { createRequire as createRequire2 } from "module";
 import { hostname as hostname2 } from "os";
-import { basename as basename16, join as join33 } from "path";
+import { basename as basename16, join as join34 } from "path";
 import { hostedClientFromEnv } from "@tangle-network/agent-eval/hosted";
 import { assessShareSafety as assessShareSafety2, REDACTION_VERSION, redact as redact2, shareAllowed } from "@tangle-network/agent-eval/traces";
 var require2 = createRequire2(import.meta.url);
@@ -19614,7 +19707,7 @@ async function planUpload(opts = {}) {
 async function gitBranch(cwd) {
   if (!cwd) return void 0;
   try {
-    const head = await readFile18(join33(cwd, ".git", "HEAD"), "utf8");
+    const head = await readFile18(join34(cwd, ".git", "HEAD"), "utf8");
     const m = head.match(/^ref:\s*refs\/heads\/(.+)$/m);
     return m?.[1]?.trim();
   } catch {
@@ -19790,7 +19883,7 @@ async function executeUpload(plan, opts = {}) {
 
 // src/verify-safe.ts
 import { lstat as lstat4, readdir as readdir21, readFile as readFile19 } from "fs/promises";
-import { basename as basename17, extname, join as join34, relative as relative7 } from "path";
+import { basename as basename17, extname, join as join35, relative as relative7 } from "path";
 import {
   assessShareSafety as assessShareSafety3,
   combineVerdicts as combineVerdicts2
@@ -19851,7 +19944,7 @@ async function listFiles(target, unreadable) {
   const out = [];
   const walk = async (dir) => {
     for (const entry of (await readdir21(dir, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name))) {
-      const path = join34(dir, entry.name);
+      const path = join35(dir, entry.name);
       if (entry.isDirectory()) await walk(path);
       else if (entry.isFile()) out.push(path);
       else unreadable.push(`${relative7(target, path)}: not a regular file`);

package/dist/cli.js

@@ -83,7 +83,7 @@ import {
   writeSessionIndexFile,
   writeTraceEvidenceExportFile,
   writeTraceQuestionsArtifacts
-} from "./chunk-4QY4U4XW.js";
+} from "./chunk-TCTZ7DUY.js";
 
 // src/cli.ts
 import { readFileSync } from "fs";

package/dist/index.d.ts

@@ -4139,6 +4139,12 @@ interface PrimeAnalyzerOptions {
     repair?: boolean;
     transport?: PrimeTransport;
 }
+interface FindingsFileOutcome {
+    parsed: Record<string, unknown> | null;
+    /** Human-readable receipt for the output: what the file was and what
+     *  happened to it. Present whenever a file was found. */
+    receipt: string;
+}
 /** Default transport: plain node:http/https, NOT fetch — undici's fixed 300s
  *  headers timeout kills prime calls that legitimately run longer; the
  *  analyzer's AbortSignal is the only deadline. */
@@ -4934,4 +4940,4 @@ interface ExecuteOptions {
 /** Send the final, new outbound items (or write their dry-run OTLP). */
 declare function executeUpload(plan: UploadPlan, opts?: ExecuteOptions): Promise<UploadResult>;
 
