agent-inspect 6.17.8 → 6.18.0

package/packages/cli/dist/index.cjs

@@ -4,7 +4,7 @@
 var crypto = require('crypto');
 var promises = require('fs/promises');
 var os = require('os');
-var path32 = require('path');
+var path33 = require('path');
 var async_hooks = require('async_hooks');
 var process3 = require('process');
 var tty = require('tty');
@@ -22,7 +22,7 @@ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
 var crypto__default = /*#__PURE__*/_interopDefault(crypto);
 var os__default = /*#__PURE__*/_interopDefault(os);
-var path32__default = /*#__PURE__*/_interopDefault(path32);
+var path33__default = /*#__PURE__*/_interopDefault(path33);
 var process3__default = /*#__PURE__*/_interopDefault(process3);
 var tty__default = /*#__PURE__*/_interopDefault(tty);
 
@@ -866,7 +866,7 @@ function getDefaultTraceDir() {
     if (typeof home !== "string" || home.trim() === "") {
       return FALLBACK_TRACE_DIR;
     }
-    return path32__default.default.join(home, DEFAULT_TRACE_DIR_NAME, RUNS_DIR_NAME);
+    return path33__default.default.join(home, DEFAULT_TRACE_DIR_NAME, RUNS_DIR_NAME);
   } catch {
     return FALLBACK_TRACE_DIR;
   }
@@ -874,11 +874,11 @@ function getDefaultTraceDir() {
 function getTraceFilePath(runId, traceDir) {
   const baseDir = traceDir ?? getDefaultTraceDir();
   let safeId = typeof runId === "string" && runId.trim() !== "" ? runId.trim() : "run_unknown";
-  safeId = path32__default.default.basename(safeId);
+  safeId = path33__default.default.basename(safeId);
   if (safeId === "" || safeId === "." || safeId === "..") {
     safeId = "run_unknown";
   }
-  return path32__default.default.join(baseDir, `${safeId}.jsonl`);
+  return path33__default.default.join(baseDir, `${safeId}.jsonl`);
 }
 function formatError(error) {
   if (error instanceof Error) {
@@ -935,7 +935,7 @@ var init_utils = __esm({
     init_duration();
     DEFAULT_TRACE_DIR_NAME = ".agent-inspect";
     RUNS_DIR_NAME = "runs";
-    FALLBACK_TRACE_DIR = path32__default.default.join(
+    FALLBACK_TRACE_DIR = path33__default.default.join(
       os__default.default.tmpdir(),
       "agent-inspect",
       RUNS_DIR_NAME
@@ -1306,6 +1306,14 @@ var init_inspector = __esm({
   }
 });
 
+// packages/core/src/adapters/preview-capture.ts
+var init_preview_capture = __esm({
+  "packages/core/src/adapters/preview-capture.ts"() {
+    init_redactor();
+    init_redaction_profiles();
+  }
+});
+
 // node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/ansi-styles/index.js
 function assembleStyles() {
   const codes = /* @__PURE__ */ new Map();
@@ -1901,7 +1909,7 @@ var init_trace_directory = __esm({
         this.#dir = resolveTraceDir(options);
       }
       getPath(filename) {
-        return filename ? path32__default.default.join(this.#dir, filename) : this.#dir;
+        return filename ? path33__default.default.join(this.#dir, filename) : this.#dir;
       }
       async list() {
         try {
@@ -1930,7 +1938,7 @@ function parseIsoToMs2(value) {
 }
 async function extractMetadata(filePath, _quickScan) {
   const stats = await promises.stat(filePath);
-  let runIdFromFile = path32__default.default.basename(filePath);
+  let runIdFromFile = path33__default.default.basename(filePath);
   if (runIdFromFile.endsWith(".jsonl")) {
     runIdFromFile = runIdFromFile.slice(0, -".jsonl".length);
   }
@@ -3800,12 +3808,12 @@ function buildCriticalPath(runs, handoffs) {
     handoffs.filter((edge) => edge.confidence === "explicit").map((edge) => edge.from)
   );
   const ordered = [...runs].sort(compareRuns);
-  const path43 = [];
+  const path44 = [];
   const visited = /* @__PURE__ */ new Set();
   const pushRun = (run, confidence, source) => {
     if (visited.has(run.runId)) return;
     visited.add(run.runId);
-    path43.push({
+    path44.push({
       runId: run.runId,
       name: run.name,
       startedAt: run.startedAt,
@@ -3830,7 +3838,7 @@ function buildCriticalPath(runs, handoffs) {
     const confidence = explicitTargets.has(run.runId) || explicitSources.has(run.runId) ? "explicit" : "correlated";
     pushRun(run, confidence, confidence === "explicit" ? "manual" : "inferred");
   }
-  return path43;
+  return path44;
 }
 function metaRunIdMatches(run, token, runById) {
   const meta2 = extractSessionWorkflowMetadata(run.metadata);
@@ -4159,7 +4167,7 @@ var init_summary = __esm({
 });
 function sanitizeBundleRunId(runId) {
   let safe = typeof runId === "string" && runId.trim() !== "" ? runId.trim() : "run_unknown";
-  safe = path32__default.default.basename(safe);
+  safe = path33__default.default.basename(safe);
   safe = safe.replace(/[^a-zA-Z0-9._-]+/g, "_");
   if (safe === "" || safe === "." || safe === "..") {
     safe = "run_unknown";
@@ -4169,12 +4177,12 @@ function sanitizeBundleRunId(runId) {
 function bundleRunAssetRelativePath(runId, extension) {
   const safe = sanitizeBundleRunId(runId);
   const ext = extension.startsWith(".") ? extension : `.${extension}`;
-  return path32__default.default.posix.join("assets", "runs", `${safe}${ext}`);
+  return path33__default.default.posix.join("assets", "runs", `${safe}${ext}`);
 }
 function assertBundlePathContained(outputDir, relativePath) {
-  const base = path32__default.default.resolve(outputDir);
-  const resolved = path32__default.default.resolve(base, relativePath);
-  if (resolved !== base && !resolved.startsWith(base + path32__default.default.sep)) {
+  const base = path33__default.default.resolve(outputDir);
+  const resolved = path33__default.default.resolve(base, relativePath);
+  if (resolved !== base && !resolved.startsWith(base + path33__default.default.sep)) {
     throw new Error(`Bundle path escapes output directory: ${relativePath}`);
   }
   return resolved;
@@ -4184,7 +4192,7 @@ function normalizeBundleOutputPath(out, options) {
   if (trimmed === "") {
     throw new Error("--out requires a non-empty path.");
   }
-  const resolved = path32__default.default.resolve(trimmed);
+  const resolved = path33__default.default.resolve(trimmed);
   if (options?.preserveZipExtension !== true && resolved.toLowerCase().endsWith(".zip")) {
     return resolved.slice(0, -4);
   }
@@ -4193,7 +4201,7 @@ function normalizeBundleOutputPath(out, options) {
 function defaultBundleOutputPath(runIds) {
   const label = runIds.length === 1 ? sanitizeBundleRunId(runIds[0]) : `multi-${runIds.length}`;
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  return path32__default.default.resolve(`agent-inspect-bundle-${label}-${stamp}`);
+  return path33__default.default.resolve(`agent-inspect-bundle-${label}-${stamp}`);
 }
 var init_paths = __esm({
   "packages/core/src/bundle/paths.ts"() {
@@ -4256,7 +4264,7 @@ function assertEvidenceRelativePath(relativePath) {
     throw new Error("Evidence file path must be a non-empty relative path.");
   }
   const trimmed = relativePath.trim().replaceAll("\\", "/");
-  if (path32__default.default.isAbsolute(trimmed) || trimmed.startsWith("/")) {
+  if (path33__default.default.isAbsolute(trimmed) || trimmed.startsWith("/")) {
     throw new Error(`Evidence file path must be relative: ${relativePath}`);
   }
   const parts = trimmed.split("/").filter((part) => part !== "");
@@ -5123,13 +5131,13 @@ function pairSteps(left, right) {
   return pairs;
 }
 function compareLeafSteps(L, R, segments, opts, out) {
-  const path43 = buildPath(segments);
+  const path44 = buildPath(segments);
   if (L.name !== R.name) {
     out.push({
       kind: "structure",
       severity: "warning",
       message: "Step name differs",
-      path: path43,
+      path: path44,
       left: L.name,
       right: R.name
     });
@@ -5139,7 +5147,7 @@ function compareLeafSteps(L, R, segments, opts, out) {
       kind: "step-type",
       severity: "warning",
       message: "Step type differs",
-      path: path43,
+      path: path44,
       left: L.type,
       right: R.type
     });
@@ -5149,7 +5157,7 @@ function compareLeafSteps(L, R, segments, opts, out) {
       kind: "step-status",
       severity: "warning",
       message: "Step status differs",
-      path: path43,
+      path: path44,
       left: L.status,
       right: R.status
     });
@@ -5161,7 +5169,7 @@ function compareLeafSteps(L, R, segments, opts, out) {
       kind: "error",
       severity: "error",
       message: "Step error message differs",
-      path: path43,
+      path: path44,
       left: le || void 0,
       right: re || void 0
     });
@@ -5179,7 +5187,7 @@ function compareLeafSteps(L, R, segments, opts, out) {
         kind: "duration",
         severity: "info",
         message: "Step duration differs",
-        path: path43,
+        path: path44,
         left: ld,
         right: rd
       });
@@ -5192,7 +5200,7 @@ function compareLeafSteps(L, R, segments, opts, out) {
       kind: "metadata",
       severity: "info",
       message: "Step metadata differs",
-      path: path43,
+      path: path44,
       left: L.metadata,
       right: R.metadata
     });
@@ -5204,7 +5212,7 @@ function compareLeafSteps(L, R, segments, opts, out) {
       kind: "output",
       severity: "info",
       message: "Output preview differs",
-      path: path43,
+      path: path44,
       left: L.outputPreview,
       right: R.outputPreview
     });
@@ -5371,11 +5379,11 @@ var init_engine = __esm({
 });
 
 // packages/core/src/diff/renderer.ts
-function formatPath(path43) {
-  if (path43 === void 0 || path43.path.length === 0) {
+function formatPath(path44) {
+  if (path44 === void 0 || path44.path.length === 0) {
     return "(run)";
   }
-  return path43.path.map((s) => s.name).join(" > ");
+  return path44.path.map((s) => s.name).join(" > ");
 }
 function formatValue(v, verbose) {
   if (v === void 0) return "(undefined)";
@@ -5755,11 +5763,11 @@ async function listFilesRecursive(root) {
