agent-inspect 6.16.2 → 6.17.0

package/packages/cli/dist/index.mjs

@@ -1,17 +1,18 @@
 #!/usr/bin/env node
 import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-LFSBMUCD.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
-import path16 from 'path';
+import path18 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, Option } from 'commander';
-import { readFile, stat, mkdir, writeFile, unlink, appendFile, rm, access, open, readdir, constants } from 'fs/promises';
+import { readFile, stat, mkdir, writeFile, unlink, appendFile, access, rm, open, readdir, constants } from 'fs/promises';
 import process2, { stdin, stdout } from 'process';
 import crypto, { createHash } from 'crypto';
 import { createServer } from 'http';
+import { spawn } from 'child_process';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.16.2";
+var version = "6.17.0";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -2971,9 +2972,9 @@ Trace directory: ${traceDir}`);
     process.exitCode = 1;
   }
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path16.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path18.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path16.dirname(outPath), { recursive: true });
+    await mkdir(path18.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     const vlabel = validation !== void 0 ? validation.ok ? "ok" : "failed" : "skipped";
     console.log(`Wrote ${result.fileExtension} export to ${outPath} (validation: ${vlabel})`);
@@ -3317,7 +3318,7 @@ function indexedToMetadata(row, traceDir) {
     endedAt: row.endedAt ?? void 0,
     durationMs: row.durationMs ?? void 0,
     eventCount: 0,
-    filePath: path16.join(traceDir, row.file),
+    filePath: path18.join(traceDir, row.file),
     fileSize: 0,
     createdAt: new Date(row.mtimeMs)
   };
@@ -3795,9 +3796,9 @@ async function reportCommand(runId, options = {}) {
     ...options.section ? { section: options.section } : {}
   });
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path16.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path18.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path16.dirname(outPath), { recursive: true });
+    await mkdir(path18.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     console.log(`Wrote ${result.fileExtension} report to ${outPath}`);
   }
@@ -3976,8 +3977,8 @@ function passesLuhn(value) {
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var EPOCH_MS_RE = /^1[0-9]{12}$/;
 var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
-function pathSuggestsNonCard(path27) {
-  const normalized = path27.toLowerCase().replace(/[^a-z0-9._]/g, "");
+function pathSuggestsNonCard(path29) {
+  const normalized = path29.toLowerCase().replace(/[^a-z0-9._]/g, "");
   return /(^|\.)(tokenusage|usage)(\.|$)/.test(normalized) || /(startedat|endedat|durationms|timestamp|createdat|updatedat)(\.|$)/.test(normalized) || /(^|\.)(runid|traceid|spanid|eventid|sessionid|userid|parentid|requestid|correlationid)(\.|$)/.test(
     normalized
   ) || /(^|\.)ts(\.|$)/.test(normalized);
@@ -4164,17 +4165,17 @@ function applyRule(rule, value, replacement) {
   }
   return value;
 }
-function childPath(path27, key) {
+function childPath(path29, key) {
   if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)) {
-    return path27 ? `${path27}.${key}` : key;
+    return path29 ? `${path29}.${key}` : key;
   }
-  return `${path27 || "$"}[${JSON.stringify(key)}]`;
+  return `${path29 || "$"}[${JSON.stringify(key)}]`;
 }
-function indexPath(path27, index) {
-  return `${path27 || "$"}[${index}]`;
+function indexPath(path29, index) {
+  return `${path29 || "$"}[${index}]`;
 }
-function makeFinding(path27, detector, action, matchKind, severity = "warning", preview) {
-  return preview === void 0 ? { path: path27, detector, action, severity, matchKind } : { path: path27, detector, action, severity, matchKind, preview };
+function makeFinding(path29, detector, action, matchKind, severity = "warning", preview) {
+  return preview === void 0 ? { path: path29, detector, action, severity, matchKind } : { path: path29, detector, action, severity, matchKind, preview };
 }
 function createRedactionProfile(profile = "local") {
   switch (profile) {
@@ -4243,11 +4244,11 @@ var Redactor2 = class {
   #recordFinding(state, finding) {
     if (this.#collectFindings) state.findings.push(finding);
   }
-  #redactValue(value, key, path27, depth, state) {
+  #redactValue(value, key, path29, depth, state) {
     if (depth > this.#maxDepth) {
       this.#recordFinding(
         state,
-        makeFinding(path27, "structure.maxDepth", "truncate", "value", "warning")
+        makeFinding(path29, "structure.maxDepth", "truncate", "value", "warning")
       );
       return "[Truncated]";
     }
@@ -4256,19 +4257,19 @@ var Redactor2 = class {
       if (rule) {
         this.#recordFinding(
           state,
-          makeFinding(path27, `key.${rule.key}`, actionForRule(rule), "key", "warning")
+          makeFinding(path29, `key.${rule.key}`, actionForRule(rule), "key", "warning")
         );
         return applyRule(rule, value, this.#replacement);
       }
     }
     for (const detector of this.#detectors) {
-      const detections = detector.detect({ path: path27, key, value });
+      const detections = detector.detect({ path: path29, key, value });
       for (const detection of detections) {
         const action = detection.action ?? "replace";
         this.#recordFinding(
           state,
           makeFinding(
-            path27,
+            path29,
             detector.id,
             action,
             detection.matchKind ?? detector.matchKind ?? "custom",
@@ -4286,7 +4287,7 @@ var Redactor2 = class {
       const out = [];
       state.seen.set(value, out);
       value.forEach((item, index) => {
-        out[index] = this.#redactValue(item, void 0, indexPath(path27, index), depth + 1, state);
+        out[index] = this.#redactValue(item, void 0, indexPath(path29, index), depth + 1, state);
       });
       return out;
     }
@@ -4298,7 +4299,7 @@ var Redactor2 = class {
         out[entryKey] = this.#redactValue(
           entryValue,
           entryKey,
-          childPath(path27 === "$" ? "" : path27, entryKey),
+          childPath(path29 === "$" ? "" : path29, entryKey),
           depth + 1,
           state
         );
@@ -4759,14 +4760,14 @@ function uniqueSorted(values) {
   return [...new Set(values)].sort();
 }
 function isWithinDirectory(child, parent) {
-  const relative = path16.relative(parent, child);
-  return relative === "" || !relative.startsWith("..") && !path16.isAbsolute(relative);
+  const relative = path18.relative(parent, child);
+  return relative === "" || !relative.startsWith("..") && !path18.isAbsolute(relative);
 }
 async function resolveOutputPath(inputPath, output2, force) {
   if (output2 === void 0 || output2.trim() === "") return void 0;
-  const inputAbs = path16.resolve(inputPath);
-  const outputAbs = path16.resolve(output2.trim());
-  const inputDir = path16.dirname(inputAbs);
+  const inputAbs = path18.resolve(inputPath);
+  const outputAbs = path18.resolve(output2.trim());
+  const inputDir = path18.dirname(inputAbs);
   if (!isWithinDirectory(outputAbs, inputDir)) {
     throw new Error("Refusing to write migrated output outside the input directory.");
   }
@@ -4887,7 +4888,7 @@ async function migrateCommand(input3, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const inputPath = path16.resolve(input3.trim());
+  const inputPath = path18.resolve(input3.trim());
   const dryRun = options.dryRun === true;
   if (!dryRun && (options.output === void 0 || options.output.trim() === "")) {
     console.error("migrate requires --dry-run or --output <path>.");
@@ -4906,7 +4907,7 @@ async function migrateCommand(input3, options = {}) {
     );
     const result = await buildMigration(inputPath, outputPath);
     if (!dryRun && outputPath !== void 0) {
-      await mkdir(path16.dirname(outputPath), { recursive: true });
+      await mkdir(path18.dirname(outputPath), { recursive: true });
       await writeFile(outputPath, result.content, "utf-8");
     }
     printSummary2(result, dryRun);
@@ -4916,6 +4917,243 @@ async function migrateCommand(input3, options = {}) {
     process.exitCode = 1;
   }
 }
+function validateReporterArtifactPath(options) {
+  const outputDir = path18.resolve(options.outputDir);
+  const diagnostics = [];
+  const rawPath = options.relativePath;
+  if (rawPath.length === 0) {
+    diagnostics.push({
+      code: "artifact_path_empty",
+      severity: "error",
+      message: "Reporter artifact path must not be empty."