-export { ACTOR_ATTR, ATTR, type Actor, type AdoptionOptions, type AdoptionReport, AmpAdapter, type AnalysisEngineFromEnvOptions, type AnalyzeOptions, type AnalyzeResult, type AnswerSchema, type AssembleSessionBundleOptions, BLOBS_DIR, type BuildPolicyEvidenceOptions, type BuildSessionIndexOptions, type BuildTraceFindingPacketOptions, CHANGED_FILE_LIST_CAP, CITATION_NORMALIZATION_VERSION, CONTENT_CAP, COORDINATION_LOG_FILE, CORRECTIVE_REACTIONS, type ChangedFileFact, type ChatTrajectory, type ChatTrajectoryMessage, type ChatTrajectoryOptions, ClaudeAdapter, type CodeTraceBenchFileRef, type CodeTraceBenchImportOptions, type CodeTraceBenchImportReceipt, type CodeTraceBenchImportResult, type CodeTraceBenchImportedTrace, type CodeTraceBenchStep, CodexAdapter, CodexExecAdapter, CodexExecStreamError, CodexTaskScopeError, type CollectOptions, type CollectPolicyEvidenceOptions, type CollectSessionIndexOptions, type CollectSessionSelectionOptions, type CollectSessionWorkflowOptions, type CompactionMeasurement, type ConformanceRenderOptions, type ContentFootprint, type CoordinationLog, type CoordinationQuestion, type CoordinationSteer, CopilotAdapter, type CorruptionMode, type CoveredMeasurement, DEFAULT_ANALYST_MODEL, DEFAULT_ASK_CONCURRENCY, DEFAULT_HARNESS, DEFAULT_SANDBOX_BASE_URL, EMPTY_SPAN_RUN_SNAPSHOT, EXPORT_RULE, EmptySessionError, type EvidenceOnlyVerdict, type ExcludedTurnFact, type ExecuteOptions, type ExportRule, type ExternalAnalysisKind, type ExternalAnalysisPayload, type ExternalAnalysisResult, type ExternalAnalyzer, type ExternalAnalyzerOptions, type ExternalDiscoveryCandidate, FACT_LIST_CAP, FACT_TEXT_CAP, FactoryAdapter, type FailureFollowUp, type FailureFollowUpReport, type FileRunContextReaderOptions, type FinalMessageFact, type FindSessionTextLeaksOptions, type FindingRejectionCounts, type FindingRejectionReasons, type FindingRejectionTally, type FollowUpKind, ForgeAdapter, GeminiAdapter, type HaloAnalyzerOptions, type HaloReasoningEffort, type HarnessTraceAdapter, type HodoscopeAnalyzerOptions, type HodoscopeInput, type HodoscopeMessage, type HodoscopeSourceMapEntry, type HodoscopeTrajectory, INGEST_SOURCE_CLI, INHERITED_SOURCE_ATTR, INHERITED_SPANS_OMITTED_ATTR, INHERITED_SPAN_ATTR, INHERITED_SPAN_COUNT_ATTR, type InheritedSpanSource, type InspectSessionIndexOptions, JsonSourceError, type JsonlCorruptionReceipt, JsonlParseError, type JsonlReadOptions, type LiveBatchOptions, type LocateOptions, type LoopConvergence, type LoopConvergenceReport, type LoopIteration, type LoopTrend, type LoopTrendBasis, MAX_SHELL_DEPTH, MAX_TRACE_QUESTION_CHARS, type ObservedLoop, type ObserverOptions, OpencodeAdapter, type OtlpIngestIssue, type OtlpIngestIssueKind, type OtlpInput, type OtlpInputFile, type OtlpRowConversion, type OtlpSpan, type OtlpSpanKind, type OtlpSpanLink, type OtlpStatusCode, POLICY_EVIDENCE_NOTE, PREPARED_CONTEXT_BYTE_CEILING, type ParentTaskResolution, type ParseOptions, PartialUploadError, PiAdapter, type PiAdapterOptions, type PipelineOptions, type PipelineReport, type PlanOptions, type PolicyEvidenceLoopSummary, type PolicyEvidenceRecord, type PolicyEvidenceToolSummary, type PrimeAnalyzerOptions, type PrimeTransport, type PrimeTransportRequest, type PrimeTransportResponse, type ProjectSessionBundleOptions, type ProjectSessionBundleResult, type PullRequestFact, type PullRequestFacts, type PullRequestReading, QwenAdapter, REACTIONS, RESULT_FILE, RULE, type Reaction, type ReactionReport, type ReactionSessionReport, type RedactSpansOptions, type Redactor, type RefusedSession, type RepoAttrs, type RepoResolution, type RepoResolutionSource, type ResolvedOtlpInput, type RunContextJournal, type RunContextNode, type RunContextResult, type RunContextSnapshot, type RunDiffOptions, type RunDiffReport, type RunDiffSide, type RunResult, type RunWatchSnapshot, type RunWatchTarget, type