agent-inspect 6.17.2 → 6.17.4

package/packages/cli/dist/index.cjs

@@ -2765,7 +2765,12 @@ function countErrorNodes(nodes) {
   return nodes.filter((entry) => entry.node.event.status === "error").length;
 }
 function slowestNode(nodes) {
-  return nodes.filter((entry) => entry.node.event.durationMs !== void 0).sort((a, b) => {
+  return nodes.filter(
+    (entry) => entry.node.event.durationMs !== void 0 && // The RUN boundary spans the whole run, so its duration always dominates
+    // and shadows every real step. Rank actual work nodes only, matching the
+    // stats slowest-step ranking, which never counts the run envelope.
+    entry.node.event.kind !== "RUN"
+  ).sort((a, b) => {
     const delta = (b.node.event.durationMs ?? 0) - (a.node.event.durationMs ?? 0);
     return delta !== 0 ? delta : a.index - b.index;
   })[0];
@@ -6414,8 +6419,11 @@ var init_programmatic = __esm({
 });
 
 // packages/core/src/safety/sensitive-key.ts
+function keyHasExplicitSeparator(value) {
+  return /[_\-.]/.test(value);
+}
 function normalizeSensitiveKey(value) {
-  return value.toLowerCase().replace(/[^a-z0-9_]/g, "");
+  return value.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
 }
 function isTokenCredentialKey(normalized) {
   if (NON_CREDENTIAL_TOKEN_CONFIG_KEYS.has(normalized)) return false;
@@ -6428,6 +6436,7 @@ function isCredentialSensitiveKey(key, sensitiveKeys = DEFAULT_CREDENTIAL_SENSIT
   const normalized = normalizeSensitiveKey(key);
   if (!normalized) return false;
   if (NON_CREDENTIAL_TOKEN_CONFIG_KEYS.has(normalized)) return false;
+  const allowPrefixCompound = keyHasExplicitSeparator(key);
   for (const sensitive of sensitiveKeys) {
     const s = normalizeSensitiveKey(sensitive);
     if (!s) continue;
@@ -6436,7 +6445,8 @@ function isCredentialSensitiveKey(key, sensitiveKeys = DEFAULT_CREDENTIAL_SENSIT
       continue;
     }
     if (normalized === s) return true;
-    if (normalized.endsWith(`_${s}`) || normalized.startsWith(`${s}_`)) return true;
+    if (normalized.endsWith(`_${s}`)) return true;
+    if (allowPrefixCompound && normalized.startsWith(`${s}_`)) return true;
   }
   return false;
 }
@@ -12501,7 +12511,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "6.17.2";
+var version = "6.17.4";
 
 // packages/cli/src/list.ts
 init_advanced();
@@ -16394,8 +16404,11 @@ async function reportCommand(runId, options = {}) {
 init_advanced();
 
 // packages/redact/src/sensitive-key.ts
+function keyHasExplicitSeparator2(value) {
+  return /[_\-.]/.test(value);
+}
 function normalizeSensitiveKey2(value) {
-  return value.toLowerCase().replace(/[^a-z0-9_]/g, "");
+  return value.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
 }
 var NON_CREDENTIAL_TOKEN_CONFIG_KEYS2 = new Set(
   [
@@ -16425,6 +16438,7 @@ function isCredentialSensitiveKey2(key, sensitiveKeys) {
   const normalized = normalizeSensitiveKey2(key);
   if (!normalized) return false;
   if (NON_CREDENTIAL_TOKEN_CONFIG_KEYS2.has(normalized)) return false;
+  const allowPrefixCompound = keyHasExplicitSeparator2(key);
   for (const sensitive of sensitiveKeys) {
     const s = normalizeSensitiveKey2(sensitive);
     if (!s) continue;
@@ -16433,7 +16447,8 @@ function isCredentialSensitiveKey2(key, sensitiveKeys) {
       continue;
     }
     if (normalized === s) return true;
-    if (normalized.endsWith(`_${s}`) || normalized.startsWith(`${s}_`)) return true;
+    if (normalized.endsWith(`_${s}`)) return true;
+    if (allowPrefixCompound && normalized.startsWith(`${s}_`)) return true;
   }
   return false;
 }
@@ -24373,9 +24388,15 @@ function normalizeMetrics2(raw) {
   const parsed = parseCohortMetricList(raw);
   if (parsed.length === 0) return void 0;
   const allowed = new Set(COHORT_METRIC_IDS);
-  return parsed.filter(
-    (item) => allowed.has(item)
-  );
+  const invalid = parsed.filter((metric) => !allowed.has(metric));
+  if (invalid.length > 0) {
+    const valueLabel = invalid.length === 1 ? "value" : "values";
+    const invalidList = invalid.map((metric) => `"${metric}"`).join(", ");
+    throw new Error(
+      `Unsupported cohort --metric ${valueLabel}: ${invalidList}. Valid metrics: ${COHORT_METRIC_IDS.join(", ")}.`
+    );
+  }
+  return parsed;
 }
 async function writeArtifacts(result, outputDir) {
   await promises.mkdir(outputDir, { recursive: true });
@@ -24396,6 +24417,7 @@ async function writeArtifacts(result, outputDir) {
 }
 async function cohortCommand(options = {}) {
   try {
+    const metrics = normalizeMetrics2(options.metric);
     const traceDir = resolveTraceDir({ dir: options.dir });
     const { runs } = await loadSessionRuns(traceDir);
     const result = await analyzeCohort(runs, {
@@ -24404,7 +24426,7 @@ async function cohortCommand(options = {}) {
       candidate: options.candidate,
       cohortKey: options.cohortKey,
       groupBy: options.groupBy,
-      metrics: normalizeMetrics2(options.metric)
+      metrics
     });
     const format = options.format ?? (options.json ? "json" : "markdown");
     let artifacts;