agent-inspect 6.10.0 → 6.12.0

package/packages/cli/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-36IJ76LH.mjs';
+import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-XTAA733P.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
-import path15 from 'path';
+import path16 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, Option } from 'commander';
 import { readFile, stat, mkdir, writeFile, unlink, appendFile, rm, access, open, readdir, constants } from 'fs/promises';
@@ -11,7 +11,7 @@ import { createServer } from 'http';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.10.0";
+var version = "6.12.0";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -2971,9 +2971,9 @@ Trace directory: ${traceDir}`);
     process.exitCode = 1;
   }
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path15.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path16.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path15.dirname(outPath), { recursive: true });
+    await mkdir(path16.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     const vlabel = validation !== void 0 ? validation.ok ? "ok" : "failed" : "skipped";
     console.log(`Wrote ${result.fileExtension} export to ${outPath} (validation: ${vlabel})`);
@@ -3317,7 +3317,7 @@ function indexedToMetadata(row, traceDir) {
     endedAt: row.endedAt ?? void 0,
     durationMs: row.durationMs ?? void 0,
     eventCount: 0,
-    filePath: path15.join(traceDir, row.file),
+    filePath: path16.join(traceDir, row.file),
     fileSize: 0,
     createdAt: new Date(row.mtimeMs)
   };
@@ -3346,7 +3346,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-YFN3Q3GP.mjs');
+    const mod = await import('./src-G7PM24W2.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -3795,9 +3795,9 @@ async function reportCommand(runId, options = {}) {
     ...options.section ? { section: options.section } : {}
   });
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path15.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path16.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path15.dirname(outPath), { recursive: true });
+    await mkdir(path16.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     console.log(`Wrote ${result.fileExtension} report to ${outPath}`);
   }
@@ -3923,8 +3923,8 @@ function passesLuhn(value) {
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var EPOCH_MS_RE = /^1[0-9]{12}$/;
 var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
-function pathSuggestsNonCard(path26) {
-  const normalized = path26.toLowerCase().replace(/[^a-z0-9._]/g, "");
+function pathSuggestsNonCard(path27) {
+  const normalized = path27.toLowerCase().replace(/[^a-z0-9._]/g, "");
   return /(^|\.)(tokenusage|usage)(\.|$)/.test(normalized) || /(startedat|endedat|durationms|timestamp|createdat|updatedat)(\.|$)/.test(normalized) || /(^|\.)(runid|traceid|spanid|eventid|sessionid|userid|parentid|requestid|correlationid)(\.|$)/.test(
     normalized
   ) || /(^|\.)ts(\.|$)/.test(normalized);
@@ -4111,17 +4111,17 @@ function applyRule(rule, value, replacement) {
   }
   return value;
 }
-function childPath(path26, key) {
+function childPath(path27, key) {
   if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)) {
-    return path26 ? `${path26}.${key}` : key;
+    return path27 ? `${path27}.${key}` : key;
   }
-  return `${path26 || "$"}[${JSON.stringify(key)}]`;
+  return `${path27 || "$"}[${JSON.stringify(key)}]`;
 }
-function indexPath(path26, index) {
-  return `${path26 || "$"}[${index}]`;
+function indexPath(path27, index) {
+  return `${path27 || "$"}[${index}]`;
 }
-function makeFinding(path26, detector, action, matchKind, severity = "warning", preview) {
-  return preview === void 0 ? { path: path26, detector, action, severity, matchKind } : { path: path26, detector, action, severity, matchKind, preview };
+function makeFinding(path27, detector, action, matchKind, severity = "warning", preview) {
+  return preview === void 0 ? { path: path27, detector, action, severity, matchKind } : { path: path27, detector, action, severity, matchKind, preview };
 }
 function createRedactionProfile(profile = "local") {
   switch (profile) {
@@ -4190,11 +4190,11 @@ var Redactor2 = class {
   #recordFinding(state, finding) {
     if (this.#collectFindings) state.findings.push(finding);
   }
-  #redactValue(value, key, path26, depth, state) {
+  #redactValue(value, key, path27, depth, state) {
     if (depth > this.#maxDepth) {
       this.#recordFinding(
         state,
-        makeFinding(path26, "structure.maxDepth", "truncate", "value", "warning")
+        makeFinding(path27, "structure.maxDepth", "truncate", "value", "warning")
       );
       return "[Truncated]";
     }
@@ -4203,19 +4203,19 @@ var Redactor2 = class {
       if (rule) {
         this.#recordFinding(
           state,
-          makeFinding(path26, `key.${rule.key}`, actionForRule(rule), "key", "warning")
+          makeFinding(path27, `key.${rule.key}`, actionForRule(rule), "key", "warning")
         );
         return applyRule(rule, value, this.#replacement);
       }
     }
     for (const detector of this.#detectors) {
-      const detections = detector.detect({ path: path26, key, value });
+      const detections = detector.detect({ path: path27, key, value });
       for (const detection of detections) {
         const action = detection.action ?? "replace";
         this.#recordFinding(
           state,
           makeFinding(
-            path26,
+            path27,
             detector.id,
             action,
             detection.matchKind ?? detector.matchKind ?? "custom",
@@ -4233,7 +4233,7 @@ var Redactor2 = class {
       const out = [];
       state.seen.set(value, out);
       value.forEach((item, index) => {
-        out[index] = this.#redactValue(item, void 0, indexPath(path26, index), depth + 1, state);
+        out[index] = this.#redactValue(item, void 0, indexPath(path27, index), depth + 1, state);
       });
       return out;
     }
@@ -4245,7 +4245,7 @@ var Redactor2 = class {
         out[entryKey] = this.#redactValue(
           entryValue,
           entryKey,
-          childPath(path26 === "$" ? "" : path26, entryKey),
+          childPath(path27 === "$" ? "" : path27, entryKey),
           depth + 1,
           state
         );
@@ -4706,14 +4706,14 @@ function uniqueSorted(values) {
   return [...new Set(values)].sort();
 }