RuntimeTrace, SESSION_FACTS_MEASUREMENT_VERSION, SESSION_FACTS_VERSION_SUFFIX, SESSION_TOKEN_TOTAL_ATTR, SOURCE_ATTRIBUTE_PREFIX, SPAN_SYNTHESIZED_ATTR, SPAWN_JOURNAL_FILE, STATUS_MARK, SYNTHESIZED_SOURCE_ATTR, SYNTHESIZED_SPAN_ATTR, type SandboxReplayBackendOptions, type ScanOptions, type ScannedSession, type SessionBatch, type SessionBundleAbsence, type SessionBundleCarriedSignatures, type SessionBundleExclusion, type SessionBundleExclusionRule, type SessionBundleFile, type SessionBundleIssue, type SessionBundleIssueKind, type SessionBundleLeakCheck, type SessionBundleLedgerSlice, type SessionBundleManifest, type SessionBundleProjection, type SessionBundleResult, type SessionBundleSliceRule, type SessionBundleVerification, type SessionBundleView, type SessionCorruptionReceipt, type SessionEnvironment, type SessionFact, type SessionFacts, type SessionFactsOptions, type SessionFactsReport, type SessionIdentityConflict, type SessionIdentityIndex, type SessionIntegrity, type SessionMeasurements, type SessionRef, type SessionRelationship, type SessionRole, type SessionSeedGroup, type SessionSelection, type SessionSelectionRow, type SessionSourceFile, type SessionTextLeak, type SessionTextLeakReport, type SessionTurnFact, type SessionWorkflow, SessionWorkflowError, type SessionWorkflowErrorCode, type SessionWorkflowIssue, type SessionWorkflowSession, type SessionWorkflowSummary, type SkippedAnalysis, type SkippedInputFile, type SourceRecordReference, type SpanInput, type SpanNodeStatus, type SpanRedaction, type SpanRunNode, type SpanRunSnapshot, type SpanStructure, type SpawnedChildResolution, type SpendRoll, type SteeringChainReport, type SteeringEdge, type SubagentSpawnFact, TRACE_QUESTION_PREVIEW_HEAD_CHARS, type ToolMeasurement, type TraceAgenticRoute, type TraceAgenticRouteReason, type TraceAgenticRouteReasonCode, type TraceContextIndex, type TraceContextRoot, type TraceEvidenceExportOptions, type TraceEvidenceExportResult, type TraceEvidenceFormatOption, type TraceEvidenceInputFormat, type TraceEvidenceRow, type TraceExecutionOptions, type TraceFindingPacket, type TraceImprovementArtifacts, type TraceImprovementOptions, type TraceImprovementResult, type TraceIndexedFile, type TraceInspectionArea, type TraceInspectionFinding, type TraceInspectionReport, type TraceInspectionSeverity, type TraceInvestigationOptions, type TraceInvestigationResult, type TraceLiveAction, type TraceLiveActionKind, type TraceLiveAnalysisContext, type TraceLiveAnalyst, type TraceLiveBatch, type TraceLiveEvidence, type TraceLiveFinding, type TraceLiveLoop, type TraceLiveSeverity, type TraceQuestion, type TraceQuestionAnswer, type TraceQuestionCitation, type TraceQuestionFailureKind, type TraceQuestionTrace, type TraceQuestionsArtifacts, type TraceQuestionsOptions, type TraceQuestionsResult, type TraceQuestionsTotals, type TraceSessionIndex, type TraceSessionIndexRow, type TraceStoreInvestigationOptions, type TraceStoreInvestigationResult, type TraceStreamEvent, type TraceStreamOptions, type TraceStreamReplayOptions, type TraceStreamSession, type TracesConfig, type TriggerPair, type TurnActorCount, type UnavailableCapabilities, type UploadBackend, type UploadIdentity, type UploadItem, type UploadPlan, type UploadRecord, type UploadResult, type UploadState, type UserPromptInput, type VerifySafeOptions, type VerifySafeResult, type WatchRunTargetOptions, ZERO_ROLL, type