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  if (rawPath.includes("\0")) {
+    diagnostics.push({
+      code: "invalid_artifact_path",
+      severity: "error",
+      message: "Reporter artifact path must not contain null bytes.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  if (path18.isAbsolute(rawPath) || path18.win32.isAbsolute(rawPath)) {
+    diagnostics.push({
+      code: "artifact_path_absolute",
+      severity: "error",
+      message: "Reporter artifact path must be relative.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  const normalized = path18.posix.normalize(rawPath.replace(/\\/g, "/"));
+  const segments = normalized.split("/");
+  if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
+    diagnostics.push({
+      code: "artifact_path_escape",
+      severity: "error",
+      message: "Reporter artifact path must stay under the output directory.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  const absolutePath = path18.resolve(outputDir, normalized);
+  const relFromOutput = path18.relative(outputDir, absolutePath);
+  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path18.isAbsolute(relFromOutput)) {
+    diagnostics.push({
+      code: "artifact_path_escape",
+      severity: "error",
+      message: "Reporter artifact path resolved outside the output directory.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  return {
+    ok: true,
+    outputDir,
+    relativePath: normalized,
+    absolutePath,
+    diagnostics
+  };
+}
+var EVIDENCE_CI_ARTIFACT_FILES = [
+  "evidence.html",
+  "evidence.json",
+  "check-results.json",
+  "trace.jsonl"
+];
+function createEvidenceCiArtifacts(options) {
+  const profile = options.redactionProfile ?? "share";
+  const prefix = options.relativeDir !== void 0 && options.relativeDir.trim() !== "" ? options.relativeDir.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "") : "";
+  const join = (name) => prefix === "" ? name : path18.posix.join(prefix, name);
+  const formatFor = (name) => {
+    if (name.endsWith(".html")) return "html";
+    if (name.endsWith(".jsonl")) return "jsonl";
+    return "json";
+  };
+  return EVIDENCE_CI_ARTIFACT_FILES.map((name) => ({
+    kind: "evidence",
+    path: join(name),
+    format: formatFor(name),
+    redactionProfile: profile,
+    title: `Evidence v2 ${name}`
+  }));
+}
+
+// packages/cli/src/evidence-on.ts
+function shouldEmitEvidence(mode, failed) {
+  if (mode === void 0 || mode === "never") return false;
+  if (mode === "always") return true;
+  return failed;
+}
+function parseEvidenceProfile(value) {
+  const profile = (value ?? "share").trim().toLowerCase();
+  if (profile === "local" || profile === "share" || profile === "strict") {
+    return profile;
+  }
+  throw new Error(
+    `Unsupported --evidence-profile "${value}". Use local, share, or strict.`
+  );
+}
+function parseEvidenceFormat(value) {
+  const format = (value ?? "directory").trim().toLowerCase();
+  if (format === "directory" || format === "html" || format === "zip") {
+    return format;
+  }
+  throw new Error(
+    `Unsupported --evidence-format "${value}". Use directory, html, or zip.`
+  );
+}
+function toAssessmentStatus(failed) {
+  return failed ? "UNSAFE" : "SAFE";
+}
+function stableJson2(value) {
+  return `${JSON.stringify(value, null, 2)}
+`;
+}
+async function writeLocalEvidence(input3) {
+  const profile = input3.redactionProfile ?? "share";
+  const format = input3.format ?? "directory";
+  const baseDir = path18.resolve(input3.outputDir);
+  await mkdir(
+    format === "zip" && baseDir.toLowerCase().endsWith(".zip") ? path18.dirname(baseDir) : baseDir,
+    { recursive: true }
+  );
+  const sourceContents = /* @__PURE__ */ new Map();
+  if (input3.sourceContents instanceof Map) {
+    for (const [runId, content] of input3.sourceContents) {
+      sourceContents.set(runId, content);
+    }
+  } else if (input3.sourceContents !== void 0) {
+    for (const [runId, content] of Object.entries(input3.sourceContents)) {
+      sourceContents.set(runId, content);
+    }
+  }
+  const traceDir = resolveTraceDir({ dir: input3.dir });
+  let combined = "";
+  for (const runId of input3.runIds) {
+    let raw = sourceContents.get(runId) ?? "";
+    if (raw === "") {
+      try {
+        raw = await readFile(getTraceFilePath(runId, traceDir), "utf-8");
+      } catch {
+        raw = "";
+      }
+      sourceContents.set(runId, raw);
+    }
+    const redacted = redactTraceContent(raw, profile);
+    combined += redacted.content.endsWith("\n") ? redacted.content : `${redacted.content}
+`;
+  }
+  const assessmentStatus = toAssessmentStatus(input3.failed);
+  const evidencePackage = buildEvidenceCiPackage({
+    generatorVersion: version,
+    runIds: input3.runIds,
+    sourceContents,
+    redactedTraceJsonl: combined,
+    redactionProfile: profile,
+    assessmentStatus,
+    checkResultsJson: input3.checkResultsJson,
+    ...input3.summaryText !== void 0 ? { summaryText: input3.summaryText } : {}
+  });
+  const files = [
+    ["evidence.html", evidencePackage["evidence.html"]],
+    ["evidence.json", evidencePackage["evidence.json"]],
+    ["check-results.json", evidencePackage["check-results.json"]],
+    ["trace.jsonl", evidencePackage["trace.jsonl"]]
+  ];
+  const expected = createEvidenceCiArtifacts({
+    redactionProfile: profile
+  }).map((a) => a.path);
+  for (const name of expected) {
+    if (!files.some(([fileName]) => fileName === name)) {
+      throw new Error(`Evidence CI package missing expected file: ${name}`);
+    }
+  }
+  if (format === "zip") {
+    const zipPath = baseDir.toLowerCase().endsWith(".zip") ? baseDir : `${baseDir}.zip`;
+    await mkdir(path18.dirname(zipPath), { recursive: true });
+    const archive = buildZipArchive(
+      files.map(([relativePath, content]) => ({
+        path: relativePath,
+        content
+      }))
+    );
+    await writeFile(zipPath, archive);
+    return zipPath;
+  }
+  if (format === "html") {
+    let htmlPath = baseDir;
+    let sidecarDir = baseDir;
+    if (baseDir.toLowerCase().endsWith(".html")) {
+      htmlPath = baseDir;
+      sidecarDir = path18.dirname(baseDir);
+    } else {
+      await mkdir(baseDir, { recursive: true });
+      htmlPath = path18.join(baseDir, "evidence.html");
+      sidecarDir = baseDir;
+    }
+    await mkdir(sidecarDir, { recursive: true });
+    await writeFile(htmlPath, evidencePackage["evidence.html"], "utf-8");
+    await writeFile(
+      path18.join(sidecarDir, "evidence.json"),
+      evidencePackage["evidence.json"],
+      "utf-8"
+    );
+    return htmlPath;
+  }
+  await mkdir(baseDir, { recursive: true });
+  for (const [name, content] of files) {
+    await writeFile(path18.join(baseDir, name), content, "utf-8");
+  }
+  return baseDir;
+}
+function checkResultToEvidenceJson(result, runIds) {
+  const status = result.status === "pass" ? "SAFE" : result.status === "fail" ? "UNSAFE" : "UNKNOWN";
+  return stableJson2({
+    aggregateStatus: status,
+    runs: runIds.map((runId) => ({
+      runId,
+      status,
+      errors: result.summary.errors,
+      warnings: result.summary.warnings,
+      findings: result.findings.length
+    })),
+    findings: result.findings,
+    diagnostics: result.diagnostics
+  });
+}
+function defaultEvidenceDir(label) {
+  const safe = label.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 80) || "evidence";
+  return path18.join(".agent-inspect", "evidence", safe);
+}
+function resolveEvidenceOutputDir(evidenceDir, label) {
+  if (evidenceDir !== void 0 && evidenceDir.trim() !== "") {
+    return path18.resolve(evidenceDir.trim());
+  }
+  return defaultEvidenceDir(label);
+}
 var ALL_RULES = [
   "circuit.same-tool-repetition",
   "circuit.same-args-repetition",
@@ -5236,23 +5474,23 @@ function evaluatePromptInjection(text, options = {}) {
   }
   return fail(ruleId, `Matched ${evidence.length} injection pattern(s).`, evidence, "warning");
 }
-function validateSchemaField(value, field, path27, evidence) {
+function validateSchemaField(value, field, path29, evidence) {
   const ruleId = "guardrail.structured-output";
   if (field.type) {
     const actual = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
     if (actual !== field.type) {
-      evidence.push({ ruleId, path: path27, preview: `expected ${field.type}, got ${actual}` });
+      evidence.push({ ruleId, path: path29, preview: `expected ${field.type}, got ${actual}` });
       return;
     }
   }
   if (field.enum && !field.enum.some((item) => Object.is(item, value))) {
-    evidence.push({ ruleId, path: path27, preview: "value not in enum" });
+    evidence.push({ ruleId, path: path29, preview: "value not in enum" });
   }
   if (field.type === "object" && field.required && value && typeof value === "object" && !Array.isArray(value)) {
     const record = value;
     for (const key of field.required) {
       if (!(key in record)) {
-        evidence.push({ ruleId, path: `${path27}.${key}`, preview: "missing required key" });
+        evidence.push({ ruleId, path: `${path29}.${key}`, preview: "missing required key" });
       }
     }
   }
@@ -5533,6 +5771,54 @@ function mergeSafetyExtensions(result, read, options) {
 }
 
 // packages/cli/src/check.ts
+function resolvePreset(preset, context = {}) {
+  if (preset === void 0 || preset.trim() === "") return void 0;
+  const name = preset.trim().toLowerCase();
+  if (name !== "trajectory" && name !== "safety" && name !== "comprehensive") {
+    throw new Error(
+      `Unknown --preset "${preset}". Use trajectory, safety, or comprehensive.`
+    );
+  }
+  const trajectorySelect = [
+    "run.status",
+    "run.requireCompleted",
+    "structure.orphan",
+    "structure.cycle",
+    "structure.relationship"
+  ];
+  if (context.hasToolRules === true) {
+    trajectorySelect.push("tool.usage");
+  }
+  const safetySelect = [
+    "run.status",
+    "safety.rawPrompt",
+    "safety.secretPattern",
+    "safety.redaction"
+  ];
+  if (name === "trajectory") {
+    return {
+      requireCompleted: true,
+      enableSafetyRedaction: false,
+      enableStructureRelationshipDefaults: true,
+      select: trajectorySelect
+    };
+  }
+  if (name === "safety") {
+    return {
+      requireCompleted: false,
+      enableSafetyRedaction: true,
+      enableStructureRelationshipDefaults: false,
+      select: safetySelect
+    };
+  }
+  const select = [.../* @__PURE__ */ new Set([...trajectorySelect, ...safetySelect])];
+  return {
+    requireCompleted: true,
+    enableSafetyRedaction: true,
+    enableStructureRelationshipDefaults: true,
+    select
+  };
+}
 var DEFAULT_SELECT = ["run.status"];
 var CONFIG_EXTENSIONS = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
 var TS_CONFIG_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".mts", ".cts"]);
@@ -5579,7 +5865,7 @@ function asConfig(value) {
 }
 async function loadConfig(configPath) {
   if (configPath === void 0) return {};
-  const extension = path16.extname(configPath);
+  const extension = path18.extname(configPath);
   if (TS_CONFIG_EXTENSIONS.has(extension)) {
     throw new Error(
       "TypeScript check configs require an explicit precompiled JavaScript config or future --config-loader support."