   async function walk(dir) {
     const entries = await promises.readdir(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const abs = path32__default.default.join(dir, entry.name);
+      const abs = path33__default.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(abs);
       } else if (entry.isFile()) {
-        const rel = path32__default.default.relative(root, abs).split(path32__default.default.sep).join("/");
+        const rel = path33__default.default.relative(root, abs).split(path33__default.default.sep).join("/");
         out.push(rel);
       }
     }
@@ -5769,7 +5777,7 @@ async function listFilesRecursive(root) {
 }
 async function verifyEvidenceDirectory(rootPath, options = {}) {
   const unexpectedMode = options.unexpectedFiles ?? "fail";
-  const root = path32__default.default.resolve(rootPath);
+  const root = path33__default.default.resolve(rootPath);
   const issues = [];
   let rootStat;
   try {
@@ -5799,7 +5807,7 @@ async function verifyEvidenceDirectory(rootPath, options = {}) {
       checkedFiles: 0
     };
   }
-  const manifestPath = path32__default.default.join(root, EVIDENCE_MANIFEST_FILENAME);
+  const manifestPath = path33__default.default.join(root, EVIDENCE_MANIFEST_FILENAME);
   let manifestText;
   try {
     manifestText = await promises.readFile(manifestPath, "utf-8");
@@ -5885,7 +5893,7 @@ async function verifyEvidenceDirectory(rootPath, options = {}) {
       continue;
     }
     listed.add(rel);
-    const abs = path32__default.default.join(root, ...rel.split("/"));
+    const abs = path33__default.default.join(root, ...rel.split("/"));
     let bytes;
     try {
       bytes = await promises.readFile(abs);
@@ -6200,7 +6208,7 @@ function normalizeSuiteConfig(value) {
 }
 async function validateSuiteConfig(config, options) {
   const diagnostics = [];
-  const tracesDir = path32__default.default.resolve(options.configDir, config.traces);
+  const tracesDir = path33__default.default.resolve(options.configDir, config.traces);
   try {
     await promises.access(tracesDir);
   } catch {
@@ -6210,7 +6218,7 @@ async function validateSuiteConfig(config, options) {
   }
   for (const suiteCase of config.cases) {
     if (suiteCase.input !== void 0) {
-      const inputPath = path32__default.default.resolve(options.configDir, suiteCase.input);
+      const inputPath = path33__default.default.resolve(options.configDir, suiteCase.input);
       try {
         await promises.access(inputPath);
       } catch {
@@ -6243,12 +6251,12 @@ async function fileExists(filePath) {
   }
 }
 async function resolveSuiteConfigPath(options = {}) {
-  const cwd = path32__default.default.resolve(options.cwd ?? process.cwd());
+  const cwd = path33__default.default.resolve(options.cwd ?? process.cwd());
   if (options.configPath !== void 0 && options.configPath.trim() !== "") {
-    return path32__default.default.resolve(cwd, options.configPath.trim());
+    return path33__default.default.resolve(cwd, options.configPath.trim());
   }
   for (const name of DEFAULT_SUITE_CONFIG_NAMES) {
-    const candidate = path32__default.default.join(cwd, name);
+    const candidate = path33__default.default.join(cwd, name);
     if (await fileExists(candidate)) return candidate;
   }
   throw new Error(
@@ -6265,7 +6273,7 @@ async function loadSuiteConfig(options = {}) {
       diagnostics: [diagnostic2("AI_SUITE_CONFIG_LOAD_FAILED", message)]
     });
   }
-  const extension = path32__default.default.extname(configPath);
+  const extension = path33__default.default.extname(configPath);
   if (TS_CONFIG_EXTENSIONS.has(extension)) {
     const message = "TypeScript suite configs require an explicit precompiled JavaScript config or future --config-loader support.";
     throw Object.assign(new Error(message), {
@@ -6290,7 +6298,7 @@ async function loadSuiteConfig(options = {}) {
     return {
       config,
       configPath,
-      configDir: path32__default.default.dirname(configPath)
+      configDir: path33__default.default.dirname(configPath)
     };
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
@@ -6340,7 +6348,7 @@ async function exists(filePath) {
 }
 async function resolveSuiteCaseTrace(suiteCase, options) {
   if (suiteCase.trace !== void 0) {
-    const tracePath = path32__default.default.resolve(options.configDir, suiteCase.trace);
+    const tracePath = path33__default.default.resolve(options.configDir, suiteCase.trace);
     if (await exists(tracePath)) {
       return { caseId: suiteCase.id, tracePath, missing: false };
     }
@@ -6356,7 +6364,7 @@ async function resolveSuiteCaseTrace(suiteCase, options) {
   if (await exists(directPath)) {
     return { caseId: suiteCase.id, tracePath: directPath, runId: runKey, missing: false };
   }
-  const nestedPath = path32__default.default.join(options.tracesDir, `${path32__default.default.basename(runKey)}.jsonl`);
+  const nestedPath = path33__default.default.join(options.tracesDir, `${path33__default.default.basename(runKey)}.jsonl`);
   if (await exists(nestedPath)) {
     return { caseId: suiteCase.id, tracePath: nestedPath, runId: runKey, missing: false };
   }
@@ -7106,7 +7114,7 @@ function stripPrefix(name, prefixes) {
   }
   return name;
 }
-function eventEvidence(event, path43) {
+function eventEvidence(event, path44) {
   return {
     runId: event.runId,
     eventId: event.eventId,
@@ -7116,7 +7124,7 @@ function eventEvidence(event, path43) {
     kind: event.kind,
     name: event.name,
     status: event.status,
-    ...path43 ? { path: path43 } : {}
+    ...path44 ? { path: path44 } : {}
   };
 }
 function runEvidence(run) {
@@ -7192,9 +7200,9 @@ function eventEndMs(event) {
 function normalizedKey(value) {
   return value.toLowerCase().replace(/[^a-z0-9_]/g, "");
 }
-function lastPathSegment(path43) {
-  const parts = path43.split(".");
-  return parts[parts.length - 1] ?? path43;
+function lastPathSegment(path44) {
+  const parts = path44.split(".");
+  return parts[parts.length - 1] ?? path44;
 }
 function valueType(value) {
   if (Array.isArray(value)) return "array";
@@ -7208,12 +7216,12 @@ function serializedByteLength(value) {
     return void 0;
   }
 }
-function pushValueEntries(entries, event, value, path43, key, depth = 0) {
-  entries.push({ event, path: path43, key, value });
+function pushValueEntries(entries, event, value, path44, key, depth = 0) {
+  entries.push({ event, path: path44, key, value });
   if (depth >= 8) return;
   if (Array.isArray(value)) {
     for (const [index, item] of value.entries()) {
-      pushValueEntries(entries, event, item, `${path43}.${index}`, String(index), depth + 1);
+      pushValueEntries(entries, event, item, `${path44}.${index}`, String(index), depth + 1);
     }
     return;
   }
@@ -7223,7 +7231,7 @@ function pushValueEntries(entries, event, value, path43, key, depth = 0) {
       entries,
       event,
       value[nestedKey],
-      `${path43}.${nestedKey}`,
+      `${path44}.${nestedKey}`,
       nestedKey,
       depth + 1
     );
@@ -7262,18 +7270,18 @@ function isRawContentKey(key, forbiddenKeys) {
   const normalized = normalizedKey(key);
   return forbiddenKeys.some((forbidden) => normalized === normalizedKey(forbidden));
 }
-function isSafeRawContentMetricPath(path43, key, safePathPrefixes) {
-  const leaf = normalizedKey(key ?? lastPathSegment(path43));
+function isSafeRawContentMetricPath(path44, key, safePathPrefixes) {
+  const leaf = normalizedKey(key ?? lastPathSegment(path44));
   if (!SAFE_USAGE_LEAF_KEYS.has(leaf)) return false;
-  const parts = path43.split(".").filter(Boolean);
+  const parts = path44.split(".").filter(Boolean);
   if (parts.length < 2) return false;
   const parent = parts[parts.length - 2] ?? "";
   const parentNorm = normalizedKey(parent);
   return safePathPrefixes.some((prefix) => parentNorm === normalizedKey(prefix));
 }
-function isRawContentPath(path43, key, forbiddenKeys, safePathPrefixes) {
-  if (isSafeRawContentMetricPath(path43, key, safePathPrefixes)) return false;
-  return isRawContentKey(key ?? lastPathSegment(path43), forbiddenKeys);
+function isRawContentPath(path44, key, forbiddenKeys, safePathPrefixes) {
+  if (isSafeRawContentMetricPath(path44, key, safePathPrefixes)) return false;
+  return isRawContentKey(key ?? lastPathSegment(path44), forbiddenKeys);
 }
 function parentMarkedUnresolved(event) {
   if (booleanAttr(event, [
@@ -7312,9 +7320,9 @@ function eventDurationMs(event) {
 }
 function treeShape(nodes) {
   const lines = [];
-  const visit = (node, path43) => {
-    lines.push(`${path43}:${node.event.kind}:${node.event.name}:${node.event.status ?? "unknown"}`);
-    node.children.forEach((child, index) => visit(child, `${path43}.${index}`));
+  const visit = (node, path44) => {
+    lines.push(`${path44}:${node.event.kind}:${node.event.name}:${node.event.status ?? "unknown"}`);
+    node.children.forEach((child, index) => visit(child, `${path44}.${index}`));
   };
   nodes.forEach((node, index) => visit(node, String(index)));
   return lines;
@@ -7363,9 +7371,9 @@ function retrievalShape(context) {
 function guardrailShape(context) {
   return guardrailEvents(context).map((event) => signalName(event, ["guardrailName", "guardrail", "guardrailId"], ["guardrail:"])).sort((a, b) => a.localeCompare(b));
 }
-function firstEvidenceForKind(context, kind, path43) {
+function firstEvidenceForKind(context, kind, path44) {
   const event = semanticEvents(context).find((candidate) => candidate.kind === kind);
-  return event ? [eventEvidence(event, path43)] : runEvidence(context.selectedRun);
+  return event ? [eventEvidence(event, path44)] : runEvidence(context.selectedRun);
 }
 function baselineDiffFinding(message, evidence, expected, actual) {
   return failFinding("baseline.regression", message, evidence, expected, actual);