 function isWithinDirectory(child, parent) {
-  const relative = path15.relative(parent, child);
-  return relative === "" || !relative.startsWith("..") && !path15.isAbsolute(relative);
+  const relative = path16.relative(parent, child);
+  return relative === "" || !relative.startsWith("..") && !path16.isAbsolute(relative);
 }
 async function resolveOutputPath(inputPath, output2, force) {
   if (output2 === void 0 || output2.trim() === "") return void 0;
-  const inputAbs = path15.resolve(inputPath);
-  const outputAbs = path15.resolve(output2.trim());
-  const inputDir = path15.dirname(inputAbs);
+  const inputAbs = path16.resolve(inputPath);
+  const outputAbs = path16.resolve(output2.trim());
+  const inputDir = path16.dirname(inputAbs);
   if (!isWithinDirectory(outputAbs, inputDir)) {
     throw new Error("Refusing to write migrated output outside the input directory.");
   }
@@ -4834,7 +4834,7 @@ async function migrateCommand(input3, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const inputPath = path15.resolve(input3.trim());
+  const inputPath = path16.resolve(input3.trim());
   const dryRun = options.dryRun === true;
   if (!dryRun && (options.output === void 0 || options.output.trim() === "")) {
     console.error("migrate requires --dry-run or --output <path>.");
@@ -4853,7 +4853,7 @@ async function migrateCommand(input3, options = {}) {
     );
     const result = await buildMigration(inputPath, outputPath);
     if (!dryRun && outputPath !== void 0) {
-      await mkdir(path15.dirname(outputPath), { recursive: true });
+      await mkdir(path16.dirname(outputPath), { recursive: true });
       await writeFile(outputPath, result.content, "utf-8");
     }
     printSummary2(result, dryRun);
@@ -5183,23 +5183,23 @@ function evaluatePromptInjection(text, options = {}) {
   }
   return fail(ruleId, `Matched ${evidence.length} injection pattern(s).`, evidence, "warning");
 }
-function validateSchemaField(value, field, path26, evidence) {
+function validateSchemaField(value, field, path27, evidence) {
   const ruleId = "guardrail.structured-output";
   if (field.type) {
     const actual = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
     if (actual !== field.type) {
-      evidence.push({ ruleId, path: path26, preview: `expected ${field.type}, got ${actual}` });
+      evidence.push({ ruleId, path: path27, preview: `expected ${field.type}, got ${actual}` });
       return;
     }
   }
   if (field.enum && !field.enum.some((item) => Object.is(item, value))) {
-    evidence.push({ ruleId, path: path26, preview: "value not in enum" });
+    evidence.push({ ruleId, path: path27, preview: "value not in enum" });
   }
   if (field.type === "object" && field.required && value && typeof value === "object" && !Array.isArray(value)) {
     const record = value;
     for (const key of field.required) {
       if (!(key in record)) {
-        evidence.push({ ruleId, path: `${path26}.${key}`, preview: "missing required key" });
+        evidence.push({ ruleId, path: `${path27}.${key}`, preview: "missing required key" });
       }
     }
   }
@@ -5526,7 +5526,7 @@ function asConfig(value) {
 }
 async function loadConfig(configPath) {
   if (configPath === void 0) return {};
-  const extension = path15.extname(configPath);
+  const extension = path16.extname(configPath);
   if (TS_CONFIG_EXTENSIONS.has(extension)) {
     throw new Error(
       "TypeScript check configs require an explicit precompiled JavaScript config or future --config-loader support."
@@ -5535,7 +5535,7 @@ async function loadConfig(configPath) {
   if (!CONFIG_EXTENSIONS.has(extension)) {
     throw new Error("Unsupported check config extension. Use .json, .js, .mjs, or .cjs.");
   }
-  const absolute = path15.resolve(configPath);
+  const absolute = path16.resolve(configPath);
   if (extension === ".json") {
     const raw = await readFile(absolute, "utf-8");
     return asConfig(JSON.parse(raw));
@@ -5711,10 +5711,10 @@ function printHuman(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path26 = finding.evidence[0]?.path;
+    const path27 = finding.evidence[0]?.path;
     const run = finding.evidence[0]?.runId;
     const runPrefix = run ? `[${run}] ` : "";
-    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}`);
+    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}`);
   }
 }
 function readErrorResult(error) {
@@ -5976,7 +5976,7 @@ async function loadSuiteViewerData(options) {
   for (const suiteCase of result.cases) {
     cases.push(await enrichCase(suiteCase, baselinePath));
   }
-  const artifactsDir = path15.join(path15.dirname(result.configPath), ".agent-inspect/suite-runs");
+  const artifactsDir = path16.join(path16.dirname(result.configPath), ".agent-inspect/suite-runs");
   return {
     suiteName: result.suiteName,
     configPath: result.configPath,
@@ -6169,19 +6169,19 @@ function serializeWorkspaceManifest(manifest) {
 }
 var INDEX_DIR_NAME = "index";
 function resolveWorkspaceLocation(cwd = process.cwd()) {
-  const projectRoot = path15.resolve(cwd);
-  const workspaceDir = path15.join(projectRoot, WORKSPACE_DIR_NAME);
+  const projectRoot = path16.resolve(cwd);
+  const workspaceDir = path16.join(projectRoot, WORKSPACE_DIR_NAME);
   return {
     projectRoot,
     workspaceDir,
-    manifestPath: path15.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
+    manifestPath: path16.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
   };
 }
 function resolveInsideWorkspace(workspaceDir, relative) {
-  const base = path15.resolve(workspaceDir);
-  const resolved = path15.resolve(base, relative);
-  const rel = path15.relative(base, resolved);
-  if (rel === "" || rel === "." || !rel.startsWith("..") && !path15.isAbsolute(rel)) {
+  const base = path16.resolve(workspaceDir);
+  const resolved = path16.resolve(base, relative);
+  const rel = path16.relative(base, resolved);
+  if (rel === "" || rel === "." || !rel.startsWith("..") && !path16.isAbsolute(rel)) {
     return resolved;
   }
   throw new Error(
@@ -6250,7 +6250,7 @@ async function createWorkspace(options = {}) {
     created = false;
     adopted = true;
   } else {
-    const project = options.project?.trim() || path15.basename(location.projectRoot) || "workspace";
+    const project = options.project?.trim() || path16.basename(location.projectRoot) || "workspace";
     const traceDirs = detectedExistingTraces ? ["runs", "."] : ["runs"];