ZaiChatCallerOptions, addSpend, alreadyUploaded, analysisEngineFromEnv, analyzeAdoption, analyzeLiveBatch, analyzeLoopConvergence, analyzeReactions, analyzeSpans, analyzeSteeringChain, answerSchemaErrors, applyRedactor, assembleSessionBundle, assertAnswerSchema, assertSandboxReachable, assessSpans, buildPolicyEvidenceRecord, buildSessionFactsReport, buildSessionIndex, buildSessionIndexFromRows, buildSpanRunTree, buildTraceFindingPacket, capText, chatTrajectoryToSpans, classifyEvidenceOnlyPath, classifyFailureFollowUps, classifyLiveActions, classifyReaction, claudeActor, codexActor, collectPolicyEvidence, collectSessionIndex, collectSessionSelection, collectSessionWorkflow, collectSessions, commandAnalyzer, commandRedactor, commandTextFromInput, computeAdoption, computeSessionFacts, conformanceOfSpans, connectors, countSkillRunsJsonl, createBundleSourceReader, createFindingRejectionTally, cwdMatchesSelection, cwdMatchesSelectionResolved, defaultTraceLiveAnalysts, describeSessionRelationship, diffRuns, engineCallReservationFloorUsd, environmentAttributes, environmentFromSpanAttributes, equivalentGitCwds, executeUpload, exportTraceEvidenceFile, exportTraceEvidenceRows, exportTraceEvidenceText, externalFailureMessage, fileRunContextSupervisorRunReader, fileSha256, findContextRoot, findSessionTextLeaks, findSpanSourceFiles, findingRejection, findingRejectionDetail, forEachTreeNode, formatFindingRejections, formatVerdict, haloAnalyzer, hashSessionBundleFiles, hodoscopeAnalyzer, httpJsonTransport, importCodeTraceBench, incompleteInputsNote, indexSessionIdsByTrace, inferRole, inferSpanKind, inspectSessionIndex, int, isBridgeMismatchError, isChatTrajectory, isChatTrajectoryMessage, isFileRunContextDir, isInheritedSpan, isSynthesizedSpan, iterSerializedSpans, knownHarnesses, listAdapters, listSessionBundleFiles, loadState, loadTraceQuestionsFile, loadTracesConfig, locateSessions, looksLikeAgentPrompt, mergeRolls, mergeTracesConfig, ms, normalizeAnalystCitations, normalizeRemote, normalizeTraceQuestions, otlpRowToSpan, outboundHash, parseIsoToEpochMs, parseJsonAnswer, parseSession, parseSince, planTraceAgenticRoute, planUpload, primeAnalyzer, projectSessionBundle, readCoordinationLog, readFileRunContext, readJsonFile, readJsonl, readOtlpInput, readPullRequests, readRunContextJournal, readRunContextSnapshot, readRunSide, readRunWatchSnapshot, readSessionBundleManifest, readSessionIndexFile, readSpanRunSnapshot, recordSessionCorruption, redactSpans, renderConformance, renderInspectionReport, renderRunContextSnapshot, renderRunDiff, renderRunWatchSnapshot, renderSessionFacts, renderSessionFactsContext, renderSpanRunSnapshot, renderTraceQuestionInstructions, renderTraceQuestionPrompt, renderTraceQuestionsReport, renderValidation, resolveAdapter, resolveOtlpInputFiles, resolveRepoAttrs, resolveRunContextDir, resolveRunWatchTarget, resolveSessionRepoAttrs, runCommand, runExternalAnalyzers, runPipelines, runTotals, runTraceImprovement, runTraceInvestigation, runTraceQuestions, runTraceStoreInvestigation, sandboxReplayBackend, saveReport, saveState, scanSessions, selectAdapters, serializeInspectionReport, serializePolicyEvidence, serializeSessionIndex, serializeSpans, serializeTraceStreamEvent, sessionFactsContext, sessionHash, sessionIdFromAttributes, sessionIntegrityAttributes, sessionTextSignatures, shellCommands, skippedAnalyses, span, spanRunTotals, stampEnvironmentAttrs, stampRepoAttrs, stampSessionIdentity, stampSessionIntegrity, stampSpanWorkdirRepoAttrs, streamSessions, summarizeOtlpExecution, summarizeSpanExecution, summarizeSpanStructure, takeJsonl, textIsSynthetic, toOpenInferenceSpan, toRuntimeStore, toTraceSpanEvents, tokens, totalAgenticFailureMessage, totalFindingRejections, traceAgenticKinds, traceCitationsInText, traceStreamEventsFromSpans, unavailableCapabilities, uploadKey, usd, userPromptSpan, validateOtlpSpans, validationExitCode, verdictExitCode, verifyFindingsInSandbox, verifySafe, verifySessionBundle, watchRunTarget, watchSessions, withSessionFactsContext, wrap, writeHodoscopeInput, writeInspectionReportFile, writeOtlpFile, writePolicyEvidenceFile, writeSessionBundleManifest, writeSessionIndexFile, writeTraceEvidenceExportFile, writeTraceImprovementArtifacts, writeTraceQuestionsArtifacts, zaiChatCaller, zeroPricedCost };