@@ -7715,13 +7723,13 @@ function createStructureCycleRule() {
       const seenCycles = /* @__PURE__ */ new Set();
       const findings = [];
       for (const event of [...semanticEvents(context)].sort((a, b) => a.eventId.localeCompare(b.eventId))) {
-        const path43 = [];
+        const path44 = [];
         const seenAt = /* @__PURE__ */ new Map();
         let current = event;
         while (current) {
           const existing = seenAt.get(current.eventId);
           if (existing !== void 0) {
-            const cycle = path43.slice(existing);
+            const cycle = path44.slice(existing);
             const key = cycle.map((item) => item.eventId).sort().join("\0");
             if (!seenCycles.has(key)) {
               seenCycles.add(key);
@@ -7737,8 +7745,8 @@ function createStructureCycleRule() {
             }
             break;
           }
-          seenAt.set(current.eventId, path43.length);
-          path43.push(current);
+          seenAt.set(current.eventId, path44.length);
+          path44.push(current);
           current = current.parentId ? byId.get(current.parentId) : void 0;
         }
       }
@@ -9117,7 +9125,7 @@ function findReaderByFormat(format, readers) {
 }
 async function jsonlFilesInDirectory(dirPath) {
   const entries = await promises.readdir(dirPath, { withFileTypes: true });
-  return entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path32__default.default.join(dirPath, entry.name)).sort((a, b) => a.localeCompare(b));
+  return entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => path33__default.default.join(dirPath, entry.name)).sort((a, b) => a.localeCompare(b));
 }
 async function resolveInput(input3) {
   const cached2 = resolvedInputCache.get(input3);
@@ -10824,7 +10832,7 @@ async function runSuiteCase(suiteCase, config, options) {
 async function runSuite(options = {}) {
   const startedAt = new Date(options.nowMs ?? Date.now()).toISOString();
   const { config, configPath, configDir } = await loadSuiteConfig(options);
-  const tracesDir = path32__default.default.resolve(configDir, config.traces);
+  const tracesDir = path33__default.default.resolve(configDir, config.traces);
   const cases = [];
   const diagnostics = [];
   for (const suiteCase of config.cases) {
@@ -11851,7 +11859,7 @@ function validateOptions(options) {
 }
 function isConfigLoadError(error) {
   if (!(error instanceof Error)) return false;
-  const ext = path32__default.default.extname(error.message);
+  const ext = path33__default.default.extname(error.message);
   if (error.message.includes("Unsupported suite config extension")) return true;
   if (error.message.includes("TypeScript suite configs require")) return true;
   if (error.message.includes("No suite config found")) return true;
@@ -12098,6 +12106,7 @@ var init_advanced = __esm({
     init_inspector();
     init_inspector_runtime();
     init_trace_event_safety();
+    init_preview_capture();
     init_terminal();
     init_utils();
     init_types();
@@ -12245,8 +12254,8 @@ var init_load_sqlite = __esm({
   }
 });
 function resolveIndexDbPath(traceDir, dbPath) {
-  if (dbPath && dbPath.trim() !== "") return path32__default.default.resolve(dbPath);
-  return path32__default.default.join(path32__default.default.resolve(traceDir), INDEX_DB_FILENAME);
+  if (dbPath && dbPath.trim() !== "") return path33__default.default.resolve(dbPath);
+  return path33__default.default.join(path33__default.default.resolve(traceDir), INDEX_DB_FILENAME);
 }
 function str(value) {
   return typeof value === "string" && value !== "" ? value : null;
@@ -12338,7 +12347,7 @@ async function buildIndex(options = {}) {
       warnings.push(`index.unreadable: ${file}`);
     }
   }
-  await promises.mkdir(path32__default.default.dirname(dbPath), { recursive: true });
+  await promises.mkdir(path33__default.default.dirname(dbPath), { recursive: true });
   await promises.rm(dbPath, { force: true });
   const Sqlite = loadBetterSqlite3();
   const db = new Sqlite(dbPath);
@@ -12586,7 +12595,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "6.17.8";
+var version = "6.18.0";
 
 // packages/cli/src/list.ts
 init_advanced();
@@ -13084,6 +13093,16 @@ function filterErrorEvents(events) {
     return false;
   });
 }
+function pruneErrorTree(nodes) {
+  const pruned = [];
+  for (const node of nodes) {
+    const children = pruneErrorTree(node.children);
+    if (node.status === "error" || children.length > 0) {
+      pruned.push({ ...node, children });
+    }
+  }
+  return pruned;
+}
 async function view(runId, options = {}) {
   try {
     const id = typeof runId === "string" && runId.trim() !== "" ? runId.trim() : "";
@@ -13156,11 +13175,44 @@ async function view(runId, options = {}) {
       const errEvents = filterErrorEvents(events);
       if (options.json) {
         console.log(JSON.stringify(errEvents, null, 2));
-      } else if (errEvents.length === 0) {
+        return;
+      }
+      if (errEvents.length === 0) {
         console.log("No errors found in trace");
+        return;
+      }
+      const started2 = events.find(
+        (e) => e.event === "run_started"
+      );
+      const completed2 = events.filter(
+        (e) => e.event === "run_completed"
+      );
+      const last2 = completed2[completed2.length - 1];
+      const status2 = last2 ? last2.status : "running";
+      const durationLine2 = last2 !== void 0 && Number.isFinite(last2.durationMs) ? formatDuration2(last2.durationMs) : "-";
+      const startedTs2 = started2 !== void 0 && Number.isFinite(started2.startTime) ? started2.startTime : started2?.timestamp;
+      const startedLabel2 = startedTs2 !== void 0 ? formatTimestamp(startedTs2) : "-";
+      console.log(`AgentInspect Run: ${started2?.name ?? id}`);
+      console.log(`ID: ${id}`);
+      console.log(`Status: ${status2}`);
+      console.log(`Duration: ${durationLine2}`);
+      console.log(`Started: ${startedLabel2}`);
+      console.log("");
+      console.log("Error Tree:");
+      const pruned = pruneErrorTree(buildStepTree(events));
+      if (pruned.length === 0) {
+        if (last2?.status === "error") {
+          console.log(
+            renderErrorLine(
+              last2.error ?? { message: "Run completed with error status" },
+              0
+            )
+          );
+        } else {
+          console.log("No error steps recorded");
+        }
       } else {
-        console.log("Error events");
-        console.log(JSON.stringify(errEvents, null, 2));
+        printStepTree(pruned, 0, options.verbose === true);
       }
       return;
     }
@@ -15615,9 +15667,9 @@ Trace directory: ${traceDir}`);
     process.exitCode = 1;
   }
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path32__default.default.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path33__default.default.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await promises.mkdir(path32__default.default.dirname(outPath), { recursive: true });
+    await promises.mkdir(path33__default.default.dirname(outPath), { recursive: true });
     await promises.writeFile(outPath, result.content, "utf-8");
     const vlabel = validation !== void 0 ? validation.ok ? "ok" : "failed" : "skipped";
     console.log(`Wrote ${result.fileExtension} export to ${outPath} (validation: ${vlabel})`);
@@ -15976,7 +16028,7 @@ function indexedToMetadata(row, traceDir) {
     endedAt: row.endedAt ?? void 0,
     durationMs: row.durationMs ?? void 0,
     eventCount: 0,
-    filePath: path32__default.default.join(traceDir, row.file),
+    filePath: path33__default.default.join(traceDir, row.file),
     fileSize: 0,
     createdAt: new Date(row.mtimeMs)
   };
@@ -16458,9 +16510,9 @@ async function reportCommand(runId, options = {}) {
     ...options.section ? { section: options.section } : {}
   });
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path32__default.default.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path33__default.default.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await promises.mkdir(path32__default.default.dirname(outPath), { recursive: true });
+    await promises.mkdir(path33__default.default.dirname(outPath), { recursive: true });
     await promises.writeFile(outPath, result.content, "utf-8");
     console.log(`Wrote ${result.fileExtension} report to ${outPath}`);
   }
@@ -16658,8 +16710,8 @@ function passesLuhn(value) {
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var EPOCH_MS_RE = /^1[0-9]{12}$/;
 var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
-function pathSuggestsNonCard(path43) {
-  const normalized = path43.toLowerCase().replace(/[^a-z0-9._]/g, "");
+function pathSuggestsNonCard(path44) {
+  const normalized = path44.toLowerCase().replace(/[^a-z0-9._]/g, "");
   return /(^|\.)(tokenusage|usage)(\.|$)/.test(normalized) || /(startedat|endedat|durationms|timestamp|createdat|updatedat)(\.|$)/.test(normalized) || /(^|\.)(runid|traceid|spanid|eventid|sessionid|userid|parentid|requestid|correlationid)(\.|$)/.test(
     normalized
   ) || /(^|\.)ts(\.|$)/.test(normalized);
@@ -16855,17 +16907,17 @@ function applyRule(rule, value, replacement) {
   }
   return value;
 }
-function childPath(path43, key) {
+function childPath(path44, key) {
   if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)) {
-    return path43 ? `${path43}.${key}` : key;
+    return path44 ? `${path44}.${key}` : key;
   }
-  return `${path43 || "$"}[${JSON.stringify(key)}]`;
+  return `${path44 || "$"}[${JSON.stringify(key)}]`;
 }
-function indexPath(path43, index) {
-  return `${path43 || "$"}[${index}]`;
+function indexPath(path44, index) {
+  return `${path44 || "$"}[${index}]`;
 }
-function makeFinding(path43, detector, action, matchKind, severity = "warning", preview) {