     manifest = createDefaultWorkspaceManifest({
       project,
@@ -6389,7 +6389,7 @@ async function doctorWorkspace(location) {
     const abs = resolveInsideWorkspace(location.workspaceDir, rel);
     for (const file of await listJsonl(abs)) {
       try {
-        const s = await stat(path15.join(abs, file));
+        const s = await stat(path16.join(abs, file));
         newestTraceMtime = Math.max(newestTraceMtime, s.mtimeMs);
       } catch {
         checks2.push({ id: "trace-readability", status: "warn", message: `cannot stat ${rel}/${file}` });
@@ -6437,7 +6437,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
       const relPath = `${rel}/${entry}`;
       removed.push(relPath);
       if (!dryRun) {
-        await rm(path15.join(abs, entry), { recursive: true, force: true });
+        await rm(path16.join(abs, entry), { recursive: true, force: true });
       }
     }
   }
@@ -6446,7 +6446,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
 
 // packages/viewer/src/workspace-data.ts
 async function loadWorkspaceViewerData(options) {
-  const cwd = path15.resolve(options.cwd ?? process.cwd());
+  const cwd = path16.resolve(options.cwd ?? process.cwd());
   const location = resolveWorkspaceLocation(cwd);
   const manifestRead = await readWorkspaceManifestFile(location);
   if (!manifestRead.ok || manifestRead.manifest === void 0) {
@@ -6459,7 +6459,7 @@ async function loadWorkspaceViewerData(options) {
   const runs = [];
   for (const rel of manifestRead.manifest.traceDirs) {
     const traceDir = resolveTraceDir({
-      dir: path15.join(location.workspaceDir, rel)
+      dir: path16.join(location.workspaceDir, rel)
     });
     const td = new TraceDirectory({ dir: traceDir });
     const files = await td.list();
@@ -6473,7 +6473,7 @@ async function loadWorkspaceViewerData(options) {
         runId: meta.runId,
         ...meta.name !== void 0 ? { name: meta.name } : {},
         status: meta.status,
-        file: path15.basename(meta.filePath)
+        file: path16.basename(meta.filePath)
       });
     }
   }
@@ -6484,8 +6484,8 @@ async function loadWorkspaceViewerData(options) {
     doctor,
     runs,
     bundleDirs: [
-      path15.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
-      path15.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
+      path16.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
+      path16.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
     ]
   };
 }
@@ -6548,7 +6548,7 @@ function createViewerServer(options = {}) {
           ok: true,
           readOnly: true,
           mode,
-          traceDir: path15.resolve(traceDir)
+          traceDir: path16.resolve(traceDir)
         });
       }
       if (pathname === "/api/suite" && mode === "suite") {
@@ -6577,7 +6577,7 @@ function createViewerServer(options = {}) {
             runId: meta.runId,
             name: meta.name,
             status: meta.status,
-            file: path15.basename(meta.filePath),
+            file: path16.basename(meta.filePath),
             startedAt: meta.startedAt,
             durationMs: meta.durationMs
           }))
@@ -6694,7 +6694,7 @@ function startViewerServer(options = {}) {
       resolve({
         host,
         port: resolvedPort,
-        traceDir: path15.resolve(traceDir),
+        traceDir: path16.resolve(traceDir),
         url: `http://${host}:${resolvedPort}/${modeQuery}`,
         mode
       });
@@ -7065,10 +7065,10 @@ async function evalRun(input3, options = {}) {
     diagnostics: []
   };
 }
-function evidenceForRun(run, path26) {
-  return [{ runId: run.runId, ...path26 !== void 0 ? { path: path26 } : {} }];
+function evidenceForRun(run, path27) {
+  return [{ runId: run.runId, ...path27 !== void 0 ? { path: path27 } : {} }];
 }
-function evidenceForEvent(event, path26) {
+function evidenceForEvent(event, path27) {
   return [
     {
       runId: event.runId,
@@ -7076,7 +7076,7 @@ function evidenceForEvent(event, path26) {
       ...event.parentId !== void 0 ? { parentId: event.parentId } : {},
       kind: event.kind,
       name: event.name,
-      ...path26 !== void 0 ? { path: path26 } : {}
+      ...path27 !== void 0 ? { path: path27 } : {}
     }
   ];
 }
@@ -7234,9 +7234,9 @@ function collectTextFields(nodes, keys, preferredKinds = []) {
 function tokenize(text) {
   return [...text.toLowerCase().matchAll(/[a-z0-9][a-z0-9'-]{2,}/g)].map((match) => match[0].replace(/^['-]+|['-]+$/g, "")).filter((token) => token.length > 2 && !STOP_WORDS.has(token));
 }
-function firstEvidence(fields, run, path26) {
+function firstEvidence(fields, run, path27) {
   const first = fields[0];
-  return first === void 0 ? evidenceForRun(run, path26) : evidenceForEvent(first.node.event, first.path);
+  return first === void 0 ? evidenceForRun(run, path27) : evidenceForEvent(first.node.event, first.path);
 }
 function collectSourceIds(nodes, keys) {
   const wanted = keySet(keys);
@@ -7613,8 +7613,8 @@ function renderEvalMarkdown(result) {
   if (result.findings.length > 0) {
     lines.push("", "## Findings");
     for (const finding of result.findings) {
-      const path26 = finding.evidence[0]?.path;
-      lines.push(`- ${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}`);
+      const path27 = finding.evidence[0]?.path;
+      lines.push(`- ${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}`);
     }
   }
   return `${lines.join("\n")}
@@ -7661,7 +7661,7 @@ function asConfig2(value) {
 }
 async function loadConfig2(configPath) {
   if (configPath === void 0) return {};
-  const extension = path15.extname(configPath);
+  const extension = path16.extname(configPath);
   if (TS_CONFIG_EXTENSIONS2.has(extension)) {
     throw new Error(
       "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
@@ -7670,7 +7670,7 @@ async function loadConfig2(configPath) {
   if (!CONFIG_EXTENSIONS2.has(extension)) {
     throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
   }
-  const absolute = path15.resolve(configPath);
+  const absolute = path16.resolve(configPath);
   if (extension === ".json") {
     const raw = await readFile(absolute, "utf-8");
     return asConfig2(JSON.parse(raw));
@@ -7807,8 +7807,8 @@ function printHuman2(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path26 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}`);
+    const path27 = finding.evidence[0]?.path;