@@ -5588,7 +5874,7 @@ async function loadConfig(configPath) {
   if (!CONFIG_EXTENSIONS.has(extension)) {
     throw new Error("Unsupported check config extension. Use .json, .js, .mjs, or .cjs.");
   }
-  const absolute = path16.resolve(configPath);
+  const absolute = path18.resolve(configPath);
   if (extension === ".json") {
     const raw = await readFile(absolute, "utf-8");
     return asConfig(JSON.parse(raw));
@@ -5603,6 +5889,33 @@ function normalizeConfig(config) {
   }
   return config.checks;
 }
+function hasToolRulesConfigured(config, options) {
+  const tool = normalizeConfig(config).tool ?? {};
+  return Boolean(
+    (tool.required?.length ?? 0) > 0 || (tool.forbidden?.length ?? 0) > 0 || (tool.allowed?.length ?? 0) > 0 || tool.minCount !== void 0 || tool.maxCount !== void 0 || (options.requiredTool?.length ?? 0) > 0 || (options.forbiddenTool?.length ?? 0) > 0
+  );
+}
+function applyResolvedPreset(config, options, resolved) {
+  const checks2 = { ...normalizeConfig(config) };
+  if (resolved.enableSafetyRedaction) {
+    checks2.safety = { ...checks2.safety, redaction: true };
+  }
+  if (resolved.enableStructureRelationshipDefaults) {
+    const structure = checks2.structure ?? {};
+    const needed = structure.minConfidence === void 0 && structure.requireParentBeforeChild === void 0 && structure.requireTraceParentSpan === void 0;
+    if (needed) {
+      checks2.structure = { ...structure, requireParentBeforeChild: true };
+    }
+  }
+  return {
+    config: { checks: checks2 },
+    options: {
+      ...options,
+      ...resolved.requireCompleted ? { requireCompleted: true } : {},
+      rule: [...resolved.select, ...options.rule ?? []]
+    }
+  };
+}
 function buildRules(config, options) {
   const diagnostics = [];
   const checks2 = normalizeConfig(config);
@@ -5746,7 +6059,42 @@ function stable2(value) {
 function printJson(result) {
   console.log(JSON.stringify(stable2(result), null, 2));
 }
-function printHuman(result) {
+function isSafetyFinding(ruleId) {
+  return ruleId.startsWith("safety.") || ruleId.startsWith("guardrail.") || ruleId.includes("pii") || ruleId.includes("secret");
+}
+function printPresetClassSummary(result, preset) {
+  const name = preset?.trim().toLowerCase();
+  if (name !== "trajectory" && name !== "safety" && name !== "comprehensive") {
+    return;
+  }
+  const hasSafetyFindings = result.findings.some(
+    (finding) => isSafetyFinding(finding.ruleId)
+  );
+  const hasTrajectoryFindings = result.findings.some(
+    (finding) => !isSafetyFinding(finding.ruleId)
+  );
+  if (name === "trajectory") {
+    console.log(
+      `Trajectory: ${result.status === "pass" && !hasTrajectoryFindings ? "PASS" : result.status === "pass" ? "PASS" : "FAIL"}`
+    );
+    console.log("Share safety: not evaluated");
+    console.log("Run verify-safe before sharing.");
+    return;
+  }
+  if (name === "safety") {
+    console.log(
+      `Share safety: ${result.status === "pass" && !hasSafetyFindings ? "PASS" : result.status === "pass" ? "PASS" : "FAIL"}`
+    );
+    return;
+  }
+  console.log(
+    `Trajectory: ${hasTrajectoryFindings || result.status === "error" ? "FAIL" : "PASS"}`
+  );
+  console.log(
+    `Share safety: ${hasSafetyFindings || result.status === "fail" ? "FAIL" : result.status === "pass" ? "PASS" : "FAIL"}`
+  );
+}
+function printHuman(result, options = {}) {
   const scoped = result;
   if (scoped.scopeLabel) {
     console.log(`Scope: ${scoped.scopeKind} ${scoped.scopeLabel}`);
@@ -5755,6 +6103,7 @@ function printHuman(result) {
     }
   }
   console.log(`Check status: ${result.status}`);
+  printPresetClassSummary(result, options.preset);
   console.log(`Format: ${result.format}`);
   if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
   console.log(
@@ -5764,10 +6113,10 @@ function printHuman(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path27 = finding.evidence[0]?.path;
+    const path29 = finding.evidence[0]?.path;
     const run = finding.evidence[0]?.runId;
     const runPrefix = run ? `[${run}] ` : "";
-    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}`);
+    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}`);
   }
 }
 function readErrorResult(error) {
@@ -5783,12 +6132,24 @@ function readErrorResult(error) {
 async function checkCommand(target, options = {}, stdin = process.stdin) {
   let result;
   let phase = "config";
+  let evidenceRead;
+  let evidenceRunIds = [];
+  let evidenceSourceContents;
   const sessionId = options.session?.trim();
   const groupId = options.group?.trim();
   const useSessionScope = Boolean(sessionId || groupId);
   try {
-    const config = await loadConfig(options.config);
-    const built = buildRules(config, options);
+    let config = await loadConfig(options.config);
+    let effectiveOptions = options;
+    const resolved = resolvePreset(options.preset, {
+      hasToolRules: hasToolRulesConfigured(config, options)
+    });
+    if (resolved !== void 0) {
+      const applied = applyResolvedPreset(config, options, resolved);
+      config = applied.config;
+      effectiveOptions = applied.options;
+    }
+    const built = buildRules(config, effectiveOptions);
     if (built.diagnostics.some((item) => item.severity === "error")) {
       result = errorResult("AI_CHECK_INVALID_CONFIG", "Invalid check configuration.");
       result.diagnostics = [...built.diagnostics];
@@ -5809,6 +6170,7 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
         correlateByGroupId: options.correlateGroup === true
       });
       const perRun = [];
+      const sourceContents = /* @__PURE__ */ new Map();
       for (const meta of scoped.metas) {
         const read = await openTrace(
           { type: "file", path: meta.filePath },
@@ -5816,6 +6178,15 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
             ...options.format !== void 0 ? { format: options.format } : {}
           }
         );
+        try {
+          sourceContents.set(meta.runId, await readFile(meta.filePath, "utf-8"));
+        } catch {
+          sourceContents.set(
+            meta.runId,
+            `${read.events.map((event) => JSON.stringify(event)).join("\n")}
+`
+          );
+        }
         perRun.push(
           mergeSafetyExtensions(
             runTraceChecks(
@@ -5834,6 +6205,8 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
           )
         );
       }
+      evidenceRunIds = scoped.runIds;
+      evidenceSourceContents = sourceContents;
       result = aggregateSessionCheckResults(perRun, {
         scopeKind: scoped.scopeKind,
         scopeLabel: scoped.scopeLabel,
@@ -5848,6 +6221,26 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
       const read = await openTrace(input3, {
         ...options.format !== void 0 ? { format: options.format } : {}
       });
+      evidenceRead = read;
+      evidenceRunIds = options.run !== void 0 ? [options.run] : read.runs.length === 1 ? [read.runs[0].runId] : read.runs.map((run) => run.runId);
+      if (input3.type === "file") {
+        try {
+          const raw = await readFile(input3.path, "utf-8");
+          evidenceSourceContents = new Map(
+            evidenceRunIds.map((runId) => [runId, raw])
+          );
+        } catch {
+          evidenceSourceContents = void 0;
+        }
+      } else {
+        evidenceSourceContents = new Map(
+          evidenceRunIds.map((runId) => [
+            runId,
+            `${read.events.filter((event) => event.runId === runId).map((event) => JSON.stringify(event)).join("\n")}
+`
+          ])
+        );
+      }
       result = mergeSafetyExtensions(
         runTraceChecks(
           { read },
@@ -5867,7 +6260,7 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
   } catch (error) {
     if (phase === "config") {
       const message = error instanceof Error ? error.message : String(error);
-      const code = message.startsWith("--") ? "AI_CHECK_INVALID_ARGUMENTS" : error instanceof SyntaxError || message.includes("Unsupported check config extension") || message.includes("TypeScript check configs") || message.includes("Config must") || message.includes("checks config") || message.includes("Expected an array") ? "AI_CHECK_INVALID_CONFIG" : "AI_CHECK_CONFIG_LOAD_FAILED";
+      const code = message.startsWith("--") || message.includes("Unknown --preset") ? "AI_CHECK_INVALID_ARGUMENTS" : error instanceof SyntaxError || message.includes("Unsupported check config extension") || message.includes("TypeScript check configs") || message.includes("Config must") || message.includes("checks config") || message.includes("Expected an array") ? "AI_CHECK_INVALID_CONFIG" : "AI_CHECK_CONFIG_LOAD_FAILED";
       result = errorResult(
         code,
         message
@@ -5877,8 +6270,47 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
     }
   }
   process.exitCode = exitCodeFor(result);
+  const failed = result.status !== "pass";
+  if (shouldEmitEvidence(options.evidenceOn, failed)) {
+    try {
+      const runIds = evidenceRunIds.length > 0 ? evidenceRunIds : result.runId !== void 0 ? [result.runId] : ["check"];
+      if (evidenceSourceContents === void 0 && evidenceRead !== void 0) {
+        evidenceSourceContents = new Map(
+          runIds.map((runId) => [
+            runId,
+            `${evidenceRead.events.filter((event) => event.runId === runId).map((event) => JSON.stringify(event)).join("\n")}
+`
+          ])
+        );
+      }
+      let redactionProfile = parseEvidenceProfile(options.evidenceProfile);
+      let evidenceFormat = parseEvidenceFormat(options.evidenceFormat);
+      const outputDir = resolveEvidenceOutputDir(
+        options.evidenceDir,
+        runIds[0] ?? "check"
+      );
+      const written = await writeLocalEvidence({
+        outputDir,
+        runIds,
+        ...evidenceSourceContents !== void 0 ? { sourceContents: evidenceSourceContents } : {},
+        ...options.dir !== void 0 ? { dir: options.dir } : {},
+        failed,
+        checkResultsJson: checkResultToEvidenceJson(result, runIds),
+        summaryText: `Check status: ${result.status}`,
+        redactionProfile,
+        format: evidenceFormat
+      });
+      if (!options.json) {
+        console.log(`Evidence: ${written}`);
+      }
+    } catch (error) {
+      console.error(
+        `[AgentInspect] evidence package skipped: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
   if (options.json) printJson(result);
-  else printHuman(result);
+  else printHuman(result, options);