-  return preview === void 0 ? { path: path43, detector, action, severity, matchKind } : { path: path43, detector, action, severity, matchKind, preview };
+function makeFinding(path44, detector, action, matchKind, severity = "warning", preview) {
+  return preview === void 0 ? { path: path44, detector, action, severity, matchKind } : { path: path44, detector, action, severity, matchKind, preview };
 }
 function createRedactionProfile(profile = "local") {
   switch (profile) {
@@ -16934,11 +16986,11 @@ var Redactor2 = class {
   #recordFinding(state, finding) {
     if (this.#collectFindings) state.findings.push(finding);
   }
-  #redactValue(value, key, path43, depth, state) {
+  #redactValue(value, key, path44, depth, state) {
     if (depth > this.#maxDepth) {
       this.#recordFinding(
         state,
-        makeFinding(path43, "structure.maxDepth", "truncate", "value", "warning")
+        makeFinding(path44, "structure.maxDepth", "truncate", "value", "warning")
       );
       return "[Truncated]";
     }
@@ -16947,19 +16999,19 @@ var Redactor2 = class {
       if (rule) {
         this.#recordFinding(
           state,
-          makeFinding(path43, `key.${rule.key}`, actionForRule(rule), "key", "warning")
+          makeFinding(path44, `key.${rule.key}`, actionForRule(rule), "key", "warning")
         );
         return applyRule(rule, value, this.#replacement);
       }
     }
     for (const detector of this.#detectors) {
-      const detections = detector.detect({ path: path43, key, value });
+      const detections = detector.detect({ path: path44, key, value });
       for (const detection of detections) {
         const action = detection.action ?? "replace";
         this.#recordFinding(
           state,
           makeFinding(
-            path43,
+            path44,
             detector.id,
             action,
             detection.matchKind ?? detector.matchKind ?? "custom",
@@ -16977,7 +17029,7 @@ var Redactor2 = class {
       const out = [];
       state.seen.set(value, out);
       value.forEach((item, index) => {
-        out[index] = this.#redactValue(item, void 0, indexPath(path43, index), depth + 1, state);
+        out[index] = this.#redactValue(item, void 0, indexPath(path44, index), depth + 1, state);
       });
       return out;
     }
@@ -16989,7 +17041,7 @@ var Redactor2 = class {
         out[entryKey] = this.#redactValue(
           entryValue,
           entryKey,
-          childPath(path43 === "$" ? "" : path43, entryKey),
+          childPath(path44 === "$" ? "" : path44, entryKey),
           depth + 1,
           state
         );
@@ -17005,6 +17057,233 @@ function createRedactor(options) {
 function redact(value, options) {
   return createRedactor(options).redact(value);
 }
+var REDACTION_POLICY_LIMITS = {
+  maxExtraKeys: 64,
+  maxKeyLength: 64,
+  maxPatterns: 32,
+  maxPatternLength: 128,
+  maxPatternIdLength: 64,
+  maxTypedQuantifier: 64
+};
+var SAFE_TYPED_PATTERN = /^[A-Za-z0-9_@./:=<>\-[\]()|+*?{},\\\s^$]+$/;
+function isRecord16(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function rejectRemotePolicyPath(policyPath) {
+  const trimmed = policyPath.trim();
+  if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) {
+    throw new Error(
+      `--policy must be a local JSON file path (got a URL-like value). Remote policy fetch is not supported.`
+    );
+  }
+}
+function parseSeverity(value, label) {
+  if (value === void 0) return "error";
+  if (value === "info" || value === "warning" || value === "error") return value;
+  throw new Error(`${label} severity must be info, warning, or error.`);
+}
+function validateExtraKey(key, index) {
+  const label = `extraKeys[${index}]`;
+  if (key.length === 0) throw new Error(`${label} must be a non-empty string.`);
+  if (key.length > REDACTION_POLICY_LIMITS.maxKeyLength) {
+    throw new Error(
+      `${label} exceeds max length ${REDACTION_POLICY_LIMITS.maxKeyLength}.`
+    );
+  }
+  if (!/^[A-Za-z_][A-Za-z0-9_.-]*$/.test(key)) {
+    throw new Error(
+      `${label} must be an identifier-like key (letters, digits, _, ., -).`
+    );
+  }
+  return key;
+}
+function assertBoundedTypedPattern(pattern, label) {
+  if (pattern.length === 0) throw new Error(`${label} must be non-empty.`);
+  if (pattern.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
+    throw new Error(
+      `${label} exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
+    );
+  }
+  if (!SAFE_TYPED_PATTERN.test(pattern)) {
+    throw new Error(
+      `${label} contains unsupported characters for bounded typed patterns.`
+    );
+  }
+  if (/\(\?/.test(pattern) || /\\[1-9]/.test(pattern)) {
+    throw new Error(
+      `${label} rejects lookaround, backreferences, and nested quantifiers.`
+    );
+  }
+  if (/\([^)]*[+*{][^)]*\)[+*{]/.test(pattern) || /\[[^\]]*[+*{][^\]]*\][+*{]/.test(pattern)) {
+    throw new Error(`${label} rejects nested quantifiers.`);
+  }
+  if (/\.[*+]/.test(pattern) || /[*+]\{/.test(pattern)) {
+    throw new Error(`${label} rejects unbounded .* / .+ style quantifiers.`);
+  }
+  for (const match of pattern.matchAll(/\{(\d+)(?:,(\d*))?\}/g)) {
+    const min = Number(match[1]);
+    const maxRaw = match[2];
+    const max = maxRaw === void 0 || maxRaw === "" ? min : Number(maxRaw);
+    if (!Number.isFinite(min) || !Number.isFinite(max) || min > REDACTION_POLICY_LIMITS.maxTypedQuantifier || max > REDACTION_POLICY_LIMITS.maxTypedQuantifier) {
+      throw new Error(
+        `${label} quantifiers must be <= ${REDACTION_POLICY_LIMITS.maxTypedQuantifier}.`
+      );
+    }
+  }
+}
+function compilePatternDetector(input3, index) {
+  const label = `patterns[${index}]`;
+  if (!isRecord16(input3)) throw new Error(`${label} must be an object.`);
+  const idRaw = input3.id;
+  if (typeof idRaw !== "string" || idRaw.trim() === "") {
+    throw new Error(`${label}.id must be a non-empty string.`);
+  }
+  const id = idRaw.trim();
+  if (id.length > REDACTION_POLICY_LIMITS.maxPatternIdLength) {
+    throw new Error(
+      `${label}.id exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternIdLength}.`
+    );
+  }
+  if (!/^[A-Za-z][A-Za-z0-9._-]*$/.test(id)) {
+    throw new Error(`${label}.id must be an identifier-like detector id.`);
+  }
+  const type = input3.type;
+  if (type !== "literal" && type !== "prefix" && type !== "typed") {
+    throw new Error(`${label}.type must be literal, prefix, or typed.`);
+  }
+  const severity = parseSeverity(input3.severity, label);
+  let source;
+  if (type === "typed") {
+    if (typeof input3.pattern !== "string") {
+      throw new Error(`${label}.pattern must be a string for typed patterns.`);
+    }
+    assertBoundedTypedPattern(input3.pattern, `${label}.pattern`);
+    source = input3.pattern;
+  } else {
+    if (typeof input3.value !== "string") {
+      throw new Error(`${label}.value must be a string for ${type} patterns.`);
+    }
+    if (input3.value.length === 0) {
+      throw new Error(`${label}.value must be non-empty.`);
+    }
+    if (input3.value.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
+      throw new Error(
+        `${label}.value exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
+      );
+    }
+    const escaped = escapeRegExp(input3.value);
+    source = type === "prefix" ? `^${escaped}` : escaped;
+  }
+  let regex;
+  try {
+    regex = new RegExp(source);
+  } catch (error) {
+    throw new Error(
+      `${label} failed to compile: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  return {
+    id: `policy.${id}`,
+    severity,
+    matchKind: "custom",
+    detect({ value }) {
+      if (typeof value !== "string") return [];
+      regex.lastIndex = 0;
+      return regex.test(value) ? [{ action: "replace", severity, matchKind: "custom" }] : [];
+    }
+  };
+}
+function compileRedactionPolicy(raw, policyPath) {
+  if (!isRecord16(raw)) {
+    throw new Error(`Redaction policy must be a JSON object (${policyPath}).`);
+  }
+  const diagnostics = [];
+  if (raw.version !== void 0 && raw.version !== 1) {
+    throw new Error(`Unsupported redaction policy version (supported: 1).`);
+  }
+  const extraKeysRaw = raw.extraKeys;
+  const extraKeys = [];
+  if (extraKeysRaw !== void 0) {
+    if (!Array.isArray(extraKeysRaw)) {
+      throw new Error(`extraKeys must be an array of strings.`);
+    }
+    if (extraKeysRaw.length > REDACTION_POLICY_LIMITS.maxExtraKeys) {
+      throw new Error(
+        `extraKeys exceeds max count ${REDACTION_POLICY_LIMITS.maxExtraKeys}.`
+      );
+    }
+    for (let i = 0; i < extraKeysRaw.length; i += 1) {
+      const key = extraKeysRaw[i];
+      if (typeof key !== "string") {
+        throw new Error(`extraKeys[${i}] must be a string.`);
+      }
+      extraKeys.push(validateExtraKey(key, i));
+    }
+  }
+  const patternsRaw = raw.patterns;
+  const detectors = [];
+  if (patternsRaw !== void 0) {
+    if (!Array.isArray(patternsRaw)) {
+      throw new Error(`patterns must be an array.`);
+    }
+    if (patternsRaw.length > REDACTION_POLICY_LIMITS.maxPatterns) {
+      throw new Error(
+        `patterns exceeds max count ${REDACTION_POLICY_LIMITS.maxPatterns}.`
+      );
+    }
+    const seenIds = /* @__PURE__ */ new Set();
+    for (let i = 0; i < patternsRaw.length; i += 1) {
+      const detector = compilePatternDetector(
+        patternsRaw[i],
+        i
+      );
+      if (seenIds.has(detector.id)) {
+        throw new Error(`Duplicate pattern id "${detector.id}".`);
+      }
+      seenIds.add(detector.id);
+      detectors.push(detector);
+    }
+  }
+  if (extraKeys.length === 0 && detectors.length === 0) {
+    diagnostics.push({
+      code: "AI_POLICY_EMPTY",
+      message: "Redaction policy contained no extraKeys or patterns."