+    console.log(`- ${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}`);
   }
 }
 function readErrorResult2(error) {
@@ -8061,14 +8061,14 @@ function exitCodeFor3(result) {
   return 2;
 }
 function explainFinding(finding, blocksBundle) {
-  const path26 = finding.evidence[0]?.path ?? "(unknown path)";
+  const path27 = finding.evidence[0]?.path ?? "(unknown path)";
   const category = finding.category ?? "structure";
   const confidence = finding.confidence ?? "medium";
   const detector = finding.detector ?? finding.ruleId;
   const action = finding.action ?? "review";
   const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
   return [
-    `  Matched: detector=${detector}; path=${path26}; category=${category}`,
+    `  Matched: detector=${detector}; path=${path27}; category=${category}`,
     `  Why: ${finding.message}`,
     `  Confidence: ${confidence}`,
     `  Redaction: ${redactionHint}`,
@@ -8110,9 +8110,9 @@ function printHuman3(result, explain = false) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path26 = finding.evidence[0]?.path;
+    const path27 = finding.evidence[0]?.path;
     const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
-    console.log(`- ${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}${taxonomy}`);
+    console.log(`- ${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}${taxonomy}`);
     if (explain) {
       const blocks = finding.severity === "error" || finding.status === "fail";
       for (const line of explainFinding(finding, blocks)) {
@@ -8227,7 +8227,7 @@ function messageStartsWithDash(error) {
   return message.startsWith("--");
 }
 function validateReporterArtifactPath(options) {
-  const outputDir = path15.resolve(options.outputDir);
+  const outputDir = path16.resolve(options.outputDir);
   const diagnostics = [];
   const rawPath = options.relativePath;
   if (rawPath.length === 0) {
@@ -8247,7 +8247,7 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  if (path15.isAbsolute(rawPath) || path15.win32.isAbsolute(rawPath)) {
+  if (path16.isAbsolute(rawPath) || path16.win32.isAbsolute(rawPath)) {
     diagnostics.push({
       code: "artifact_path_absolute",
       severity: "error",
@@ -8256,7 +8256,7 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  const normalized = path15.posix.normalize(rawPath.replace(/\\/g, "/"));
+  const normalized = path16.posix.normalize(rawPath.replace(/\\/g, "/"));
   const segments = normalized.split("/");
   if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
     diagnostics.push({
@@ -8267,9 +8267,9 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  const absolutePath = path15.resolve(outputDir, normalized);
-  const relFromOutput = path15.relative(outputDir, absolutePath);
-  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path15.isAbsolute(relFromOutput)) {
+  const absolutePath = path16.resolve(outputDir, normalized);
+  const relFromOutput = path16.relative(outputDir, absolutePath);
+  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path16.isAbsolute(relFromOutput)) {
     diagnostics.push({
       code: "artifact_path_escape",
       severity: "error",
@@ -8295,7 +8295,7 @@ var EVIDENCE_CI_ARTIFACT_FILES = [
 function createEvidenceCiArtifacts(options) {
   const profile = options.redactionProfile;
   const prefix = options.relativeDir !== void 0 && options.relativeDir.trim() !== "" ? options.relativeDir.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "") : "";
-  const join = (name) => prefix === "" ? name : path15.posix.join(prefix, name);
+  const join = (name) => prefix === "" ? name : path16.posix.join(prefix, name);
   const formatFor = (name) => {
     if (name.endsWith(".html")) return "html";
     if (name.endsWith(".jsonl")) return "jsonl";
@@ -8384,8 +8384,8 @@ function renderCheckSection(result) {
     `Diagnostics: ${result.diagnostics.length}`
   ];
   for (const finding of result.findings.slice(0, 10)) {
-    const path26 = finding.evidence[0]?.path ?? "(run)";
-    lines.push(`- ${finding.ruleId}: ${finding.message} (${path26})`);
+    const path27 = finding.evidence[0]?.path ?? "(run)";
+    lines.push(`- ${finding.ruleId}: ${finding.message} (${path27})`);
   }
   for (const diagnostic3 of result.diagnostics.slice(0, 10)) {
     lines.push(`- ${diagnostic3.code}: ${diagnostic3.message}`);
@@ -8463,8 +8463,8 @@ function renderHtml(trace, check, diff) {
 `;
 }
 async function writeArtifact(outputDir, relativePath, content, files) {
-  const outPath = path15.join(outputDir, relativePath);
-  await mkdir(path15.dirname(outPath), { recursive: true });
+  const outPath = path16.join(outputDir, relativePath);
+  await mkdir(path16.dirname(outPath), { recursive: true });
   await writeFile(outPath, content, "utf-8");
   files.push(relativePath);
 }
@@ -8493,7 +8493,7 @@ function shouldWriteEvidence(options, status) {
   return status === "unsafe" || status === "regression" || status === "unknown" || status === "warning";
 }
 async function artifactsCommand(target, options = {}, stdin = process.stdin) {
-  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path15.resolve(options.outputDir.trim()) : "";
+  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path16.resolve(options.outputDir.trim()) : "";
   if (outputDir === "") {
     console.error("--output-dir is required.");
     process.exitCode = 1;
@@ -8621,8 +8621,8 @@ async function artifactsCommand(target, options = {}, stdin = process.stdin) {
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    await mkdir(path15.dirname(path15.resolve(summaryTarget)), { recursive: true });
-    await appendFile(path15.resolve(summaryTarget), `
+    await mkdir(path16.dirname(path16.resolve(summaryTarget)), { recursive: true });
+    await appendFile(path16.resolve(summaryTarget), `
 ${renderMarkdown(trace, check, diff)}`, "utf-8");
   }
   const manifestFiles = [...files, "manifest.json"].sort((a, b) => a.localeCompare(b));
@@ -8641,10 +8641,10 @@ ${renderMarkdown(trace, check, diff)}`, "utf-8");
       findings: diff?.findings.length ?? 0,
       diagnostics: diff?.diagnostics.length ?? 0
     },
-    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path15.resolve(summaryTarget) } : {},
+    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path16.resolve(summaryTarget) } : {},
     note: NOTE
   };
-  await writeFile(path15.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
+  await writeFile(path16.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