+export { ACTOR_ATTR, ATTR, type Actor, type AdoptionOptions, type AdoptionReport, AmpAdapter, type AnalysisEngineFromEnvOptions, type AnalyzeOptions, type AnalyzeResult, type AnswerSchema, type AssembleSessionBundleOptions, BLOBS_DIR, type BuildPolicyEvidenceOptions, type BuildSessionIndexOptions, type BuildTraceFindingPacketOptions, CHANGED_FILE_LIST_CAP, CITATION_NORMALIZATION_VERSION, CONTENT_CAP, COORDINATION_LOG_FILE, CORRECTIVE_REACTIONS, type ChangedFileFact, type ChatTrajectory, type ChatTrajectoryMessage, type ChatTrajectoryOptions, ClaudeAdapter, type CodeTraceBenchFileRef, type CodeTraceBenchImportOptions, type CodeTraceBenchImportReceipt, type CodeTraceBenchImportResult, type CodeTraceBenchImportedTrace, type CodeTraceBenchStep, CodexAdapter, CodexExecAdapter, CodexExecStreamError, CodexTaskScopeError, type CollectOptions, type CollectPolicyEvidenceOptions, type CollectSessionIndexOptions, type CollectSessionSelectionOptions, type CollectSessionWorkflowOptions, type CompactionMeasurement, type ConformanceRenderOptions, type ContentFootprint, type CoordinationLog, type CoordinationQuestion, type CoordinationSteer, CopilotAdapter, type CorruptionMode, type CoveredMeasurement, DEFAULT_ANALYST_MODEL, DEFAULT_ASK_CONCURRENCY, DEFAULT_HARNESS, DEFAULT_SANDBOX_BASE_URL, EMPTY_SPAN_RUN_SNAPSHOT, EXPORT_RULE, EmptySessionError, type EvidenceOnlyVerdict, type ExcludedTurnFact, type ExecuteOptions, type ExportRule, type ExternalAnalysisKind, type ExternalAnalysisPayload, type ExternalAnalysisResult, type ExternalAnalyzer, type ExternalAnalyzerOptions, type ExternalDiscoveryCandidate, FACT_LIST_CAP, FACT_TEXT_CAP, FactoryAdapter, type FailureFollowUp, type FailureFollowUpReport, type FileRunContextReaderOptions, type FinalMessageFact, type FindSessionTextLeaksOptions, type FindingRejectionCounts, type FindingRejectionReasons, type FindingRejectionTally, type FindingsFileOutcome, type FollowUpKind, ForgeAdapter, GeminiAdapter, type HaloAnalyzerOptions, type HaloReasoningEffort, type HarnessTraceAdapter, type HodoscopeAnalyzerOptions, type HodoscopeInput, type HodoscopeMessage, type HodoscopeSourceMapEntry, type HodoscopeTrajectory, INGEST_SOURCE_CLI, INHERITED_SOURCE_ATTR, INHERITED_SPANS_OMITTED_ATTR, INHERITED_SPAN_ATTR, INHERITED_SPAN_COUNT_ATTR, type InheritedSpanSource, type InspectSessionIndexOptions, JsonSourceError, type JsonlCorruptionReceipt, JsonlParseError, type JsonlReadOptions, type LiveBatchOptions, type LocateOptions, type LoopConvergence, type LoopConvergenceReport, type LoopIteration, type LoopTrend, type LoopTrendBasis, MAX_SHELL_DEPTH, MAX_TRACE_QUESTION_CHARS, type ObservedLoop, type ObserverOptions, OpencodeAdapter, type OtlpIngestIssue, type OtlpIngestIssueKind, type OtlpInput, type OtlpInputFile, type OtlpRowConversion, type OtlpSpan, type OtlpSpanKind, type OtlpSpanLink, type OtlpStatusCode, POLICY_EVIDENCE_NOTE, PREPARED_CONTEXT_BYTE_CEILING, type ParentTaskResolution, type ParseOptions, PartialUploadError, PiAdapter, type PiAdapterOptions, type PipelineOptions, type PipelineReport, type PlanOptions, type PolicyEvidenceLoopSummary, type PolicyEvidenceRecord, type PolicyEvidenceToolSummary, type PrimeAnalyzerOptions, type PrimeTransport, type PrimeTransportRequest, type PrimeTransportResponse, type ProjectSessionBundleOptions, type ProjectSessionBundleResult, type PullRequestFact, type PullRequestFacts, type PullRequestReading, QwenAdapter, REACTIONS, RESULT_FILE, RULE, type Reaction, type ReactionReport, type ReactionSessionReport, type RedactSpansOptions, type Redactor, type RefusedSession, type RepoAttrs, type RepoResolution, type RepoResolutionSource, type ResolvedOtlpInput, type RunContextJournal, type RunContextNode, type RunContextResult, type RunContextSnapshot, type RunDiffOptions, type RunDiffReport, type RunDiffSide, type RunResult, type RunWatchSnapshot, type