+    });
+  }
+  return {
+    path: policyPath,
+    extraKeys,
+    detectors,
+    diagnostics
+  };
+}
+async function loadRedactionPolicy(policyPath) {
+  rejectRemotePolicyPath(policyPath);
+  const resolved = path33__default.default.resolve(policyPath);
+  let text;
+  try {
+    text = await promises.readFile(resolved, "utf-8");
+  } catch (error) {
+    throw new Error(
+      `Failed to read --policy file "${resolved}": ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error) {
+    throw new Error(
+      `Invalid JSON in --policy file "${resolved}": ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  return compileRedactionPolicy(parsed, resolved);
+}
+
+// packages/core/src/entries/checks.ts
+init_checks2();
 
 // packages/cli/src/trace-input.ts
 init_advanced();
@@ -17036,12 +17315,19 @@ async function inputFromTarget(target, options, stdin) {
   return { type: "file", path: runPath };
 }
 
-// packages/cli/src/redact.ts
-function parseRedactionProfile3(value) {
-  if (value === void 0 || value === "local" || value === "share" || value === "strict") {
-    return value ?? "share";
+// packages/cli/src/safety.ts
+var BEST_EFFORT_NOTE = "Best-effort local safety verification only; not a compliance, privacy, security, or regulatory certification.";
+var DEFAULT_MAX_STRING_LENGTH = 16384;
+var DEFAULT_MAX_ARRAY_LENGTH = 1e3;
+var DEFAULT_MAX_OBJECT_KEYS = 200;
+var DEFAULT_MAX_SERIALIZED_BYTES = 128 * 1024;
+function parseLimit3(value, label) {
+  if (value === void 0) return void 0;
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed) || parsed < 0) {
+    throw new Error(`${label} must be a non-negative number.`);
   }
-  throw new Error(`Unsupported --profile "${value}". Use local, share, or strict.`);
+  return parsed;
 }
 function stable2(value) {
   if (Array.isArray(value)) return value.map(stable2);
@@ -17051,103 +17337,585 @@ function stable2(value) {
     Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable2(record[key])])
   );
 }
-function isMissingFileError3(error) {
-  return error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT";
+function safetyDiagnostic(code, message, severity = "error") {
+  return { code, message, severity };
 }
-async function contentFromTarget(target, options, stdin) {
-  if (target === "-") {
-    return { content: await readStdin(stdin), source: "stdin" };
-  }
-  try {
-    const stats2 = await promises.stat(target);
-    if (stats2.isDirectory()) {
-      throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
-    }
-    return { content: await promises.readFile(target, "utf-8"), source: target };
-  } catch (error) {
-    if (!isMissingFileError3(error)) throw error;
-  }
-  const runPath = getTraceFilePath(target, resolveTraceDir({ dir: options.dir }));
-  const stats = await promises.stat(runPath);
-  if (stats.isDirectory()) {
-    throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
-  }
-  return { content: await promises.readFile(runPath, "utf-8"), source: runPath };
+function warningDiagnostics(warnings, unsupportedFields) {
+  return [
+    ...warnings.map(
+      (warning) => safetyDiagnostic(
+        warning.code,
+        warning.message,
+        warning.severity === "error" ? "error" : "warning"
+      )
+    ),
+    ...unsupportedFields.map(
+      (field) => safetyDiagnostic(
+        "unsupported_field",
+        `Reader reported unsupported field: ${field}`,
+        "warning"
+      )
+    )
+  ];
 }
-function redactJsonText(content, profile) {
-  const parsed = JSON.parse(content);
-  const result = redact(parsed, { profile });
+function diagnosticFromCheck(item) {
+  return safetyDiagnostic(item.code, item.message, item.severity);
+}
+function statusFrom(findings, diagnostics) {
+  if (diagnostics.some((item) => item.severity === "error")) return "UNKNOWN";
+  if (findings.some((item) => item.severity === "error")) return "UNSAFE";
+  if (diagnostics.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
+  if (findings.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
+  return "SAFE";
+}
+function resultFromParts(parts) {
+  const findings = [...parts.findings ?? []];
+  const diagnostics = [...parts.diagnostics ?? []];
+  const warnings = [...parts.warnings ?? []];
+  const unsupportedFields = [...parts.unsupportedFields ?? []];
+  const status = parts.status ?? statusFrom(findings, diagnostics);
   return {
-    content: `${JSON.stringify(result.value, null, 2)}
-`,
-    findings: result.findings
+    ok: status === "SAFE" || status === "SAFE WITH WARNINGS",
+    command: parts.command,
+    status,
+    format: parts.format,
+    ...parts.runId !== void 0 ? { runId: parts.runId } : {},
+    summary: {
+      findings: findings.length,
+      warnings: diagnostics.filter((item) => item.severity === "warning").length + findings.filter((item) => item.severity === "warning").length,
+      errors: diagnostics.filter((item) => item.severity === "error").length + findings.filter((item) => item.severity === "error").length
+    },
+    findings,
+    diagnostics,
+    warnings,
+    unsupportedFields,
+    note: BEST_EFFORT_NOTE,
+    ...parts.sourceAssessment !== void 0 ? { sourceAssessment: parts.sourceAssessment } : {},
+    ...parts.artifactAssessment !== void 0 ? { artifactAssessment: parts.artifactAssessment } : {},
+    ...parts.redactionSummary !== void 0 ? { redactionSummary: parts.redactionSummary } : {}
   };
 }
-function redactJsonlText(content, profile) {
-  const lines = content.split(/\r?\n/);
-  const out = [];
-  const findings = [];
-  for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index] ?? "";
-    if (line.trim() === "") continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch {
-      throw new Error(`Input is not valid JSON or JSONL at line ${index + 1}.`);
-    }
-    const result = redact(parsed, { profile });
-    out.push(JSON.stringify(result.value));
-    findings.push(
-      ...result.findings.map((finding) => ({
-        ...finding,
-        path: `line:${index + 1}:${finding.path}`
-      }))
-    );
-  }
+function layerFromResult(result) {
   return {
-    content: out.length === 0 ? "" : `${out.join("\n")}
-`,
-    findings
+    status: result.status,
+    summary: result.summary,
+    findings: result.findings
   };
 }
-function redactDocument(content, profile) {
-  const trimmed = content.trim();
-  if (trimmed.startsWith("{")) {
-    try {
-      const parsed = JSON.parse(trimmed);
-      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed)) {
-        return redactJsonlText(content, profile);
-      }
-    } catch {
-    }
+function readErrorResult(command, error) {
+  if (error instanceof TraceReadError) {
+    const code = error.code === "unsupported_format" ? "AI_SAFETY_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_SAFETY_AMBIGUOUS_FORMAT" : "AI_SAFETY_TRACE_UNREADABLE";
+    return resultFromParts({
+      command,
+      format: "unknown",
+      diagnostics: [safetyDiagnostic(code, error.message)],
+      warnings: error.warnings
+    });
   }
+  return resultFromParts({
+    command,
+    format: "unknown",
+    diagnostics: [
+      safetyDiagnostic(
+        "AI_SAFETY_TRACE_UNREADABLE",
+        error instanceof Error ? error.message : String(error)
+      )
+    ]
+  });
+}
+function invalidArgumentResult(command, error) {
+  return resultFromParts({
+    command,
+    format: "unknown",
+    diagnostics: [
+      safetyDiagnostic(
+        "AI_SAFETY_INVALID_ARGUMENTS",