   if (options.json === true) {
     console.log(writeJson3(manifest).trimEnd());
   } else {
@@ -8702,8 +8702,8 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const location = resolveWorkspaceLocation(cwd);
       const manifest = await readWorkspaceManifestFile(location);
       if (manifest.ok && manifest.manifest) {
-        const rel = path15.relative(location.workspaceDir, normalized);
-        if (!rel.startsWith("..") && !path15.isAbsolute(rel)) {
+        const rel = path16.relative(location.workspaceDir, normalized);
+        if (!rel.startsWith("..") && !path16.isAbsolute(rel)) {
           return resolveInsideWorkspace(location.workspaceDir, rel);
         }
       }
@@ -8719,7 +8719,7 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const label = runIds.length === 1 ? sanitizeBundleRunId(runIds[0]) : `multi-${runIds.length}`;
       const base2 = resolveInsideWorkspace(
         location.workspaceDir,
-        path15.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
+        path16.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
       );
       return format === "zip" ? `${base2}.zip` : base2;
     }
@@ -9124,19 +9124,19 @@ async function bundleCommand(runIdArg, options = {}) {
     let sidecarDir = outputDir;
     if (outputDir.toLowerCase().endsWith(".html")) {
       htmlPath = outputDir;
-      sidecarDir = path15.dirname(outputDir);
+      sidecarDir = path16.dirname(outputDir);
     } else {
       await mkdir(outputDir, { recursive: true });
-      htmlPath = path15.join(outputDir, EVIDENCE_HTML_FILENAME);
+      htmlPath = path16.join(outputDir, EVIDENCE_HTML_FILENAME);
       sidecarDir = outputDir;
     }
     await mkdir(sidecarDir, { recursive: true });
     await writeFile(htmlPath, htmlContent, "utf-8");
-    await writeFile(path15.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await writeFile(path16.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     outputPath = htmlPath;
   } else if (format === "zip") {
     const zipPath = outputDir.toLowerCase().endsWith(".zip") ? outputDir : `${outputDir}.zip`;
-    const zipParent = path15.dirname(zipPath);
+    const zipParent = path16.dirname(zipPath);
     await mkdir(zipParent, { recursive: true });
     const entries = [
       ...[...packaged.entries()].map(([relativePath, content]) => ({
@@ -9152,10 +9152,10 @@ async function bundleCommand(runIdArg, options = {}) {
     await mkdir(outputDir, { recursive: true });
     for (const [relativePath, content] of packaged.entries()) {
       const outPath = assertBundlePathContained(outputDir, relativePath);
-      await mkdir(path15.dirname(outPath), { recursive: true });
+      await mkdir(path16.dirname(outPath), { recursive: true });
       await writeFile(outPath, content, "utf-8");
     }
-    await writeFile(path15.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await writeFile(path16.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     if (!files.includes(EVIDENCE_MANIFEST_FILENAME)) {
       files.push(EVIDENCE_MANIFEST_FILENAME);
     }
@@ -9201,7 +9201,7 @@ function writeJson5(value) {
 `;
 }
 async function bundleVerifyCommand(targetPath, options = {}) {
-  const root = path15.resolve(targetPath.trim() || ".");
+  const root = path16.resolve(targetPath.trim() || ".");
   const result = await verifyEvidenceDirectory(root, {
     unexpectedFiles: options.unexpected ?? "fail"
   });
@@ -9234,6 +9234,141 @@ async function bundleVerifyCommand(targetPath, options = {}) {
     process.exitCode = 1;
   }
 }
+var CLIENTS = [
+  "cursor",
+  "claude-code",
+  "codex",
+  "gemini"
+];
+function isMcpConfigureClient(value) {
+  return CLIENTS.includes(value);
+}
+function buildServerBlock(traceDir) {
+  return {
+    command: "npx",
+    args: ["-y", "@agent-inspect/mcp-server", "--dir", traceDir],
+    env: {
+      AGENT_INSPECT_TRACE_DIR: traceDir,
+      AGENT_INSPECT_MCP_REDACTION_PROFILE: "share"
+    }
+  };
+}
+function buildMcpClientConfig(client, traceDir) {
+  const server = buildServerBlock(traceDir);
+  switch (client) {
+    case "cursor":
+      return {
+        mcpServers: {
+          "agent-inspect": server
+        }
+      };
+    case "claude-code":
+      return {
+        mcpServers: {
+          "agent-inspect": server
+        }
+      };
+    case "codex":
+      return {
+        mcp_servers: {
+          "agent-inspect": {
+            command: server.command,
+            args: server.args,
+            env: server.env
+          }
+        }
+      };
+    case "gemini":
+      return {
+        mcpServers: {
+          "agent-inspect": server
+        }
+      };
+    default: {
+      const _exhaustive = client;
+      return _exhaustive;
+    }
+  }
+}
+function resolveTargetPath(client, projectLocal) {
+  if (projectLocal) {
+    switch (client) {
+      case "cursor":
+        return path16.join(".cursor", "mcp.json");
+      case "claude-code":
+        return path16.join(".mcp.json");
+      case "codex":
+        return path16.join(".codex", "config.toml.json");
+      case "gemini":
+        return path16.join(".gemini", "settings.json");
+    }
+  }
+  switch (client) {
+    case "cursor":
+      return path16.join("~", ".cursor", "mcp.json");
+    case "claude-code":
+      return path16.join("~", ".claude.json");
+    case "codex":
+      return path16.join("~", ".codex", "config.toml");
+    case "gemini":
+      return path16.join("~", ".gemini", "settings.json");
+  }
+}
+async function mcpConfigureCommand(options) {
+  if (!isMcpConfigureClient(options.client)) {
+    throw new Error(
+      `Unsupported client "${String(options.client)}". Use: ${CLIENTS.join(", ")}`
+    );
+  }
+  const traceDir = options.dir?.trim() || ".agent-inspect";
+  const projectLocal = Boolean(options.projectLocal);
+  const write = Boolean(options.write);
+  const yes = Boolean(options.yes);
+  const dryRun = !(write && yes && projectLocal);
+  const config = buildMcpClientConfig(options.client, traceDir);
+  const targetPath = resolveTargetPath(options.client, projectLocal);
+  const notes = [
+    "Read-only MCP server; no network upload; share redaction by default.",
+    "Dry-run by default. Pass --project-local --write --yes to write a project file.",
+    "User-level paths are never auto-written by this command.",
+    "Remove the agent-inspect server block to uninstall."