 }
 
 // packages/viewer/src/html.ts
@@ -6029,7 +6461,7 @@ async function loadSuiteViewerData(options) {
   for (const suiteCase of result.cases) {
     cases.push(await enrichCase(suiteCase, baselinePath));
   }
-  const artifactsDir = path16.join(path16.dirname(result.configPath), ".agent-inspect/suite-runs");
+  const artifactsDir = path18.join(path18.dirname(result.configPath), ".agent-inspect/suite-runs");
   return {
     suiteName: result.suiteName,
     configPath: result.configPath,
@@ -6222,19 +6654,19 @@ function serializeWorkspaceManifest(manifest) {
 }
 var INDEX_DIR_NAME = "index";
 function resolveWorkspaceLocation(cwd = process.cwd()) {
-  const projectRoot = path16.resolve(cwd);
-  const workspaceDir = path16.join(projectRoot, WORKSPACE_DIR_NAME);
+  const projectRoot = path18.resolve(cwd);
+  const workspaceDir = path18.join(projectRoot, WORKSPACE_DIR_NAME);
   return {
     projectRoot,
     workspaceDir,
-    manifestPath: path16.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
+    manifestPath: path18.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
   };
 }
 function resolveInsideWorkspace(workspaceDir, relative) {
-  const base = path16.resolve(workspaceDir);
-  const resolved = path16.resolve(base, relative);
-  const rel = path16.relative(base, resolved);
-  if (rel === "" || rel === "." || !rel.startsWith("..") && !path16.isAbsolute(rel)) {
+  const base = path18.resolve(workspaceDir);
+  const resolved = path18.resolve(base, relative);
+  const rel = path18.relative(base, resolved);
+  if (rel === "" || rel === "." || !rel.startsWith("..") && !path18.isAbsolute(rel)) {
     return resolved;
   }
   throw new Error(
@@ -6303,7 +6735,7 @@ async function createWorkspace(options = {}) {
     created = false;
     adopted = true;
   } else {
-    const project = options.project?.trim() || path16.basename(location.projectRoot) || "workspace";
+    const project = options.project?.trim() || path18.basename(location.projectRoot) || "workspace";
     const traceDirs = detectedExistingTraces ? ["runs", "."] : ["runs"];
     manifest = createDefaultWorkspaceManifest({
       project,
@@ -6442,7 +6874,7 @@ async function doctorWorkspace(location) {
     const abs = resolveInsideWorkspace(location.workspaceDir, rel);
     for (const file of await listJsonl(abs)) {
       try {
-        const s = await stat(path16.join(abs, file));
+        const s = await stat(path18.join(abs, file));
         newestTraceMtime = Math.max(newestTraceMtime, s.mtimeMs);
       } catch {
         checks2.push({ id: "trace-readability", status: "warn", message: `cannot stat ${rel}/${file}` });
@@ -6490,7 +6922,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
       const relPath = `${rel}/${entry}`;
       removed.push(relPath);
       if (!dryRun) {
-        await rm(path16.join(abs, entry), { recursive: true, force: true });
+        await rm(path18.join(abs, entry), { recursive: true, force: true });
       }
     }
   }
@@ -6499,7 +6931,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
 
 // packages/viewer/src/workspace-data.ts
 async function loadWorkspaceViewerData(options) {
-  const cwd = path16.resolve(options.cwd ?? process.cwd());
+  const cwd = path18.resolve(options.cwd ?? process.cwd());
   const location = resolveWorkspaceLocation(cwd);
   const manifestRead = await readWorkspaceManifestFile(location);
   if (!manifestRead.ok || manifestRead.manifest === void 0) {
@@ -6512,7 +6944,7 @@ async function loadWorkspaceViewerData(options) {
   const runs = [];
   for (const rel of manifestRead.manifest.traceDirs) {
     const traceDir = resolveTraceDir({
-      dir: path16.join(location.workspaceDir, rel)
+      dir: path18.join(location.workspaceDir, rel)
     });
     const td = new TraceDirectory({ dir: traceDir });
     const files = await td.list();
@@ -6526,7 +6958,7 @@ async function loadWorkspaceViewerData(options) {
         runId: meta.runId,
         ...meta.name !== void 0 ? { name: meta.name } : {},
         status: meta.status,
-        file: path16.basename(meta.filePath)
+        file: path18.basename(meta.filePath)
       });
     }
   }
@@ -6537,8 +6969,8 @@ async function loadWorkspaceViewerData(options) {
     doctor,
     runs,
     bundleDirs: [
-      path16.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
-      path16.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
+      path18.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
+      path18.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
     ]
   };
 }
@@ -6601,7 +7033,7 @@ function createViewerServer(options = {}) {
           ok: true,
           readOnly: true,
           mode,
-          traceDir: path16.resolve(traceDir)
+          traceDir: path18.resolve(traceDir)
         });
       }
       if (pathname === "/api/suite" && mode === "suite") {
@@ -6630,7 +7062,7 @@ function createViewerServer(options = {}) {
             runId: meta.runId,
             name: meta.name,
             status: meta.status,
-            file: path16.basename(meta.filePath),
+            file: path18.basename(meta.filePath),
             startedAt: meta.startedAt,
             durationMs: meta.durationMs
           }))
@@ -6747,7 +7179,7 @@ function startViewerServer(options = {}) {
       resolve({
         host,
         port: resolvedPort,
-        traceDir: path16.resolve(traceDir),
+        traceDir: path18.resolve(traceDir),
         url: `http://${host}:${resolvedPort}/${modeQuery}`,
         mode
       });
@@ -7118,10 +7550,10 @@ async function evalRun(input3, options = {}) {
     diagnostics: []
   };
 }
-function evidenceForRun(run, path27) {
-  return [{ runId: run.runId, ...path27 !== void 0 ? { path: path27 } : {} }];
+function evidenceForRun(run, path29) {
+  return [{ runId: run.runId, ...path29 !== void 0 ? { path: path29 } : {} }];
 }
-function evidenceForEvent(event, path27) {
+function evidenceForEvent(event, path29) {
   return [
     {
       runId: event.runId,
@@ -7129,7 +7561,7 @@ function evidenceForEvent(event, path27) {
       ...event.parentId !== void 0 ? { parentId: event.parentId } : {},
       kind: event.kind,
       name: event.name,
-      ...path27 !== void 0 ? { path: path27 } : {}
+      ...path29 !== void 0 ? { path: path29 } : {}
     }
   ];
 }
@@ -7287,9 +7719,9 @@ function collectTextFields(nodes, keys, preferredKinds = []) {
 function tokenize(text) {
   return [...text.toLowerCase().matchAll(/[a-z0-9][a-z0-9'-]{2,}/g)].map((match) => match[0].replace(/^['-]+|['-]+$/g, "")).filter((token) => token.length > 2 && !STOP_WORDS.has(token));
 }
-function firstEvidence(fields, run, path27) {
+function firstEvidence(fields, run, path29) {
   const first = fields[0];
-  return first === void 0 ? evidenceForRun(run, path27) : evidenceForEvent(first.node.event, first.path);
+  return first === void 0 ? evidenceForRun(run, path29) : evidenceForEvent(first.node.event, first.path);
 }
 function collectSourceIds(nodes, keys) {
   const wanted = keySet(keys);
@@ -7666,8 +8098,8 @@ function renderEvalMarkdown(result) {
   if (result.findings.length > 0) {
     lines.push("", "## Findings");
     for (const finding of result.findings) {
-      const path27 = finding.evidence[0]?.path;
-      lines.push(`- ${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}`);
+      const path29 = finding.evidence[0]?.path;
+      lines.push(`- ${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}`);
     }
   }
   return `${lines.join("\n")}
@@ -7714,7 +8146,7 @@ function asConfig2(value) {
 }
 async function loadConfig2(configPath) {
   if (configPath === void 0) return {};
-  const extension = path16.extname(configPath);
+  const extension = path18.extname(configPath);
   if (TS_CONFIG_EXTENSIONS2.has(extension)) {
     throw new Error(
       "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
@@ -7723,7 +8155,7 @@ async function loadConfig2(configPath) {
   if (!CONFIG_EXTENSIONS2.has(extension)) {
     throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
   }
-  const absolute = path16.resolve(configPath);
+  const absolute = path18.resolve(configPath);
   if (extension === ".json") {
     const raw = await readFile(absolute, "utf-8");
     return asConfig2(JSON.parse(raw));
@@ -7860,8 +8292,8 @@ function printHuman2(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path27 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}`);
+    const path29 = finding.evidence[0]?.path;
+    console.log(`- ${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}`);
   }
 }
 function readErrorResult2(error) {
@@ -8114,14 +8546,14 @@ function exitCodeFor3(result) {
   return 2;
 }
 function explainFinding(finding, blocksBundle) {
-  const path27 = finding.evidence[0]?.path ?? "(unknown path)";
+  const path29 = finding.evidence[0]?.path ?? "(unknown path)";
   const category = finding.category ?? "structure";
   const confidence = finding.confidence ?? "medium";
   const detector = finding.detector ?? finding.ruleId;
   const action = finding.action ?? "review";
   const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
   return [
-    `  Matched: detector=${detector}; path=${path27}; category=${category}`,
+    `  Matched: detector=${detector}; path=${path29}; category=${category}`,
     `  Why: ${finding.message}`,
     `  Confidence: ${confidence}`,
     `  Redaction: ${redactionHint}`,
@@ -8163,9 +8595,9 @@ function printHuman3(result, explain = false) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path27 = finding.evidence[0]?.path;
+    const path29 = finding.evidence[0]?.path;
     const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
-    console.log(`- ${finding.ruleId}: ${finding.message}${path27 ? ` (${path27})` : ""}${taxonomy}`);
+    console.log(`- ${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}${taxonomy}`);
     if (explain) {
       const blocks = finding.severity === "error" || finding.status === "fail";
       for (const line of explainFinding(finding, blocks)) {
@@ -8279,91 +8711,6 @@ function messageStartsWithDash(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.startsWith("--");
 }
-function validateReporterArtifactPath(options) {
-  const outputDir = path16.resolve(options.outputDir);
-  const diagnostics = [];
-  const rawPath = options.relativePath;
-  if (rawPath.length === 0) {
-    diagnostics.push({
-      code: "artifact_path_empty",
-      severity: "error",
-      message: "Reporter artifact path must not be empty."