+        error instanceof Error ? error.message : String(error)
+      )
+    ]
+  });
+}
+function buildSafetyRules(options) {
+  const maxStringLength2 = parseLimit3(options.maxStringLength, "--max-string-length") ?? DEFAULT_MAX_STRING_LENGTH;
+  const maxArrayLength = parseLimit3(options.maxArrayLength, "--max-array-length") ?? DEFAULT_MAX_ARRAY_LENGTH;
+  const maxObjectKeys = parseLimit3(options.maxObjectKeys, "--max-object-keys") ?? DEFAULT_MAX_OBJECT_KEYS;
+  const maxSerializedBytes = parseLimit3(options.maxSerializedBytes, "--max-serialized-bytes") ?? DEFAULT_MAX_SERIALIZED_BYTES;
+  return [
+    createSafetyRawContentRule(),
+    createSafetyRedactionRule(),
+    createSafetySecretPatternRule(),
+    createSafetyOversizedAttributeRule({
+      maxStringLength: maxStringLength2,
+      maxArrayLength,
+      maxObjectKeys,
+      maxSerializedBytes
+    })
+  ];
+}
+function flattenNodes2(nodes) {
+  return nodes.flatMap((node) => [
+    node,
+    ...flattenNodes2(
+      node.children
+    )
+  ]);
+}
+function detectorSeverity(finding) {
+  return finding.severity;
+}
+function classifyRedactionDetector(detector) {
+  if (detector === "value.creditCard" || detector === "value.email" || detector === "value.phone") {
+    return { category: "personal-data", confidence: "high" };
+  }
+  if (detector === "value.ipv4" || detector === "value.ipv6") {
+    return { category: "identifier", confidence: "medium" };
+  }
+  if (detector.startsWith("value.") && (detector.includes("Token") || detector.includes("Key") || detector.includes("jwt") || detector.includes("authorization") || detector.includes("bearer") || detector.includes("cookie") || detector.includes("privateKey") || detector.includes("github") || detector.includes("aws") || detector.includes("provider"))) {
+    return { category: "credential", confidence: "high" };
+  }
+  if (detector.startsWith("key.")) {
+    return { category: "credential", confidence: "medium" };
+  }
+  return { category: "credential", confidence: "medium" };
+}
+function redactionOptionsFromPolicy(policy) {
+  if (policy === void 0) return {};
+  return {
+    ...policy.extraKeys.length > 0 ? { extraKeys: [...policy.extraKeys] } : {},
+    ...policy.detectors.length > 0 ? { detectors: [...policy.detectors] } : {}
+  };
+}
+function redactionDetectorFindings(read, runId, policy) {
+  const runs = runId === void 0 ? read.runs : read.runs.filter((run) => run.runId === runId);
+  const out = [];
+  const policyOptions = redactionOptionsFromPolicy(policy);
+  for (const run of runs) {
+    for (const node of flattenNodes2(run.children)) {
+      const attrs = node.event.attributes;
+      if (attrs === void 0) continue;
+      const result = createRedactor({
+        profile: "share",
+        ...policyOptions
+      }).redact(attrs);
+      for (const finding of result.findings) {
+        if (finding.action === "keep") continue;
+        const taxonomy = classifyRedactionDetector(finding.detector);
+        out.push({
+          ruleId: "safety.redactDetector",
+          severity: detectorSeverity(finding),
+          status: finding.severity === "error" ? "fail" : "warning",
+          message: `Redaction detector ${finding.detector} matched ${finding.matchKind} at ${finding.path}.`,
+          expected: "redacted trace content",
+          actual: finding.detector,
+          evidence: [
+            {
+              runId: node.event.runId,
+              eventId: node.event.eventId,
+              ...node.event.parentId !== void 0 ? { parentId: node.event.parentId } : {},
+              kind: node.event.kind,
+              name: node.event.name,
+              ...node.event.status !== void 0 ? { status: node.event.status } : {},
+              path: `attributes.${finding.path.replace(/^\$\.?/, "")}`
+            }
+          ],
+          category: taxonomy.category,
+          confidence: taxonomy.confidence,
+          detector: finding.detector,
+          action: finding.action
+        });
+      }
+    }
+  }
+  return out.sort((a, b) => {
+    const aEvidence = a.evidence[0];
+    const bEvidence = b.evidence[0];
+    return (aEvidence?.runId ?? "").localeCompare(bEvidence?.runId ?? "") || (aEvidence?.eventId ?? "").localeCompare(bEvidence?.eventId ?? "") || (aEvidence?.path ?? "").localeCompare(bEvidence?.path ?? "") || a.message.localeCompare(b.message);
+  });
+}
+function exitCodeFor(result) {
+  if (result.status === "SAFE" || result.status === "SAFE WITH WARNINGS") return 0;
+  if (result.status === "UNSAFE") return 1;
+  return 2;
+}
+function toResidualStatus(status) {
+  if (status === "SAFE WITH WARNINGS") return "SAFE_WITH_WARNINGS";
+  return status;
+}
+function toResidualSafetyAssessment(result) {
+  const codes = [
+    .../* @__PURE__ */ new Set([
+      ...result.diagnostics.map((item) => item.code),
+      ...result.findings.map((item) => item.ruleId)
+    ])
+  ].sort((a, b) => a.localeCompare(b));
+  return {
+    status: toResidualStatus(result.status),
+    findings: result.summary.findings,
+    warnings: result.summary.warnings,
+    errors: result.summary.errors,
+    codes,
+    note: BEST_EFFORT_NOTE
+  };
+}
+async function assessResidualFromContent(content, options = {}) {
+  try {
+    const policy = options.compiledPolicy ?? (options.policy !== void 0 ? await loadRedactionPolicy(options.policy) : void 0);
+    const read = await openTrace(
+      { type: "string", content },
+      { format: options.format ?? "agent-inspect-jsonl" }
+    );
+    const result = assessOpenedTrace(read, {
+      ...options,
+      ...policy !== void 0 ? { compiledPolicy: policy } : {}
+    });
+    return toResidualSafetyAssessment(result);
+  } catch (error) {
+    if (error instanceof TraceReadError) {
+      return toResidualSafetyAssessment(readErrorResult("verify-safe", error));
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    return {
+      status: "UNKNOWN",
+      findings: 0,
+      warnings: 0,
+      errors: 1,
+      codes: ["AI_SAFETY_TRACE_UNREADABLE"],
+      note: `${BEST_EFFORT_NOTE} Residual assessment requires a supported AgentInspect trace; ${message}`
+    };
+  }
+}
+function explainFinding(finding, blocksBundle) {
+  const path44 = finding.evidence[0]?.path ?? "(unknown path)";
+  const category = finding.category ?? "structure";
+  const confidence = finding.confidence ?? "medium";
+  const detector = finding.detector ?? finding.ruleId;
+  const action = finding.action ?? "review";
+  const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
+  return [
+    `  Matched: detector=${detector}; path=${path44}; category=${category}`,
+    `  Why: ${finding.message}`,
+    `  Confidence: ${confidence}`,
+    `  Redaction: ${redactionHint}`,
+    `  Override: configure a custom redaction/detector rule locally (see docs/SAFETY-POLICY.md); do not weaken defaults globally.`,
+    `  Bundle gate: ${blocksBundle ? "blocks share-safe bundle unless --allow-unsafe" : "does not block by itself (warning/info)"}`
+  ];
+}
+function findingExplanation(finding) {
+  const blocks = finding.severity === "error" || finding.status === "fail";
+  return {
+    ruleId: finding.ruleId,
+    detector: finding.detector ?? finding.ruleId,
+    path: finding.evidence[0]?.path,
+    category: finding.category,
+    confidence: finding.confidence,
+    action: finding.action,
+    blocksBundle: blocks,
+    // Never include matched secret/PII values.