RunWatchTarget, type RuntimeTrace, SESSION_FACTS_MEASUREMENT_VERSION, SESSION_FACTS_VERSION_SUFFIX, SESSION_TOKEN_TOTAL_ATTR, SOURCE_ATTRIBUTE_PREFIX, SPAN_SYNTHESIZED_ATTR, SPAWN_JOURNAL_FILE, STATUS_MARK, SYNTHESIZED_SOURCE_ATTR, SYNTHESIZED_SPAN_ATTR, type SandboxReplayBackendOptions, type ScanOptions, type ScannedSession, type SessionBatch, type SessionBundleAbsence, type SessionBundleCarriedSignatures, type SessionBundleExclusion, type SessionBundleExclusionRule, type SessionBundleFile, type SessionBundleIssue, type SessionBundleIssueKind, type SessionBundleLeakCheck, type SessionBundleLedgerSlice, type SessionBundleManifest, type SessionBundleProjection, type SessionBundleResult, type SessionBundleSliceRule, type SessionBundleVerification, type SessionBundleView, type SessionCorruptionReceipt, type SessionEnvironment, type SessionFact, type SessionFacts, type SessionFactsOptions, type SessionFactsReport, type SessionIdentityConflict, type SessionIdentityIndex, type SessionIntegrity, type SessionMeasurements, type SessionRef, type SessionRelationship, type SessionRole, type SessionSeedGroup, type SessionSelection, type SessionSelectionRow, type SessionSourceFile, type SessionTextLeak, type SessionTextLeakReport, type SessionTurnFact, type SessionWorkflow, SessionWorkflowError, type SessionWorkflowErrorCode, type SessionWorkflowIssue, type SessionWorkflowSession, type SessionWorkflowSummary, type SkippedAnalysis, type SkippedInputFile, type SourceRecordReference, type SpanInput, type SpanNodeStatus, type SpanRedaction, type SpanRunNode, type SpanRunSnapshot, type SpanStructure, type SpawnedChildResolution, type SpendRoll, type SteeringChainReport, type SteeringEdge, type SubagentSpawnFact, TRACE_QUESTION_PREVIEW_HEAD_CHARS, type ToolMeasurement, type TraceAgenticRoute, type TraceAgenticRouteReason, type TraceAgenticRouteReasonCode, type TraceContextIndex, type TraceContextRoot, type TraceEvidenceExportOptions, type TraceEvidenceExportResult, type TraceEvidenceFormatOption, type TraceEvidenceInputFormat, type TraceEvidenceRow, type TraceExecutionOptions, type TraceFindingPacket, type TraceImprovementArtifacts, type TraceImprovementOptions, type TraceImprovementResult, type TraceIndexedFile, type TraceInspectionArea, type TraceInspectionFinding, type TraceInspectionReport, type TraceInspectionSeverity, type TraceInvestigationOptions, type TraceInvestigationResult, type TraceLiveAction, type TraceLiveActionKind, type TraceLiveAnalysisContext, type TraceLiveAnalyst, type TraceLiveBatch, type TraceLiveEvidence, type TraceLiveFinding, type TraceLiveLoop, type TraceLiveSeverity, type TraceQuestion, type TraceQuestionAnswer, type TraceQuestionCitation, type TraceQuestionFailureKind, type TraceQuestionTrace, type TraceQuestionsArtifacts, type TraceQuestionsOptions, type TraceQuestionsResult, type TraceQuestionsTotals, type TraceSessionIndex, type TraceSessionIndexRow, type TraceStoreInvestigationOptions, type TraceStoreInvestigationResult, type TraceStreamEvent, type TraceStreamOptions, type TraceStreamReplayOptions, type TraceStreamSession, type TracesConfig, type TriggerPair, type TurnActorCount, type UnavailableCapabilities, type UploadBackend, type UploadIdentity, type UploadItem, type UploadPlan, type UploadRecord, type UploadResult, type UploadState, type UserPromptInput, type VerifySafeOptions, type VerifySafeResult, type WatchRunTargetOptions, ZERO_ROLL, type