+  ];
+  let wrote = false;
+  if (!dryRun && projectLocal) {
+    const abs = path16.resolve(targetPath);
+    await mkdir(path16.dirname(abs), { recursive: true });
+    await writeFile(abs, `${JSON.stringify(config, null, 2)}
+`, "utf8");
+    wrote = true;
+  }
+  const result = {
+    client: options.client,
+    dryRun,
+    wrote,
+    targetPath,
+    config,
+    notes
+  };
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify(result, null, 2)}
+`);
+  } else {
+    process.stdout.write(
+      [
+        `Client: ${result.client}`,
+        `Mode: ${result.dryRun ? "dry-run" : "write"}`,
+        `Target: ${result.targetPath}`,
+        `Wrote: ${result.wrote}`,
+        "",
+        JSON.stringify(result.config, null, 2),
+        "",
+        ...result.notes.map((note) => `- ${note}`),
+        ""
+      ].join("\n")
+    );
+  }
+  return result;
+}
 var NOTE2 = "Generated locally by AgentInspect from reporter artifact manifests. Trace contents are not embedded.";
 var MAX_TEXT = 180;
 var FRAMEWORKS = /* @__PURE__ */ new Set(["vitest", "jest", "manual"]);
@@ -9361,23 +9496,23 @@ function readManifestDocument(value) {
   };
 }
 function cwdRelative(filePath) {
-  const relative = path15.relative(process.cwd(), path15.resolve(filePath)).replace(/\\/g, "/");
-  if (relative === "" || relative.startsWith("../") || path15.isAbsolute(relative)) {
-    return path15.basename(filePath);
+  const relative = path16.relative(process.cwd(), path16.resolve(filePath)).replace(/\\/g, "/");
+  if (relative === "" || relative.startsWith("../") || path16.isAbsolute(relative)) {
+    return path16.basename(filePath);
   }
   return relative;
 }
 async function readReporterManifest(filePath) {
-  const absolute = path15.resolve(filePath);
+  const absolute = path16.resolve(filePath);
   const raw = await readFile(absolute, "utf-8");
   const document = readManifestDocument(JSON.parse(raw));
   const manifest = document.manifest;
   const results = manifest.results.map((result) => ({
     testId: safeText(result.testId),
     name: safeText(result.name),
-    ...result.file === void 0 ? {} : { file: safeText(path15.basename(result.file)) },
+    ...result.file === void 0 ? {} : { file: safeText(path16.basename(result.file)) },
     status: result.status,
-    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path15.basename(result.tracePath)) },
+    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path16.basename(result.tracePath)) },
     artifacts: result.artifacts,
     diagnostics: result.diagnostics
   }));
@@ -9516,15 +9651,15 @@ async function ciSummaryCommand(manifestPaths, options = {}) {
     return;
   }
   const markdown = renderMarkdown2(result);
-  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path15.resolve(options.output.trim()) : void 0;
+  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path16.resolve(options.output.trim()) : void 0;
   if (outputPath !== void 0) {
-    await mkdir(path15.dirname(outputPath), { recursive: true });
+    await mkdir(path16.dirname(outputPath), { recursive: true });
     await writeFile(outputPath, markdown, "utf-8");
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    const summaryPath = path15.resolve(summaryTarget);
-    await mkdir(path15.dirname(summaryPath), { recursive: true });
+    const summaryPath = path16.resolve(summaryTarget);
+    await mkdir(path16.dirname(summaryPath), { recursive: true });
     await appendFile(summaryPath, `
 ${markdown}`, "utf-8");
   }
@@ -9672,7 +9807,7 @@ jobs:
 }
 async function planInit(options = {}) {
   const framework = normalizeFramework(options.framework);
-  const cwd = path15.resolve(options.cwd ?? process.cwd());
+  const cwd = path16.resolve(options.cwd ?? process.cwd());
   const demoPath = framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${framework}-demo.mjs`;
   const candidates = [
     { rel: CONFIG_FILE, content: configTemplate(framework) },
@@ -9687,7 +9822,7 @@ async function planInit(options = {}) {
   }
   const files = [];
   for (const candidate of candidates) {
-    const abs = path15.join(cwd, candidate.rel);
+    const abs = path16.join(cwd, candidate.rel);
     try {
       await access(abs);
       files.push({
@@ -9708,12 +9843,12 @@ async function writePlannedFiles(plan, cwd, options) {
     if (entry.action === "skip") {
       continue;
     }
-    const abs = path15.join(cwd, entry.path);
+    const abs = path16.join(cwd, entry.path);
     if (options.dryRun) {
       written.push(entry.path);
       continue;
     }
-    await mkdir(path15.dirname(abs), { recursive: true });
+    await mkdir(path16.dirname(abs), { recursive: true });
     const content = entry.path === CONFIG_FILE ? configTemplate(plan.framework) : entry.path === GITKEEP ? "" : entry.path.endsWith(".yml") ? githubWorkflowTemplate() : demoTemplate(plan.framework);
     await writeFile(abs, content, "utf-8");
     written.push(entry.path);
@@ -9721,7 +9856,7 @@ async function writePlannedFiles(plan, cwd, options) {
   return written;
 }
 async function initCommand(options = {}) {
-  const cwd = path15.resolve(options.cwd ?? process.cwd());
+  const cwd = path16.resolve(options.cwd ?? process.cwd());
   try {
     const plan = await planInit({ ...options, cwd });
     const toWrite = plan.files.filter((file) => file.action === "create").map((f) => f.path);
@@ -9812,7 +9947,7 @@ function envCheck(name, optional = true) {
   };
 }
 async function traceDirWritable(traceDir) {