+    message: finding.message
+  };
+}
+function printHuman(result, explain = false) {
+  console.log(`Safety status: ${result.status}`);
+  console.log(`Format: ${result.format}`);
+  if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
+  if (result.sourceAssessment !== void 0 && result.artifactAssessment !== void 0) {
+    console.log(`Source assessment: ${result.sourceAssessment.status}`);
+    console.log(`Artifact assessment: ${result.artifactAssessment.status}`);
+    if (result.redactionSummary !== void 0) {
+      console.log(
+        `Redaction: profile=${result.redactionSummary.profile}, findings=${result.redactionSummary.findings}`
+      );
+    }
+  }
+  console.log(
+    `Summary: ${result.summary.findings} finding(s), ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
+  );
+  for (const diagnostic7 of result.diagnostics) {
+    console.log(`- ${diagnostic7.code}: ${diagnostic7.message}`);
+  }
+  for (const finding of result.findings) {
+    const path44 = finding.evidence[0]?.path;
+    const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
+    console.log(`- ${finding.ruleId}: ${finding.message}${path44 ? ` (${path44})` : ""}${taxonomy}`);
+    if (explain) {
+      const blocks = finding.severity === "error" || finding.status === "fail";
+      for (const line of explainFinding(finding, blocks)) {
+        console.log(line);
+      }
+    }
+  }
+  console.log(`Note: ${result.note}`);
+}
+function printJson(result, explain = false) {
+  const payload = explain === true ? { ...result, explanations: result.findings.map(findingExplanation) } : result;
+  console.log(JSON.stringify(stable2(payload), null, 2));
+}
+async function safetyCommand(command, target, options, stdin) {
+  let result;
+  try {
+    const policy = options.compiledPolicy ?? (options.policy !== void 0 ? await loadRedactionPolicy(options.policy) : void 0);
+    const optionsWithPolicy = {
+      ...options,
+      ...policy !== void 0 ? { compiledPolicy: policy } : {}
+    };
+    const input3 = await inputFromTarget(target, optionsWithPolicy, stdin);
+    const read = await openTrace(input3, {
+      ...options.format !== void 0 ? { format: options.format } : {}
+    });
+    const source = assessOpenedTrace(read, {
+      ...optionsWithPolicy,
+      ...options.run !== void 0 ? { runId: options.run } : {}
+    });
+    if (command === "scan") {
+      result = { ...source, command: "scan" };
+    } else {
+      const profile = options.redactionProfile ?? "share";
+      const rawContent = input3.type === "string" ? input3.content : input3.type === "file" ? await promises.readFile(input3.path, "utf-8") : void 0;
+      if (rawContent === void 0) {
+        result = {
+          ...source,
+          command: "verify-safe",
+          sourceAssessment: layerFromResult(source)
+        };
+      } else {
+        const redacted = redactTraceContent(rawContent, profile, policy);
+        const artifactRead = await openTrace(
+          { type: "string", content: redacted.content },
+          { format: options.format ?? "agent-inspect-jsonl" }
+        );
+        const artifact = assessOpenedTrace(artifactRead, {
+          ...optionsWithPolicy,
+          ...options.run !== void 0 ? { runId: options.run } : {}
+        });
+        const detectors = [
+          ...new Set(redacted.findings.map((finding) => finding.detector))
+        ].sort((a, b) => a.localeCompare(b));
+        result = resultFromParts({
+          command: "verify-safe",
+          format: artifact.format,
+          runId: artifact.runId ?? source.runId,
+          findings: artifact.findings,
+          diagnostics: artifact.diagnostics,
+          warnings: artifact.warnings,
+          unsupportedFields: artifact.unsupportedFields,
+          status: artifact.status,
+          sourceAssessment: layerFromResult(source),
+          artifactAssessment: layerFromResult(artifact),
+          redactionSummary: {
+            profile,
+            findings: redacted.findings.length,
+            detectors
+          }
+        });
+      }
+    }
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    result = message.startsWith("--") || message.includes("--policy") ? invalidArgumentResult(command, error) : readErrorResult(command, error);
+  }
+  process.exitCode = exitCodeFor(result);
+  if (options.json) printJson(result, options.explain === true);
+  else printHuman(result, options.explain === true);
+}
+function scanCommand(target, options = {}, stdin = process.stdin) {
+  return safetyCommand("scan", target, options, stdin);
+}
+function verifySafeCommand(target, options = {}, stdin = process.stdin) {
+  return safetyCommand("verify-safe", target, options, stdin);
+}
+function assessOpenedTrace(read, options = {}) {
+  try {
+    const rules = buildSafetyRules(options);
+    const checkResult = runTraceChecks(
+      { read },
+      {
+        rules,
+        ...options.runId !== void 0 ? { runId: options.runId } : {},
+        ...options.run !== void 0 ? { runId: options.run } : {}
+      }
+    );
+    const detectorFindings = checkResult.diagnostics.length === 0 ? redactionDetectorFindings(read, checkResult.runId, options.compiledPolicy) : [];
+    return resultFromParts({
+      command: "verify-safe",
+      format: checkResult.format,
+      runId: checkResult.runId,
+      findings: [...checkResult.findings, ...detectorFindings],
+      diagnostics: [
+        ...checkResult.diagnostics.map(diagnosticFromCheck),
+        ...warningDiagnostics(read.warnings, read.unsupportedFields)
+      ],
+      warnings: read.warnings,
+      unsupportedFields: read.unsupportedFields
+    });
+  } catch (error) {
+    return messageStartsWithDash(error) ? invalidArgumentResult("verify-safe", error) : readErrorResult("verify-safe", error);
+  }
+}
+function messageStartsWithDash(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.startsWith("--");
+}
+
+// packages/cli/src/redact.ts
+function parseRedactionProfile3(value) {
+  if (value === void 0 || value === "local" || value === "share" || value === "strict") {
+    return value ?? "share";
+  }
+  throw new Error(`Unsupported --profile "${value}". Use local, share, or strict.`);
+}
+function stable3(value) {
+  if (Array.isArray(value)) return value.map(stable3);
+  if (value === null || typeof value !== "object") return value;
+  const record = value;
+  return Object.fromEntries(
+    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable3(record[key])])
+  );
+}
+function isMissingFileError3(error) {
+  return error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT";
+}
+async function contentFromTarget(target, options, stdin) {
+  if (target === "-") {
+    return { content: await readStdin(stdin), source: "stdin" };
+  }
+  try {
+    const stats2 = await promises.stat(target);
+    if (stats2.isDirectory()) {
+      throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
+    }
+    return { content: await promises.readFile(target, "utf-8"), source: target };
+  } catch (error) {
+    if (!isMissingFileError3(error)) throw error;
+  }
+  const runPath = getTraceFilePath(target, resolveTraceDir({ dir: options.dir }));
+  const stats = await promises.stat(runPath);
+  if (stats.isDirectory()) {
+    throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
+  }
+  return { content: await promises.readFile(runPath, "utf-8"), source: runPath };
+}
+function applyRedact(value, profile, policy) {
+  const result = createRedactor({
+    profile,
+    ...policy?.extraKeys.length ? { extraKeys: [...policy.extraKeys] } : {},
+    ...policy?.detectors.length ? { detectors: [...policy.detectors] } : {}
+  }).redact(value);
+  return { value: result.value, findings: result.findings };
+}
+function redactJsonText(content, profile, policy) {
+  const parsed = JSON.parse(content);
+  const result = applyRedact(parsed, profile, policy);
+  return {
+    content: `${JSON.stringify(result.value, null, 2)}
+`,
+    findings: result.findings
+  };
+}
+function redactJsonlText(content, profile, policy) {
+  const lines = content.split(/\r?\n/);
+  const out = [];
+  const findings = [];
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index] ?? "";
+    if (line.trim() === "") continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(line);
+    } catch {
+      throw new Error(`Input is not valid JSON or JSONL at line ${index + 1}.`);
+    }
+    const result = applyRedact(parsed, profile, policy);
+    out.push(JSON.stringify(result.value));
+    findings.push(
+      ...result.findings.map((finding) => ({
+        ...finding,
+        path: `line:${index + 1}:${finding.path}`
+      }))
+    );
+  }
+  return {
+    content: out.length === 0 ? "" : `${out.join("\n")}
+`,
+    findings
+  };
+}
+function redactDocument(content, profile, policy) {
+  const trimmed = content.trim();
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed)) {
+        return redactJsonlText(content, profile, policy);
+      }
+    } catch {
+    }
+  }
+  try {
+    return redactJsonText(content, profile, policy);
+  } catch {
+    return redactJsonlText(content, profile, policy);
+  }
+}
+function redactTraceContent(content, profile, policy) {
+  return redactDocument(content, profile, policy);
+}
+function looksLikeAgentInspectTrace(content) {
+  const trimmed = content.trim();
+  if (!trimmed.startsWith("{")) return false;
   try {
-    return redactJsonText(content, profile);
+    const firstLine = trimmed.split(/\r?\n/).find((line) => line.trim() !== "") ?? trimmed;
+    const parsed = JSON.parse(firstLine);
+    return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed);
   } catch {
-    return redactJsonlText(content, profile);
+    return false;
   }
 }
-function redactTraceContent(content, profile) {
-  return redactDocument(content, profile);
+function printResidualWarning(assessment, sourceLooksLikeTrace) {
+  if (assessment.status === "SAFE") return;
+  if (assessment.status === "UNKNOWN" && !sourceLooksLikeTrace) return;
+  const codes = assessment.codes.length > 0 ? ` codes=${assessment.codes.join(",")}` : "";
+  console.error(
+    `Residual safety: ${assessment.status} (findings=${assessment.findings}, warnings=${assessment.warnings}, errors=${assessment.errors})${codes}. Redact does not certify safe sharing; run verify-safe before publishing.`
+  );
+}
+function residualExitCode(assessment) {