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  if (rawPath.includes("\0")) {
-    diagnostics.push({
-      code: "invalid_artifact_path",
-      severity: "error",
-      message: "Reporter artifact path must not contain null bytes.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  if (path16.isAbsolute(rawPath) || path16.win32.isAbsolute(rawPath)) {
-    diagnostics.push({
-      code: "artifact_path_absolute",
-      severity: "error",
-      message: "Reporter artifact path must be relative.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  const normalized = path16.posix.normalize(rawPath.replace(/\\/g, "/"));
-  const segments = normalized.split("/");
-  if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
-    diagnostics.push({
-      code: "artifact_path_escape",
-      severity: "error",
-      message: "Reporter artifact path must stay under the output directory.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  const absolutePath = path16.resolve(outputDir, normalized);
-  const relFromOutput = path16.relative(outputDir, absolutePath);
-  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path16.isAbsolute(relFromOutput)) {
-    diagnostics.push({
-      code: "artifact_path_escape",
-      severity: "error",
-      message: "Reporter artifact path resolved outside the output directory.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  return {
-    ok: true,
-    outputDir,
-    relativePath: normalized,
-    absolutePath,
-    diagnostics
-  };
-}
-var EVIDENCE_CI_ARTIFACT_FILES = [
-  "evidence.html",
-  "evidence.json",
-  "check-results.json",
-  "trace.jsonl"
-];
-function createEvidenceCiArtifacts(options) {
-  const profile = options.redactionProfile;
-  const prefix = options.relativeDir !== void 0 && options.relativeDir.trim() !== "" ? options.relativeDir.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "") : "";
-  const join = (name) => prefix === "" ? name : path16.posix.join(prefix, name);
-  const formatFor = (name) => {
-    if (name.endsWith(".html")) return "html";
-    if (name.endsWith(".jsonl")) return "jsonl";
-    return "json";
-  };
-  return EVIDENCE_CI_ARTIFACT_FILES.map((name) => ({
-    kind: "evidence",
-    path: join(name),
-    format: formatFor(name),
-    redactionProfile: profile,
-    title: `Evidence v2 ${name}`
-  }));
-}
-
-// packages/cli/src/artifacts.ts
 var NOTE = "Generated locally by AgentInspect. Artifacts are best-effort summaries, not compliance or security certification.";
 var SAFETY_RULES = [
   createSafetyRawContentRule(),
@@ -8437,8 +8784,8 @@ function renderCheckSection(result) {
     `Diagnostics: ${result.diagnostics.length}`
   ];
   for (const finding of result.findings.slice(0, 10)) {
-    const path27 = finding.evidence[0]?.path ?? "(run)";
-    lines.push(`- ${finding.ruleId}: ${finding.message} (${path27})`);
+    const path29 = finding.evidence[0]?.path ?? "(run)";
+    lines.push(`- ${finding.ruleId}: ${finding.message} (${path29})`);
   }
   for (const diagnostic3 of result.diagnostics.slice(0, 10)) {
     lines.push(`- ${diagnostic3.code}: ${diagnostic3.message}`);
@@ -8516,8 +8863,8 @@ function renderHtml(trace, check, diff) {
 `;
 }
 async function writeArtifact(outputDir, relativePath, content, files) {
-  const outPath = path16.join(outputDir, relativePath);
-  await mkdir(path16.dirname(outPath), { recursive: true });
+  const outPath = path18.join(outputDir, relativePath);
+  await mkdir(path18.dirname(outPath), { recursive: true });
   await writeFile(outPath, content, "utf-8");
   files.push(relativePath);
 }
@@ -8546,7 +8893,7 @@ function shouldWriteEvidence(options, status) {
   return status === "unsafe" || status === "regression" || status === "unknown" || status === "warning";
 }
 async function artifactsCommand(target, options = {}, stdin = process.stdin) {
-  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path16.resolve(options.outputDir.trim()) : "";
+  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path18.resolve(options.outputDir.trim()) : "";
   if (outputDir === "") {
     console.error("--output-dir is required.");
     process.exitCode = 1;
@@ -8686,8 +9033,8 @@ async function artifactsCommand(target, options = {}, stdin = process.stdin) {
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    await mkdir(path16.dirname(path16.resolve(summaryTarget)), { recursive: true });
-    await appendFile(path16.resolve(summaryTarget), `
+    await mkdir(path18.dirname(path18.resolve(summaryTarget)), { recursive: true });
+    await appendFile(path18.resolve(summaryTarget), `
 ${renderMarkdown(trace, check, diff)}`, "utf-8");
   }
   const manifestFiles = [...files, "manifest.json"].sort((a, b) => a.localeCompare(b));
@@ -8706,10 +9053,10 @@ ${renderMarkdown(trace, check, diff)}`, "utf-8");
       findings: diff?.findings.length ?? 0,
       diagnostics: diff?.diagnostics.length ?? 0
     },
-    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path16.resolve(summaryTarget) } : {},
+    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path18.resolve(summaryTarget) } : {},
     note: NOTE
   };
-  await writeFile(path16.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
+  await writeFile(path18.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
   if (options.json === true) {
     console.log(writeJson3(manifest).trimEnd());
   } else {
@@ -8767,8 +9114,8 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const location = resolveWorkspaceLocation(cwd);
       const manifest = await readWorkspaceManifestFile(location);
       if (manifest.ok && manifest.manifest) {
-        const rel = path16.relative(location.workspaceDir, normalized);
-        if (!rel.startsWith("..") && !path16.isAbsolute(rel)) {
+        const rel = path18.relative(location.workspaceDir, normalized);
+        if (!rel.startsWith("..") && !path18.isAbsolute(rel)) {
           return resolveInsideWorkspace(location.workspaceDir, rel);
         }
       }
@@ -8784,7 +9131,7 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const label = runIds.length === 1 ? sanitizeBundleRunId(runIds[0]) : `multi-${runIds.length}`;
       const base2 = resolveInsideWorkspace(
         location.workspaceDir,
-        path16.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
+        path18.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
       );
       return format === "zip" ? `${base2}.zip` : base2;
     }
@@ -9189,19 +9536,19 @@ async function bundleCommand(runIdArg, options = {}) {
     let sidecarDir = outputDir;
     if (outputDir.toLowerCase().endsWith(".html")) {
       htmlPath = outputDir;
-      sidecarDir = path16.dirname(outputDir);
+      sidecarDir = path18.dirname(outputDir);
     } else {
       await mkdir(outputDir, { recursive: true });
-      htmlPath = path16.join(outputDir, EVIDENCE_HTML_FILENAME);
+      htmlPath = path18.join(outputDir, EVIDENCE_HTML_FILENAME);
       sidecarDir = outputDir;
     }
     await mkdir(sidecarDir, { recursive: true });
     await writeFile(htmlPath, htmlContent, "utf-8");
-    await writeFile(path16.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await writeFile(path18.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     outputPath = htmlPath;
   } else if (format === "zip") {
     const zipPath = outputDir.toLowerCase().endsWith(".zip") ? outputDir : `${outputDir}.zip`;
-    const zipParent = path16.dirname(zipPath);
+    const zipParent = path18.dirname(zipPath);
     await mkdir(zipParent, { recursive: true });
     const entries = [
       ...[...packaged.entries()].map(([relativePath, content]) => ({
@@ -9217,10 +9564,10 @@ async function bundleCommand(runIdArg, options = {}) {
     await mkdir(outputDir, { recursive: true });
     for (const [relativePath, content] of packaged.entries()) {
       const outPath = assertBundlePathContained(outputDir, relativePath);
-      await mkdir(path16.dirname(outPath), { recursive: true });
+      await mkdir(path18.dirname(outPath), { recursive: true });
       await writeFile(outPath, content, "utf-8");
     }
-    await writeFile(path16.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await writeFile(path18.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     if (!files.includes(EVIDENCE_MANIFEST_FILENAME)) {
       files.push(EVIDENCE_MANIFEST_FILENAME);
     }
@@ -9266,7 +9613,7 @@ function writeJson5(value) {
 `;
 }
 async function bundleVerifyCommand(targetPath, options = {}) {
-  const root = path16.resolve(targetPath.trim() || ".");
+  const root = path18.resolve(targetPath.trim() || ".");
   const result = await verifyEvidenceDirectory(root, {
     unexpectedFiles: options.unexpected ?? "fail"
   });
@@ -9299,6 +9646,144 @@ async function bundleVerifyCommand(targetPath, options = {}) {
     process.exitCode = 1;
   }
 }
+function writeJson6(value) {
+  return `${JSON.stringify(value, null, 2)}