-  const resolved = path15.resolve(traceDir);
+  const resolved = path16.resolve(traceDir);
   try {
     await mkdir(resolved, { recursive: true });
     await access(resolved, constants.W_OK);
@@ -9833,10 +9968,10 @@ async function traceDirWritable(traceDir) {
   }
 }
 function readPackageVersionNearEntry(entryPath, packageName) {
-  let dir = path15.dirname(path15.resolve(entryPath));
-  const { root } = path15.parse(dir);
+  let dir = path16.dirname(path16.resolve(entryPath));
+  const { root } = path16.parse(dir);
   while (true) {
-    const candidate = path15.join(dir, "package.json");
+    const candidate = path16.join(dir, "package.json");
     if (existsSync(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync(candidate, "utf8"));
@@ -9847,14 +9982,14 @@ function readPackageVersionNearEntry(entryPath, packageName) {
       }
     }
     if (dir === root) break;
-    const parent = path15.dirname(dir);
+    const parent = path16.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return void 0;
 }
 function resolveInstalledPackage(cwd, name) {
-  const require2 = createRequire(path15.join(cwd, "package.json"));
+  const require2 = createRequire(path16.join(cwd, "package.json"));
   try {
     const entry = require2.resolve(name);
     let version2;
@@ -9952,7 +10087,7 @@ function versionMismatchCheck(cwd) {
   };
 }
 async function runDoctorChecks(options = {}) {
-  const cwd = path15.resolve(options.cwd ?? process2.cwd());
+  const cwd = path16.resolve(options.cwd ?? process2.cwd());
   const traceDir = options.traceDir?.trim() || process2.env.AGENT_INSPECT_TRACE_DIR?.trim() || ".agent-inspect";
   const checks2 = [
     nodeVersionCheck(),
@@ -10192,7 +10327,7 @@ function parsePluginManifest(input3) {
   };
 }
 async function readPluginManifestFile(packageDir) {
-  const manifestPath = path15.join(packageDir, PLUGIN_MANIFEST_FILENAME);
+  const manifestPath = path16.join(packageDir, PLUGIN_MANIFEST_FILENAME);
   try {
     const raw = await readFile(manifestPath, "utf8");
     const parsed = parsePluginManifest(JSON.parse(raw));
@@ -10266,7 +10401,7 @@ function createTraceDirectoryIndexer() {
 // packages/cli/src/plugins.ts
 async function readPackageName(packageDir) {
   try {
-    const raw = await readFile(path15.join(packageDir, "package.json"), "utf8");
+    const raw = await readFile(path16.join(packageDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     return typeof parsed.name === "string" ? parsed.name : void 0;
   } catch {
@@ -10274,7 +10409,7 @@ async function readPackageName(packageDir) {
   }
 }
 async function discoverPlugins(cwd = process.cwd()) {
-  const nodeModules = path15.join(cwd, "node_modules");
+  const nodeModules = path16.join(cwd, "node_modules");
   const found = [];
   let entries;
   try {
@@ -10285,7 +10420,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   for (const entry of entries.sort()) {
     if (entry.startsWith("@")) continue;
     if (!isPluginPackageName(entry)) continue;
-    const packageDir = path15.join(nodeModules, entry);
+    const packageDir = path16.join(nodeModules, entry);
     const manifestRead = await readPluginManifestFile(packageDir);
     found.push({
       packageName: entry,
@@ -10298,7 +10433,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   return found;
 }
 async function validatePluginPackage(packageRef, cwd = process.cwd()) {
-  const packageDir = path15.isAbsolute(packageRef) ? packageRef : path15.join(cwd, "node_modules", packageRef);
+  const packageDir = path16.isAbsolute(packageRef) ? packageRef : path16.join(cwd, "node_modules", packageRef);
   const packageName = await readPackageName(packageDir) ?? packageRef;
   const errors = [];
   const warnings = [];
@@ -10374,7 +10509,7 @@ async function pluginsValidateCommand(packageRef, cwd) {
 }
 var INDEX_FILENAME = ".agent-inspect-index.json";
 function traceIndexPath(traceDir) {
-  return path15.join(traceDir, INDEX_FILENAME);
+  return path16.join(traceDir, INDEX_FILENAME);
 }
 function parseMaxEntries(raw) {
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -10487,7 +10622,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-YFN3Q3GP.mjs');
+    return await import('./src-G7PM24W2.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(
@@ -10517,7 +10652,7 @@ async function newestTraceMtimeMs2(traceDir) {
     for (const file of files) {
       if (!file.endsWith(".jsonl")) continue;
       try {
-        const s = await stat(path15.join(traceDir, file));
+        const s = await stat(path16.join(traceDir, file));
         if (s.mtimeMs > newest) newest = s.mtimeMs;
       } catch {
       }
@@ -10769,11 +10904,11 @@ function printJson5(value) {
   console.log(JSON.stringify(value, null, 2));
 }
 function resolveCwd(options) {
-  return path15.resolve(options.cwd ?? process.cwd());
+  return path16.resolve(options.cwd ?? process.cwd());
 }
 async function suiteInitCommand(options = {}) {
   const cwd = resolveCwd(options);
-  const configPath = path15.join(cwd, DEFAULT_CONFIG_FILENAME);
+  const configPath = path16.join(cwd, DEFAULT_CONFIG_FILENAME);
   const template = options.template?.trim();
   const suiteConfig = template !== void 0 && template !== "" ? resolveSuiteTemplate(template) : defaultSuiteConfigTemplate();
   if (options.dryRun) {
@@ -10892,13 +11027,13 @@ async function suiteListCommand(options = {}) {
 }
 async function writeSuiteArtifact(result, configOutputDir, options) {
   const cwd = resolveCwd(options);
-  const outputDir = path15.resolve(