ZaiChatCallerOptions, addSpend, alreadyUploaded, analysisEngineFromEnv, analyzeAdoption, analyzeLiveBatch, analyzeLoopConvergence, analyzeReactions, analyzeSpans, analyzeSteeringChain, answerSchemaErrors, applyRedactor, assembleSessionBundle, assertAnswerSchema, assertSandboxReachable, assessSpans, buildPolicyEvidenceRecord, buildSessionFactsReport, buildSessionIndex, buildSessionIndexFromRows, buildSpanRunTree, buildTraceFindingPacket, capText, chatTrajectoryToSpans, classifyEvidenceOnlyPath, classifyFailureFollowUps, classifyLiveActions, classifyReaction, claudeActor, codexActor, collectPolicyEvidence, collectSessionIndex, collectSessionSelection, collectSessionWorkflow, collectSessions, commandAnalyzer, commandRedactor, commandTextFromInput, computeAdoption, computeSessionFacts, conformanceOfSpans, connectors, countSkillRunsJsonl, createBundleSourceReader, createFindingRejectionTally, cwdMatchesSelection, cwdMatchesSelectionResolved, defaultTraceLiveAnalysts, describeSessionRelationship, diffRuns, engineCallReservationFloorUsd, environmentAttributes, environmentFromSpanAttributes, equivalentGitCwds, executeUpload, exportTraceEvidenceFile, exportTraceEvidenceRows, exportTraceEvidenceText, externalFailureMessage, fileRunContextSupervisorRunReader, fileSha256, findContextRoot, findSessionTextLeaks, findSpanSourceFiles, findingRejection, findingRejectionDetail, forEachTreeNode, formatFindingRejections, formatVerdict, haloAnalyzer, hashSessionBundleFiles, hodoscopeAnalyzer, httpJsonTransport, importCodeTraceBench, incompleteInputsNote, indexSessionIdsByTrace, inferRole, inferSpanKind, inspectSessionIndex, int, isBridgeMismatchError, isChatTrajectory, isChatTrajectoryMessage, isFileRunContextDir, isInheritedSpan, isSynthesizedSpan, iterSerializedSpans, knownHarnesses, listAdapters, listSessionBundleFiles, loadState, loadTraceQuestionsFile, loadTracesConfig, locateSessions, looksLikeAgentPrompt, mergeRolls, mergeTracesConfig, ms, normalizeAnalystCitations, normalizeRemote, normalizeTraceQuestions, otlpRowToSpan, outboundHash, parseIsoToEpochMs, parseJsonAnswer, parseSession, parseSince, planTraceAgenticRoute, planUpload, primeAnalyzer, projectSessionBundle, readCoordinationLog, readFileRunContext, readJsonFile, readJsonl, readOtlpInput, readPullRequests, readRunContextJournal, readRunContextSnapshot, readRunSide, readRunWatchSnapshot, readSessionBundleManifest, readSessionIndexFile, readSpanRunSnapshot, recordSessionCorruption, redactSpans, renderConformance, renderInspectionReport, renderRunContextSnapshot, renderRunDiff, renderRunWatchSnapshot, renderSessionFacts, renderSessionFactsContext, renderSpanRunSnapshot, renderTraceQuestionInstructions, renderTraceQuestionPrompt, renderTraceQuestionsReport, renderValidation, resolveAdapter, resolveOtlpInputFiles, resolveRepoAttrs, resolveRunContextDir, resolveRunWatchTarget, resolveSessionRepoAttrs, runCommand, runExternalAnalyzers, runPipelines, runTotals, runTraceImprovement, runTraceInvestigation, runTraceQuestions, runTraceStoreInvestigation, sandboxReplayBackend, saveReport, saveState, scanSessions, selectAdapters, serializeInspectionReport, serializePolicyEvidence, serializeSessionIndex, serializeSpans, serializeTraceStreamEvent, sessionFactsContext, sessionHash, sessionIdFromAttributes, sessionIntegrityAttributes, sessionTextSignatures, shellCommands, skippedAnalyses, span, spanRunTotals, stampEnvironmentAttrs, stampRepoAttrs, stampSessionIdentity, stampSessionIntegrity, stampSpanWorkdirRepoAttrs, streamSessions, summarizeOtlpExecution, summarizeSpanExecution, summarizeSpanStructure, takeJsonl, textIsSynthetic, toOpenInferenceSpan, toRuntimeStore, toTraceSpanEvents, tokens, totalAgenticFailureMessage, totalFindingRejections, traceAgenticKinds, traceCitationsInText, traceStreamEventsFromSpans, unavailableCapabilities, uploadKey, usd, userPromptSpan, validateOtlpSpans, validationExitCode, verdictExitCode, verifyFindingsInSandbox, verifySafe, verifySessionBundle, watchRunTarget, watchSessions, withSessionFactsContext, wrap, writeHodoscopeInput, writeInspectionReportFile, writeOtlpFile, writePolicyEvidenceFile, writeSessionBundleManifest, writeSessionIndexFile, writeTraceEvidenceExportFile, writeTraceImprovementArtifacts, writeTraceQuestionsArtifacts, zaiChatCaller, zeroPricedCost };