+`;
+}
+async function resolveHtmlPath(root) {
+  const candidates = [
+    path18.join(root, "evidence.html"),
+    root.toLowerCase().endsWith(".html") ? root : ""
+  ].filter(Boolean);
+  for (const candidate of candidates) {
+    try {
+      const info = await stat(candidate);
+      if (info.isFile()) return candidate;
+    } catch {
+    }
+  }
+  throw new Error(
+    `No evidence.html found under ${root}. Pass a bundle directory or .html path.`
+  );
+}
+function openLocalFile(filePath) {
+  const fileUrl = pathToFileURL(filePath).href;
+  const platform = process.platform;
+  const command = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : "xdg-open";
+  const args = platform === "darwin" ? [filePath] : platform === "win32" ? ["/c", "start", "", filePath] : [filePath];
+  return new Promise((resolve) => {
+    try {
+      const child = spawn(command, args, {
+        detached: true,
+        stdio: "ignore"
+      });
+      child.on("error", (error) => {
+        resolve({
+          ok: false,
+          detail: `${error instanceof Error ? error.message : String(error)}; open manually: ${fileUrl}`
+        });
+      });
+      child.unref();
+      resolve({ ok: true, detail: fileUrl });
+    } catch (error) {
+      resolve({
+        ok: false,
+        detail: `${error instanceof Error ? error.message : String(error)}; open manually: ${fileUrl}`
+      });
+    }
+  });
+}
+async function bundleOpenCommand(targetPath, options = {}) {
+  const root = path18.resolve(targetPath.trim() || ".");
+  try {
+    await access(root);
+  } catch {
+    const message = `Evidence path not found: ${root}`;
+    if (options.json) {
+      console.log(writeJson6({ ok: false, error: message }).trimEnd());
+    } else {
+      console.error(`[AgentInspect] ${message}`);
+    }
+    process.exitCode = 1;
+    return;
+  }
+  let verifyRoot = root;
+  try {
+    const info = await stat(root);
+    if (info.isFile() && root.toLowerCase().endsWith(".html")) {
+      verifyRoot = path18.dirname(root);
+    }
+  } catch {
+  }
+  if (options.skipVerify !== true) {
+    const result = await verifyEvidenceDirectory(verifyRoot, {
+      unexpectedFiles: "fail"
+    });
+    if (!result.ok) {
+      if (options.json) {
+        console.log(
+          writeJson6({
+            ok: false,
+            error: "Evidence verify failed",
+            root: result.root,
+            issues: result.issues
+          }).trimEnd()
+        );
+      } else {
+        console.error(`Evidence verify: fail (${result.issues.length} issue(s))`);
+        for (const issue of result.issues) {
+          console.error(`- [${issue.severity}] ${issue.code}: ${issue.message}`);
+        }
+        console.error("Fix integrity issues or pass --skip-verify (not recommended).");
+      }
+      process.exitCode = 1;
+      return;
+    }
+  }
+  let htmlPath;
+  try {
+    htmlPath = await resolveHtmlPath(
+      root.toLowerCase().endsWith(".html") ? path18.dirname(root) : root
+    );
+    if (root.toLowerCase().endsWith(".html")) {
+      htmlPath = root;
+    }
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (options.json) {
+      console.log(writeJson6({ ok: false, error: message }).trimEnd());
+    } else {
+      console.error(`[AgentInspect] ${message}`);
+    }
+    process.exitCode = 1;
+    return;
+  }
+  try {
+    await readFile(path18.join(path18.dirname(htmlPath), "evidence.json"), "utf-8");
+  } catch {
+  }
+  const opened = await openLocalFile(htmlPath);
+  if (options.json) {
+    console.log(
+      writeJson6({
+        ok: opened.ok,
+        path: htmlPath,
+        opened: opened.ok,
+        detail: opened.detail
+      }).trimEnd()
+    );
+  } else if (opened.ok) {
+    console.log(`Opened local Evidence: ${htmlPath}`);
+    console.log(`URL: ${opened.detail}`);
+  } else {
+    console.error(`[AgentInspect] Could not open browser automatically.`);
+    console.error(`Open this file locally: ${htmlPath}`);
+    console.error(opened.detail);
+  }
+  if (!opened.ok) {
+    process.exitCode = 0;
+  }
+}
 var CLIENTS = [
   "cursor",
   "claude-code",
@@ -9359,24 +9844,24 @@ function resolveTargetPath(client, projectLocal) {
   if (projectLocal) {
     switch (client) {
       case "cursor":
-        return path16.join(".cursor", "mcp.json");
+        return path18.join(".cursor", "mcp.json");
       case "claude-code":
-        return path16.join(".mcp.json");
+        return path18.join(".mcp.json");
       case "codex":
-        return path16.join(".codex", "config.toml.json");
+        return path18.join(".codex", "config.toml.json");
       case "gemini":
-        return path16.join(".gemini", "settings.json");
+        return path18.join(".gemini", "settings.json");
     }
   }
   switch (client) {
     case "cursor":
-      return path16.join("~", ".cursor", "mcp.json");
+      return path18.join("~", ".cursor", "mcp.json");
     case "claude-code":
-      return path16.join("~", ".claude.json");
+      return path18.join("~", ".claude.json");
     case "codex":
-      return path16.join("~", ".codex", "config.toml");
+      return path18.join("~", ".codex", "config.toml");
     case "gemini":
-      return path16.join("~", ".gemini", "settings.json");
+      return path18.join("~", ".gemini", "settings.json");
   }
 }
 async function mcpConfigureCommand(options) {
@@ -9400,8 +9885,8 @@ async function mcpConfigureCommand(options) {
   ];
   let wrote = false;
   if (!dryRun && projectLocal) {
-    const abs = path16.resolve(targetPath);
-    await mkdir(path16.dirname(abs), { recursive: true });
+    const abs = path18.resolve(targetPath);
+    await mkdir(path18.dirname(abs), { recursive: true });
     await writeFile(abs, `${JSON.stringify(config, null, 2)}
 `, "utf8");
     wrote = true;
@@ -9449,7 +9934,7 @@ function stable7(value) {
     Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable7(record[key])])
   );
 }
-function writeJson6(value) {
+function writeJson7(value) {
   return `${JSON.stringify(stable7(value), null, 2)}
 `;
 }
@@ -9561,23 +10046,23 @@ function readManifestDocument(value) {
   };
 }
 function cwdRelative(filePath) {
-  const relative = path16.relative(process.cwd(), path16.resolve(filePath)).replace(/\\/g, "/");
-  if (relative === "" || relative.startsWith("../") || path16.isAbsolute(relative)) {
-    return path16.basename(filePath);
+  const relative = path18.relative(process.cwd(), path18.resolve(filePath)).replace(/\\/g, "/");
+  if (relative === "" || relative.startsWith("../") || path18.isAbsolute(relative)) {
+    return path18.basename(filePath);
   }
   return relative;
 }
 async function readReporterManifest(filePath) {
-  const absolute = path16.resolve(filePath);
+  const absolute = path18.resolve(filePath);
   const raw = await readFile(absolute, "utf-8");
   const document = readManifestDocument(JSON.parse(raw));
   const manifest = document.manifest;
   const results = manifest.results.map((result) => ({
     testId: safeText(result.testId),
     name: safeText(result.name),
-    ...result.file === void 0 ? {} : { file: safeText(path16.basename(result.file)) },
+    ...result.file === void 0 ? {} : { file: safeText(path18.basename(result.file)) },
     status: result.status,
-    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path16.basename(result.tracePath)) },
+    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path18.basename(result.tracePath)) },
     artifacts: result.artifacts,
     diagnostics: result.diagnostics
   }));
@@ -9716,20 +10201,20 @@ async function ciSummaryCommand(manifestPaths, options = {}) {
     return;
   }
   const markdown = renderMarkdown2(result);
-  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path16.resolve(options.output.trim()) : void 0;
+  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path18.resolve(options.output.trim()) : void 0;
   if (outputPath !== void 0) {
-    await mkdir(path16.dirname(outputPath), { recursive: true });
+    await mkdir(path18.dirname(outputPath), { recursive: true });
     await writeFile(outputPath, markdown, "utf-8");
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    const summaryPath = path16.resolve(summaryTarget);
-    await mkdir(path16.dirname(summaryPath), { recursive: true });
+    const summaryPath = path18.resolve(summaryTarget);
+    await mkdir(path18.dirname(summaryPath), { recursive: true });
     await appendFile(summaryPath, `
 ${markdown}`, "utf-8");
   }
   if (options.json === true) {
-    console.log(writeJson6(result).trimEnd());
+    console.log(writeJson7(result).trimEnd());
   } else if (outputPath !== void 0) {
     console.log(`Wrote AgentInspect CI summary to ${outputPath}`);
     console.log(`Status: ${result.status}`);
@@ -9867,7 +10352,7 @@ console.log("Trace written to .agent-inspect/");
 `;
   }
 }
