agent-inspect 6.17.0 → 6.17.2

package/packages/cli/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-LFSBMUCD.mjs';
+import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-FXGWXSFV.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
 import path18 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
@@ -12,7 +12,7 @@ import { spawn } from 'child_process';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.17.0";
+var version = "6.17.2";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -3347,7 +3347,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-5J2HPOJ3.mjs');
+    const mod = await import('./src-EW7KW2BK.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -5771,6 +5771,58 @@ function mergeSafetyExtensions(result, read, options) {
 }
 
 // packages/cli/src/check.ts
+var DEFAULT_SELECT = ["run.status"];
+function uniqueSelectIds(ids) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const id of ids) {
+    const trimmed = id.trim();
+    if (trimmed === "" || seen.has(trimmed)) continue;
+    seen.add(trimmed);
+    out.push(trimmed);
+  }
+  return out;
+}
+function cliShorthandSelectIds(options) {
+  const ids = [];
+  if (options.failOnObservation !== void 0 && options.failOnObservation.trim() !== "") {
+    ids.push("outcome.status");
+  }
+  if ((options.requiredTool?.length ?? 0) > 0 || (options.forbiddenTool?.length ?? 0) > 0) {
+    ids.push("tool.usage");
+  }
+  if ((options.allowedModel?.length ?? 0) > 0 || options.maxTotalTokens !== void 0) {
+    ids.push("llm.usage");
+  }
+  if (options.maxDurationMs !== void 0) {
+    ids.push("run.duration");
+  }
+  if (options.maxStepDuration !== void 0) {
+    ids.push("run.maxStepDuration");
+  }
+  if (options.detectStalls === true) {
+    ids.push("run.stall");
+  }
+  return ids;
+}
+function unionCheckSelect(input3) {
+  const explicit = uniqueSelectIds([
+    ...input3.presetSelect ?? [],
+    ...input3.explicitRules ?? [],
+    ...input3.configSelect ?? []
+  ]);
+  if (explicit.length === 0) {
+    return uniqueSelectIds([
+      ...DEFAULT_SELECT,
+      ...(input3.constructedRuleIds ?? []).filter((id) => id !== "run.status")
+    ]);
+  }
+  const constructed = new Set(input3.constructedRuleIds ?? []);
+  const shorthand = (input3.shorthandIds ?? []).filter(
+    (id) => constructed.size === 0 || constructed.has(id)
+  );
+  return uniqueSelectIds([...explicit, ...shorthand]);
+}
 function resolvePreset(preset, context = {}) {
   if (preset === void 0 || preset.trim() === "") return void 0;
   const name = preset.trim().toLowerCase();
@@ -5819,7 +5871,6 @@ function resolvePreset(preset, context = {}) {
     select
   };
 }
-var DEFAULT_SELECT = ["run.status"];
 var CONFIG_EXTENSIONS = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
 var TS_CONFIG_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".mts", ".cts"]);
 function diagnostic(code, message, severity = "error") {
@@ -5911,12 +5962,11 @@ function applyResolvedPreset(config, options, resolved) {
     config: { checks: checks2 },
     options: {
       ...options,
-      ...resolved.requireCompleted ? { requireCompleted: true } : {},
-      rule: [...resolved.select, ...options.rule ?? []]
+      ...resolved.requireCompleted ? { requireCompleted: true } : {}
     }
   };
 }
-function buildRules(config, options) {
+function buildRules(config, options, presetSelect = []) {
   const diagnostics = [];
   const checks2 = normalizeConfig(config);
   const run = checks2.run ?? {};
@@ -6006,21 +6056,15 @@ function buildRules(config, options) {
   if (safety.maxStringLength !== void 0 || safety.maxArrayLength !== void 0 || safety.maxObjectKeys !== void 0 || safety.maxSerializedBytes !== void 0) {
     rules.push(createSafetyOversizedAttributeRule(safety));
   }
-  const select = [
-    ...asStringArray(checks2.select) ?? [],
-    ...options.rule ?? []
-  ];
-  if (select.length === 0) {
-    const auto = new Set(DEFAULT_SELECT);
-    for (const rule of rules) {
-      if (rule.id !== "run.status") auto.add(rule.id);
-    }
-    return {
-      rules,
-      select: [...auto],
-      diagnostics
-    };
-  }
+  const constructedRuleIds = rules.map((rule) => rule.id);
+  const shorthandIds = cliShorthandSelectIds(options);
+  const select = unionCheckSelect({
+    presetSelect,
+    explicitRules: options.rule ?? [],
+    configSelect: asStringArray(checks2.select) ?? [],
+    shorthandIds,
+    constructedRuleIds
+  });
   return {
     rules,
     select,
@@ -6149,7 +6193,7 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
       config = applied.config;
       effectiveOptions = applied.options;
     }
-    const built = buildRules(config, effectiveOptions);
+    const built = buildRules(config, effectiveOptions, resolved?.select ?? []);
     if (built.diagnostics.some((item) => item.severity === "error")) {
       result = errorResult("AI_CHECK_INVALID_CONFIG", "Invalid check configuration.");
       result.diagnostics = [...built.diagnostics];
@@ -11211,7 +11255,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-5J2HPOJ3.mjs');
+    return await import('./src-EW7KW2BK.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(
@@ -12225,11 +12269,17 @@ function createCliProgram() {
   });
   bundleCmd.command("verify").description("Verify Evidence v2 integrity (manifest, hashes, presence)").argument("<path>", "evidence/bundle directory containing evidence.json").addOption(
     new Option("--unexpected <mode>", "policy for files not listed in the manifest").choices(["fail", "warn", "ignore"]).default("fail")
-  ).option("--json", "print deterministic JSON verify result").action((targetPath, opts) => {
-    runCommand(() => bundleVerifyCommand(targetPath, opts));
+  ).option("--json", "print deterministic JSON verify result").action((targetPath, opts, command) => {
+    const merged = {
+      ...opts,
+      ...command.optsWithGlobals?.() ?? {}
+    };
+    const json = opts.json === true || merged.json === true || process.argv.includes("--json");
+    runCommand(() => bundleVerifyCommand(targetPath, { ...opts, json }));
   });
   bundleCmd.command("open").description("Verify then open local Evidence HTML in the platform browser (no network)").argument("<path>", "evidence/bundle directory or evidence.html path").option("--skip-verify", "skip integrity verify before open (not recommended)").option("--json", "print deterministic JSON open result").action((targetPath, opts) => {
-    runCommand(() => bundleOpenCommand(targetPath, opts));
+    const json = opts.json === true || process.argv.includes("--json");
+    runCommand(() => bundleOpenCommand(targetPath, { ...opts, json }));
   });
   program.command("ci-summary").description("Summarize local reporter artifact manifests for CI").argument("<manifest...>", "reporter artifact manifest JSON files").option("-o, --output <path>", "write Markdown summary to a local file").option("--github-summary <path>", "append Markdown summary to this local file, e.g. GITHUB_STEP_SUMMARY").option("--json", "print deterministic JSON summary").action((manifest, opts) => {
     runCommand(() => ciSummaryCommand(manifest, opts));