package/dist/index.js

@@ -270,7 +270,7 @@ import {
   writeTraceQuestionsArtifacts,
   zaiChatCaller,
   zeroPricedCost
-} from "./chunk-4QY4U4XW.js";
+} from "./chunk-TCTZ7DUY.js";
 
 // src/collect.ts
 async function collectSessions(opts = {}) {

package/docs/trace-analysts.md

@@ -389,6 +389,47 @@ Output expectations:
 
 The scored prime-vs-dspy comparison — same trajectories, same scoring — lives in `@tangle-network/agent-eval`'s analyst benchmark (`runAnalystBenchmark`); this engine is the capture-side entry point, not the scoreboard.
 
+### Verifying against a real prime
+
+The suite above runs against a scripted bridge over real HTTP. A full real run — real
+prime-agent, real model, real REPL — is a manual, credentials-on-the-host affair:
+
+1. **Install prime-agent the way cli-bridge pins it.** It is a hard fork of pi that reuses
+   pi's npm name, so `npm i` gives you the WRONG agent: clone
+   `PrimeIntellect-ai/prime-agent`, `git checkout <the commit src/backends/prime.ts names>`
+   (be9e2fa0 at the time of writing), build, and expose the bundle as `prime-agent`
+   (cli-bridge's `pnpm install:harness prime` does exactly this).
+2. **Start cli-bridge with the prime backend**: `BRIDGE_BACKENDS=prime
+   PRIME_MODELS_JSON=<operator models.json> BRIDGE_PORT=4181 pnpm start`. The
+   models.json names an `apiKey` as an exported ENV VAR (not a literal — prime
+   resolves env-var-first, so an unforwarded name becomes the literal key), and the
+   bridge forwards exactly the names the file names into prime's neutral child env.
+   Mind which endpoint a key is funded on: a coding-plan GLM key only works on the
+   coding endpoint, and the same key 402s on the general one.
+3. **Give the kernel a persistent interpreter.** Prime's Python kernel bootstraps a
+   venv under its HOME, and the bridge gives every run an isolated one — a
+   uv-managed interpreter installed inside an ephemeral HOME dies with it. Pre-provision
+   a venv (ipykernel + the default rlm extras + an editable
+   `prime-agent-runtime`) from a system Python and export
+   `PRIME_AGENT_KERNEL_PYTHON=<that venv's python>` to the bridge; prime skips
+   auto-bootstrap when the named interpreter already passes its checks.
+4. Run with `TRACES_PRIME_BRIDGE_URL=http://localhost:4181 TRACES_PRIME_MODEL=prime/<provider>/<model>`.
+   The opt-in suite (`TRACES_PRIME_REAL_E2E=1` in `tests/analyst-engine-prime.test.ts`)
+   exercises the same path from vitest.
+
+What real runs have shown (GLM-5.3 via a coding-plan endpoint, fork at the pinned commit):
+
+- **Inline, small session:** clean single-call success — one fenced JSON block, five findings,
+  all grounded, exit 0.
+- **File, ~121 spans / 788 KB artifact:** the RLM loads and pages the file (14 calls, ~156k input
+  tokens); its first reply gets cut by the endpoint's output limit mid-JSON, and the
+  truncation-aware repair turn (re-emit at most 3 findings, terse strings) recovers it — ok:true,
+  findings grounded, exit 0.
+- **File, ~794 spans / 2.1 MB artifact:** ~2.2M input tokens of genuine REPL inspection, but the
+  reply never survives the endpoint's output cap even after repair — the run fails honestly
+  (exit 1, raw reply preserved, no findings invented). At that trajectory size, a model with a
+  larger output budget — or a paged finalization — is the next step, not silence about it.
+
 ## Write one analyst
 
 An analyst receives a paged trace store and returns typed findings.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tangle-network/traces",
-  "version": "0.17.0",
-  "description": "Point it at your coding-agent session traces (Claude Code, Codex, OpenCode, Gemini, Pi, \u2026) and get failure-mode + efficiency findings. CLI + SDK over the @tangle-network/agent-eval analyst suite \u2014 observe live sessions, run your own analysts, redact, and upload to the Tangle Intelligence Platform.",
+  "version": "0.18.0",
+  "description": "Point it at your coding-agent session traces (Claude Code, Codex, OpenCode, Gemini, Pi, …) and get failure-mode + efficiency findings. CLI + SDK over the @tangle-network/agent-eval analyst suite — observe live sessions, run your own analysts, redact, and upload to the Tangle Intelligence Platform.",
   "type": "module",
   "license": "MIT",
   "repository": {