-function githubWorkflowTemplate() {
+function githubWorkflowTemplate(demoPath) {
   return `name: AgentInspect artifacts
 
 on:
@@ -9884,19 +10369,32 @@ jobs:
         with:
           node-version: "22"
       - run: npm ci
-      - run: npm test
-      - name: Upload AgentInspect traces
+      - name: Run deterministic agent fixture
+        run: node ${demoPath}
+      - name: Trajectory check with Evidence on failure
+        run: >
+          npx --yes agent-inspect check --dir .agent-inspect
+          --preset trajectory
+          --evidence-on fail
+          --evidence-profile share
+          --evidence-format directory
+      - name: Verify share safety
+        if: always()
+        run: npx --yes agent-inspect verify-safe . --dir .agent-inspect
+      - name: Upload AgentInspect traces and Evidence
         if: always()
         uses: actions/upload-artifact@v4
         with:
           name: agent-inspect-traces
-          path: .agent-inspect/**/*.jsonl
+          path: |
+            .agent-inspect/**/*.jsonl
+            .agent-inspect/evidence/**
           if-no-files-found: ignore
 `;
 }
 async function planInit(options = {}) {
   const framework = normalizeFramework(options.framework);
-  const cwd = path16.resolve(options.cwd ?? process.cwd());
+  const cwd = path18.resolve(options.cwd ?? process.cwd());
   const demoPath = framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${framework}-demo.mjs`;
   const candidates = [
     { rel: CONFIG_FILE, content: configTemplate(framework) },
@@ -9906,12 +10404,12 @@ async function planInit(options = {}) {
   if (options.ci === "github") {
     candidates.push({
       rel: ".github/workflows/agent-inspect-artifacts.yml",
-      content: githubWorkflowTemplate()
+      content: githubWorkflowTemplate(demoPath)
     });
   }
   const files = [];
   for (const candidate of candidates) {
-    const abs = path16.join(cwd, candidate.rel);
+    const abs = path18.join(cwd, candidate.rel);
     try {
       await access(abs);
       files.push({
@@ -9932,20 +10430,21 @@ async function writePlannedFiles(plan, cwd, options) {
     if (entry.action === "skip") {
       continue;
     }
-    const abs = path16.join(cwd, entry.path);
+    const abs = path18.join(cwd, entry.path);
     if (options.dryRun) {
       written.push(entry.path);
       continue;
     }
-    await mkdir(path16.dirname(abs), { recursive: true });
-    const content = entry.path === CONFIG_FILE ? configTemplate(plan.framework) : entry.path === GITKEEP ? "" : entry.path.endsWith(".yml") ? githubWorkflowTemplate() : demoTemplate(plan.framework);
+    await mkdir(path18.dirname(abs), { recursive: true });
+    const demoPath = plan.framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${plan.framework}-demo.mjs`;
+    const content = entry.path === CONFIG_FILE ? configTemplate(plan.framework) : entry.path === GITKEEP ? "" : entry.path.endsWith(".yml") ? githubWorkflowTemplate(demoPath) : demoTemplate(plan.framework);
     await writeFile(abs, content, "utf-8");
     written.push(entry.path);
   }
   return written;
 }
 async function initCommand(options = {}) {
-  const cwd = path16.resolve(options.cwd ?? process.cwd());
+  const cwd = path18.resolve(options.cwd ?? process.cwd());
   try {
     const plan = await planInit({ ...options, cwd });
     const toWrite = plan.files.filter((file) => file.action === "create").map((f) => f.path);
@@ -10037,7 +10536,7 @@ function envCheck(name, optional = true) {
   };
 }
 async function traceDirWritable(traceDir) {
-  const resolved = path16.resolve(traceDir);
+  const resolved = path18.resolve(traceDir);
   try {
     await mkdir(resolved, { recursive: true });
     await access(resolved, constants.W_OK);
@@ -10058,10 +10557,10 @@ async function traceDirWritable(traceDir) {
   }
 }
 function readPackageVersionNearEntry(entryPath, packageName) {
-  let dir = path16.dirname(path16.resolve(entryPath));
-  const { root } = path16.parse(dir);
+  let dir = path18.dirname(path18.resolve(entryPath));
+  const { root } = path18.parse(dir);
   while (true) {
-    const candidate = path16.join(dir, "package.json");
+    const candidate = path18.join(dir, "package.json");
     if (existsSync(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync(candidate, "utf8"));
@@ -10072,14 +10571,14 @@ function readPackageVersionNearEntry(entryPath, packageName) {
       }
     }
     if (dir === root) break;
-    const parent = path16.dirname(dir);
+    const parent = path18.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return void 0;
 }
 function resolveInstalledPackage(cwd, name) {
-  const require2 = createRequire(path16.join(cwd, "package.json"));
+  const require2 = createRequire(path18.join(cwd, "package.json"));
   try {
     const entry = require2.resolve(name);
     let version2;
@@ -10177,7 +10676,7 @@ function versionMismatchCheck(cwd) {
   };
 }
 async function runDoctorChecks(options = {}) {
-  const cwd = path16.resolve(options.cwd ?? process2.cwd());
+  const cwd = path18.resolve(options.cwd ?? process2.cwd());
   const traceDir = options.traceDir?.trim() || process2.env.AGENT_INSPECT_TRACE_DIR?.trim() || ".agent-inspect";
   const checks2 = [
     nodeVersionCheck(),
@@ -10417,7 +10916,7 @@ function parsePluginManifest(input3) {
   };
 }
 async function readPluginManifestFile(packageDir) {
-  const manifestPath = path16.join(packageDir, PLUGIN_MANIFEST_FILENAME);
+  const manifestPath = path18.join(packageDir, PLUGIN_MANIFEST_FILENAME);
   try {
     const raw = await readFile(manifestPath, "utf8");
     const parsed = parsePluginManifest(JSON.parse(raw));
@@ -10491,7 +10990,7 @@ function createTraceDirectoryIndexer() {
 // packages/cli/src/plugins.ts
 async function readPackageName(packageDir) {
   try {
-    const raw = await readFile(path16.join(packageDir, "package.json"), "utf8");
+    const raw = await readFile(path18.join(packageDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     return typeof parsed.name === "string" ? parsed.name : void 0;
   } catch {
@@ -10499,7 +10998,7 @@ async function readPackageName(packageDir) {
   }
 }
 async function discoverPlugins(cwd = process.cwd()) {
-  const nodeModules = path16.join(cwd, "node_modules");
+  const nodeModules = path18.join(cwd, "node_modules");
   const found = [];
   let entries;
   try {
@@ -10510,7 +11009,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   for (const entry of entries.sort()) {
     if (entry.startsWith("@")) continue;
     if (!isPluginPackageName(entry)) continue;
-    const packageDir = path16.join(nodeModules, entry);
+    const packageDir = path18.join(nodeModules, entry);
     const manifestRead = await readPluginManifestFile(packageDir);
     found.push({
       packageName: entry,
@@ -10523,7 +11022,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   return found;
 }
 async function validatePluginPackage(packageRef, cwd = process.cwd()) {
-  const packageDir = path16.isAbsolute(packageRef) ? packageRef : path16.join(cwd, "node_modules", packageRef);
+  const packageDir = path18.isAbsolute(packageRef) ? packageRef : path18.join(cwd, "node_modules", packageRef);
   const packageName = await readPackageName(packageDir) ?? packageRef;
   const errors = [];
   const warnings = [];
@@ -10599,7 +11098,7 @@ async function pluginsValidateCommand(packageRef, cwd) {
 }
 var INDEX_FILENAME = ".agent-inspect-index.json";
 function traceIndexPath(traceDir) {
-  return path16.join(traceDir, INDEX_FILENAME);
+  return path18.join(traceDir, INDEX_FILENAME);
 }
 function parseMaxEntries(raw) {
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -10742,7 +11241,7 @@ async function newestTraceMtimeMs2(traceDir) {
     for (const file of files) {
       if (!file.endsWith(".jsonl")) continue;
       try {
-        const s = await stat(path16.join(traceDir, file));
+        const s = await stat(path18.join(traceDir, file));
         if (s.mtimeMs > newest) newest = s.mtimeMs;
       } catch {
       }
@@ -10994,11 +11493,11 @@ function printJson5(value) {
   console.log(JSON.stringify(value, null, 2));
 }
 function resolveCwd(options) {
-  return path16.resolve(options.cwd ?? process.cwd());
+  return path18.resolve(options.cwd ?? process.cwd());
 }
 async function suiteInitCommand(options = {}) {
   const cwd = resolveCwd(options);
-  const configPath = path16.join(cwd, DEFAULT_CONFIG_FILENAME);
+  const configPath = path18.join(cwd, DEFAULT_CONFIG_FILENAME);
   const template = options.template?.trim();
   const suiteConfig = template !== void 0 && template !== "" ? resolveSuiteTemplate(template) : defaultSuiteConfigTemplate();
   if (options.dryRun) {
@@ -11117,13 +11616,13 @@ async function suiteListCommand(options = {}) {
 }
 async function writeSuiteArtifact(result, configOutputDir, options) {
   const cwd = resolveCwd(options);
-  const outputDir = path16.resolve(