+  const outputDir = path16.resolve(
     cwd,
     options.output ?? configOutputDir ?? DEFAULT_SUITE_ARTIFACTS_DIR
   );
   await mkdir(outputDir, { recursive: true });
   const stamp = result.startedAt.replace(/[:.]/g, "-");
-  const filePath = path15.join(outputDir, `${result.suiteName}-${stamp}.json`);
+  const filePath = path16.join(outputDir, `${result.suiteName}-${stamp}.json`);
   await writeFile(filePath, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
   return filePath;
@@ -10956,7 +11091,7 @@ async function loadSuiteResultFromInput(options) {
   if (options.input === void 0 || options.input.trim() === "") {
     throw new Error("Pass --input <suite-run.json> from a prior suite run.");
   }
-  const inputPath = path15.resolve(cwd, options.input.trim());
+  const inputPath = path16.resolve(cwd, options.input.trim());
   const raw = await readFile(inputPath, "utf-8");
   return JSON.parse(raw);
 }
@@ -10990,9 +11125,9 @@ function normalizeMetrics(raw) {
 }
 async function writeArtifacts(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
-  const jsonPath = path15.join(outputDir, "cohort-results.json");
-  const markdownPath = path15.join(outputDir, "cohort-summary.md");
-  const htmlPath = path15.join(outputDir, "cohort-report.html");
+  const jsonPath = path16.join(outputDir, "cohort-results.json");
+  const markdownPath = path16.join(outputDir, "cohort-summary.md");
+  const htmlPath = path16.join(outputDir, "cohort-report.html");
   await writeFile(jsonPath, `${renderCohortReport(result, { format: "json" })}
 `, "utf-8");
   await writeFile(
@@ -11020,7 +11155,7 @@ async function cohortCommand(options = {}) {
     const format = options.format ?? (options.json ? "json" : "markdown");
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts(result, path15.resolve(options.output.trim()));
+      artifacts = await writeArtifacts(result, path16.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(
@@ -11090,11 +11225,11 @@ function parseDuration2(value) {
 async function writeArtifacts2(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
   const paths = {
-    jsonPath: path15.join(outputDir, "gate-results.json"),
-    markdownPath: path15.join(outputDir, "gate-summary.md"),
-    htmlPath: path15.join(outputDir, "gate-report.html"),
-    junitPath: path15.join(outputDir, "junit.xml"),
-    githubPath: path15.join(outputDir, "github-step-summary.md")
+    jsonPath: path16.join(outputDir, "gate-results.json"),
+    markdownPath: path16.join(outputDir, "gate-summary.md"),
+    htmlPath: path16.join(outputDir, "gate-report.html"),
+    junitPath: path16.join(outputDir, "junit.xml"),
+    githubPath: path16.join(outputDir, "github-step-summary.md")
   };
   await writeFile(
     paths.jsonPath,
@@ -11162,7 +11297,7 @@ async function gateCommand(options = {}) {
     const result = await runGate(runs, gateOptions);
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts2(result, path15.resolve(options.output.trim()));
+      artifacts = await writeArtifacts2(result, path16.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(JSON.stringify({ ...result, artifacts: artifacts ?? null }, null, 2));
@@ -11694,6 +11829,20 @@ function createCliProgram() {
   ).option("--format <format>", "markdown, json, or html", "markdown").option("-o, --output <dir>", "write cohort-results.json, cohort-summary.md, cohort-report.html").option("--json", "print deterministic JSON result").action((opts) => {
     runCommand(() => cohortCommand(opts));
   });
+  const mcpCmd = program.command("mcp").description("Configure local coding-agent MCP clients (read-only; dry-run by default)");
+  mcpCmd.command("configure").description("Print or write MCP client config for Cursor/Claude/Codex/Gemini").requiredOption(
+    "--client <name>",
+    "cursor | claude-code | codex | gemini"
+  ).option("--dir <path>", "trace directory for the MCP server", ".agent-inspect").option("--project-local", "target a project-local config path").option("--write", "write config (requires --project-local --yes)").option("--yes", "confirm write").option("--json", "print deterministic JSON result").action((opts) => {
+    runCommand(async () => {
+      if (!isMcpConfigureClient(opts.client)) {
+        throw new Error(
+          `Unsupported --client "${opts.client}". Use: cursor, claude-code, codex, gemini`
+        );
+      }
+      await mcpConfigureCommand({ ...opts, client: opts.client });
+    });
+  });
   program.command("gate").description("Run deterministic CI quality gates over traces or suites (v5.2+)").option("--dir <path>", "trace directory for threshold checks").option("--suite <path>", "suite config path").option("--max-error-rate <percent>", "maximum allowed error rate percentage").option("--max-p95-duration <ms>", "maximum allowed p95 run duration in ms").option("--forbid-tool <name>", "forbidden tool name (repeatable or comma-separated)").option(
     "--require-observation <name>",
     "required passed observation (repeatable or comma-separated)"
@@ -11710,9 +11859,9 @@ function isPrimaryModule() {
   if (!entry) return false;
   const selfPath = fileURLToPath(import.meta.url);
   try {
-    return realpathSync(path15.resolve(entry)) === realpathSync(path15.resolve(selfPath));
+    return realpathSync(path16.resolve(entry)) === realpathSync(path16.resolve(selfPath));
   } catch {
-    return path15.resolve(entry) === path15.resolve(selfPath);
+    return path16.resolve(entry) === path16.resolve(selfPath);
   }
 }
 if (isPrimaryModule()) {