+  const outputDir = path18.resolve(
     cwd,
     options.output ?? configOutputDir ?? DEFAULT_SUITE_ARTIFACTS_DIR
   );
   await mkdir(outputDir, { recursive: true });
   const stamp = result.startedAt.replace(/[:.]/g, "-");
-  const filePath = path16.join(outputDir, `${result.suiteName}-${stamp}.json`);
+  const filePath = path18.join(outputDir, `${result.suiteName}-${stamp}.json`);
   await writeFile(filePath, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
   return filePath;
@@ -11181,7 +11680,7 @@ async function loadSuiteResultFromInput(options) {
   if (options.input === void 0 || options.input.trim() === "") {
     throw new Error("Pass --input <suite-run.json> from a prior suite run.");
   }
-  const inputPath = path16.resolve(cwd, options.input.trim());
+  const inputPath = path18.resolve(cwd, options.input.trim());
   const raw = await readFile(inputPath, "utf-8");
   return JSON.parse(raw);
 }
@@ -11215,9 +11714,9 @@ function normalizeMetrics(raw) {
 }
 async function writeArtifacts(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
-  const jsonPath = path16.join(outputDir, "cohort-results.json");
-  const markdownPath = path16.join(outputDir, "cohort-summary.md");
-  const htmlPath = path16.join(outputDir, "cohort-report.html");
+  const jsonPath = path18.join(outputDir, "cohort-results.json");
+  const markdownPath = path18.join(outputDir, "cohort-summary.md");
+  const htmlPath = path18.join(outputDir, "cohort-report.html");
   await writeFile(jsonPath, `${renderCohortReport(result, { format: "json" })}
 `, "utf-8");
   await writeFile(
@@ -11245,7 +11744,7 @@ async function cohortCommand(options = {}) {
     const format = options.format ?? (options.json ? "json" : "markdown");
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts(result, path16.resolve(options.output.trim()));
+      artifacts = await writeArtifacts(result, path18.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(
@@ -11315,11 +11814,11 @@ function parseDuration2(value) {
 async function writeArtifacts2(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
   const paths = {
-    jsonPath: path16.join(outputDir, "gate-results.json"),
-    markdownPath: path16.join(outputDir, "gate-summary.md"),
-    htmlPath: path16.join(outputDir, "gate-report.html"),
-    junitPath: path16.join(outputDir, "junit.xml"),
-    githubPath: path16.join(outputDir, "github-step-summary.md")
+    jsonPath: path18.join(outputDir, "gate-results.json"),
+    markdownPath: path18.join(outputDir, "gate-summary.md"),
+    htmlPath: path18.join(outputDir, "gate-report.html"),
+    junitPath: path18.join(outputDir, "junit.xml"),
+    githubPath: path18.join(outputDir, "github-step-summary.md")
   };
   await writeFile(
     paths.jsonPath,
@@ -11387,7 +11886,57 @@ async function gateCommand(options = {}) {
     const result = await runGate(runs, gateOptions);
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts2(result, path16.resolve(options.output.trim()));
+      artifacts = await writeArtifacts2(result, path18.resolve(options.output.trim()));
+    }
+    const failed = !result.ok;
+    if (shouldEmitEvidence(options.evidenceOn, failed)) {
+      try {
+        const runIds = runs.length > 0 ? runs.map((run) => run.runId) : result.suiteResult?.cases.map((item) => item.runId).filter((id) => typeof id === "string" && id.length > 0) ?? ["gate"];
+        const sourceContents = /* @__PURE__ */ new Map();
+        for (const run of runs) {
+          if (run.filePath) {
+            try {
+              sourceContents.set(run.runId, await readFile(run.filePath, "utf-8"));
+            } catch {
+              sourceContents.set(run.runId, "");
+            }
+          }
+        }
+        const label = runIds[0] ?? "gate";
+        const outputDir = resolveEvidenceOutputDir(
+          options.evidenceDir,
+          `gate-${label}`
+        );
+        const written = await writeLocalEvidence({
+          outputDir,
+          runIds: runIds.length > 0 ? runIds : ["gate"],
+          sourceContents,
+          ...gateOptions.traceDir !== void 0 ? { dir: gateOptions.traceDir } : {},
+          failed,
+          checkResultsJson: `${JSON.stringify(
+            {
+              aggregateStatus: failed ? "UNSAFE" : "SAFE",
+              gate: result
+            },
+            null,
+            2
+          )}
+`,
+          summaryText: renderGateReport(result, { format: "markdown" }),
+          redactionProfile: parseEvidenceProfile(options.evidenceProfile),
+          format: parseEvidenceFormat(options.evidenceFormat)
+        });
+        if (!options.json && format !== "json") {
+          console.log(`Evidence: ${written}`);
+        }
+        if (artifacts !== void 0) {
+          artifacts = { ...artifacts, evidence: written };
+        }
+      } catch (error) {
+        console.error(
+          `[AgentInspect] evidence package skipped: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
     }
     if (options.json || format === "json") {
       console.log(JSON.stringify({ ...result, artifacts: artifacts ?? null }, null, 2));
@@ -11564,6 +12113,23 @@ function createCliProgram() {
     "--circuit <rule>",
     "run optional circuit rules (repeatable): same-tool-repetition, max-retries, ...",
     (value, previous = []) => [...previous, value]
+  ).addOption(
+    new Option("--preset <name>", "additive check preset").choices(["trajectory", "safety", "comprehensive"])
+  ).addOption(
+    new Option(
+      "--evidence-on <mode>",
+      "write local Evidence v2 (fail=on failure, always, never; no upload)"
+    ).choices(["fail", "always", "never"])
+  ).option("--evidence-dir <path>", "local Evidence output directory or base path").addOption(
+    new Option(
+      "--evidence-profile <profile>",
+      "Evidence redaction profile (default share)"
+    ).choices(["local", "share", "strict"])
+  ).addOption(
+    new Option(
+      "--evidence-format <format>",
+      "Evidence output format (default directory)"
+    ).choices(["directory", "html", "zip"])
   ).action((target, opts) => {
     runCommand(() => checkCommand(target, opts));
   });
@@ -11662,6 +12228,9 @@ function createCliProgram() {
   ).option("--json", "print deterministic JSON verify result").action((targetPath, opts) => {
     runCommand(() => bundleVerifyCommand(targetPath, opts));
   });
+  bundleCmd.command("open").description("Verify then open local Evidence HTML in the platform browser (no network)").argument("<path>", "evidence/bundle directory or evidence.html path").option("--skip-verify", "skip integrity verify before open (not recommended)").option("--json", "print deterministic JSON open result").action((targetPath, opts) => {
+    runCommand(() => bundleOpenCommand(targetPath, opts));
+  });
   program.command("ci-summary").description("Summarize local reporter artifact manifests for CI").argument("<manifest...>", "reporter artifact manifest JSON files").option("-o, --output <path>", "write Markdown summary to a local file").option("--github-summary <path>", "append Markdown summary to this local file, e.g. GITHUB_STEP_SUMMARY").option("--json", "print deterministic JSON summary").action((manifest, opts) => {
     runCommand(() => ciSummaryCommand(manifest, opts));
   });
@@ -11941,7 +12510,22 @@ function createCliProgram() {
   ).option("--format <format>", "markdown, json, html, junit, or github", "markdown").option(
     "-o, --output <dir>",
     "write gate-results.json, gate-summary.md, gate-report.html, junit.xml, github-step-summary.md"
-  ).option("--json", "print deterministic JSON result").action((opts) => {
+  ).option("--json", "print deterministic JSON result").addOption(
+    new Option(
+      "--evidence-on <mode>",
+      "write local Evidence v2 (fail=on failure, always, never; no upload)"
+    ).choices(["fail", "always", "never"])
+  ).option("--evidence-dir <path>", "local Evidence output directory or base path").addOption(
+    new Option(
+      "--evidence-profile <profile>",
+      "Evidence redaction profile (default share)"
+    ).choices(["local", "share", "strict"])
+  ).addOption(
+    new Option(
+      "--evidence-format <format>",
+      "Evidence output format (default directory)"
+    ).choices(["directory", "html", "zip"])
+  ).action((opts) => {
     runCommand(() => gateCommand(opts));
   });
   return program;
@@ -11951,9 +12535,9 @@ function isPrimaryModule() {
   if (!entry) return false;
   const selfPath = fileURLToPath(import.meta.url);
   try {
-    return realpathSync(path16.resolve(entry)) === realpathSync(path16.resolve(selfPath));
+    return realpathSync(path18.resolve(entry)) === realpathSync(path18.resolve(selfPath));
   } catch {
-    return path16.resolve(entry) === path16.resolve(selfPath);
+    return path18.resolve(entry) === path18.resolve(selfPath);
   }
 }
 if (isPrimaryModule()) {