+  if (assessment.status === "UNSAFE") return 1;
+  if (assessment.status === "UNKNOWN") return 2;
+  return 0;
 }
 async function redactCommand(target, options = {}, stdin = process.stdin) {
   const profile = parseRedactionProfile3(resolveRedactionProfileOption(options));
+  const policy = options.policy !== void 0 ? await loadRedactionPolicy(options.policy) : void 0;
   const source = await contentFromTarget(target, options, stdin);
-  const redacted = redactDocument(source.content, profile);
+  const redacted = redactDocument(source.content, profile, policy);
   const outputPath = resolveOutputOption(options);
+  const residualAssessment = await assessResidualFromContent(redacted.content, {
+    compiledPolicy: policy
+  });
   if (outputPath !== void 0) {
     await promises.writeFile(outputPath, redacted.content, "utf-8");
   }
+  if (options.failOnResidual === true) {
+    process.exitCode = residualExitCode(residualAssessment);
+  }
   if (options.json) {
     console.log(
       JSON.stringify(
-        stable2({
+        stable3({
           ok: true,
           profile,
           source: source.source,
           output: outputPath,
           findings: redacted.findings,
+          residualAssessment,
+          ...policy !== void 0 ? {
+            policy: {
+              path: policy.path,
+              extraKeys: policy.extraKeys.length,
+              patterns: policy.detectors.length,
+              diagnostics: policy.diagnostics
+            }
+          } : {},
           content: outputPath === void 0 ? redacted.content : void 0
         }),
         null,
@@ -17156,6 +17924,7 @@ async function redactCommand(target, options = {}, stdin = process.stdin) {
     );
     return;
   }
+  printResidualWarning(residualAssessment, looksLikeAgentInspectTrace(redacted.content));
   if (outputPath === void 0) {
     process.stdout.write(redacted.content);
   }
@@ -17438,7 +18207,7 @@ async function openCommand(input3, options = {}, stdin = process.stdin) {
 
 // packages/cli/src/migrate.ts
 init_advanced();
-function isRecord16(value) {
+function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseTarget(value) {
@@ -17447,7 +18216,7 @@ function parseTarget(value) {
   throw new Error('Unsupported migration target. Use "--to 1.0".');
 }
 function formatOf(value) {
-  if (!isRecord16(value)) return "unknown";
+  if (!isRecord17(value)) return "unknown";
   if (value.schemaVersion === "0.1") return "0.1";
   if (value.schemaVersion === "0.2") return "0.2";
   if (value.schemaVersion === "1.0") return "1.0";
@@ -17460,14 +18229,14 @@ function uniqueSorted(values) {
   return [...new Set(values)].sort();
 }
 function isWithinDirectory(child, parent) {
-  const relative = path32__default.default.relative(parent, child);
-  return relative === "" || !relative.startsWith("..") && !path32__default.default.isAbsolute(relative);
+  const relative = path33__default.default.relative(parent, child);
+  return relative === "" || !relative.startsWith("..") && !path33__default.default.isAbsolute(relative);
 }
 async function resolveOutputPath(inputPath, output2, force) {
   if (output2 === void 0 || output2.trim() === "") return void 0;
-  const inputAbs = path32__default.default.resolve(inputPath);
-  const outputAbs = path32__default.default.resolve(output2.trim());
-  const inputDir = path32__default.default.dirname(inputAbs);
+  const inputAbs = path33__default.default.resolve(inputPath);
+  const outputAbs = path33__default.default.resolve(output2.trim());
+  const inputDir = path33__default.default.dirname(inputAbs);
   if (!isWithinDirectory(outputAbs, inputDir)) {
     throw new Error("Refusing to write migrated output outside the input directory.");
   }
@@ -17588,7 +18357,7 @@ async function migrateCommand(input3, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const inputPath = path32__default.default.resolve(input3.trim());
+  const inputPath = path33__default.default.resolve(input3.trim());
   const dryRun = options.dryRun === true;
   if (!dryRun && (options.output === void 0 || options.output.trim() === "")) {
     console.error("migrate requires --dry-run or --output <path>.");
@@ -17607,7 +18376,7 @@ async function migrateCommand(input3, options = {}) {
     );
     const result = await buildMigration(inputPath, outputPath);
     if (!dryRun && outputPath !== void 0) {
-      await promises.mkdir(path32__default.default.dirname(outputPath), { recursive: true });
+      await promises.mkdir(path33__default.default.dirname(outputPath), { recursive: true });
       await promises.writeFile(outputPath, result.content, "utf-8");
     }
     printSummary2(result, dryRun);
@@ -17616,16 +18385,13 @@ async function migrateCommand(input3, options = {}) {
     console.error(`[AgentInspect] migrate failed: ${msg}`);
     process.exitCode = 1;
   }
-}
-init_advanced();
-
-// packages/core/src/entries/checks.ts
-init_checks2();
+}
+init_advanced();
 
 // packages/cli/src/evidence-on.ts
 init_advanced();
 function validateReporterArtifactPath(options) {
-  const outputDir = path32__default.default.resolve(options.outputDir);
+  const outputDir = path33__default.default.resolve(options.outputDir);
   const diagnostics = [];
   const rawPath = options.relativePath;
   if (rawPath.length === 0) {
@@ -17645,7 +18411,7 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  if (path32__default.default.isAbsolute(rawPath) || path32__default.default.win32.isAbsolute(rawPath)) {
+  if (path33__default.default.isAbsolute(rawPath) || path33__default.default.win32.isAbsolute(rawPath)) {
     diagnostics.push({
       code: "artifact_path_absolute",
       severity: "error",
@@ -17654,7 +18420,7 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  const normalized = path32__default.default.posix.normalize(rawPath.replace(/\\/g, "/"));
+  const normalized = path33__default.default.posix.normalize(rawPath.replace(/\\/g, "/"));
   const segments = normalized.split("/");
   if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
     diagnostics.push({
@@ -17665,9 +18431,9 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  const absolutePath = path32__default.default.resolve(outputDir, normalized);
-  const relFromOutput = path32__default.default.relative(outputDir, absolutePath);
-  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path32__default.default.isAbsolute(relFromOutput)) {
+  const absolutePath = path33__default.default.resolve(outputDir, normalized);
+  const relFromOutput = path33__default.default.relative(outputDir, absolutePath);
+  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path33__default.default.isAbsolute(relFromOutput)) {
     diagnostics.push({
       code: "artifact_path_escape",
       severity: "error",
@@ -17693,7 +18459,7 @@ var EVIDENCE_CI_ARTIFACT_FILES = [
 function createEvidenceCiArtifacts(options) {
   const profile = options.redactionProfile ?? "share";
   const prefix = options.relativeDir !== void 0 && options.relativeDir.trim() !== "" ? options.relativeDir.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "") : "";
-  const join = (name) => prefix === "" ? name : path32__default.default.posix.join(prefix, name);
+  const join = (name) => prefix === "" ? name : path33__default.default.posix.join(prefix, name);
   const formatFor = (name) => {
     if (name.endsWith(".html")) return "html";
     if (name.endsWith(".jsonl")) return "jsonl";
@@ -17742,9 +18508,9 @@ function stableJson2(value) {
 async function writeLocalEvidence(input3) {
   const profile = input3.redactionProfile ?? "share";
   const format = input3.format ?? "directory";
-  const baseDir = path32__default.default.resolve(input3.outputDir);
+  const baseDir = path33__default.default.resolve(input3.outputDir);
   await promises.mkdir(
-    format === "zip" && baseDir.toLowerCase().endsWith(".zip") ? path32__default.default.dirname(baseDir) : baseDir,
+    format === "zip" && baseDir.toLowerCase().endsWith(".zip") ? path33__default.default.dirname(baseDir) : baseDir,
     { recursive: true }
   );
   const sourceContents = /* @__PURE__ */ new Map();
@@ -17800,7 +18566,7 @@ async function writeLocalEvidence(input3) {
   }
   if (format === "zip") {
     const zipPath = baseDir.toLowerCase().endsWith(".zip") ? baseDir : `${baseDir}.zip`;
-    await promises.mkdir(path32__default.default.dirname(zipPath), { recursive: true });
+    await promises.mkdir(path33__default.default.dirname(zipPath), { recursive: true });
     const archive = buildZipArchive(
       files.map(([relativePath, content]) => ({
         path: relativePath,
@@ -17815,16 +18581,16 @@ async function writeLocalEvidence(input3) {
     let sidecarDir = baseDir;
     if (baseDir.toLowerCase().endsWith(".html")) {
       htmlPath = baseDir;
-      sidecarDir = path32__default.default.dirname(baseDir);
+      sidecarDir = path33__default.default.dirname(baseDir);
     } else {
       await promises.mkdir(baseDir, { recursive: true });
-      htmlPath = path32__default.default.join(baseDir, "evidence.html");
+      htmlPath = path33__default.default.join(baseDir, "evidence.html");
       sidecarDir = baseDir;
     }
     await promises.mkdir(sidecarDir, { recursive: true });
     await promises.writeFile(htmlPath, evidencePackage["evidence.html"], "utf-8");
     await promises.writeFile(
-      path32__default.default.join(sidecarDir, "evidence.json"),
+      path33__default.default.join(sidecarDir, "evidence.json"),
       evidencePackage["evidence.json"],
       "utf-8"
     );
@@ -17832,7 +18598,7 @@ async function writeLocalEvidence(input3) {
   }
   await promises.mkdir(baseDir, { recursive: true });
   for (const [name, content] of files) {
-    await promises.writeFile(path32__default.default.join(baseDir, name), content, "utf-8");
+    await promises.writeFile(path33__default.default.join(baseDir, name), content, "utf-8");
   }
   return baseDir;
 }
@@ -17856,11 +18622,11 @@ function checkResultToEvidenceJson(result, runIds) {
 }
 function defaultEvidenceDir(label) {
   const safe = label.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 80) || "evidence";
-  return path32__default.default.join(".agent-inspect", "evidence", safe);
+  return path33__default.default.join(".agent-inspect", "evidence", safe);
 }
 function resolveEvidenceOutputDir(evidenceDir, label) {
   if (evidenceDir !== void 0 && evidenceDir.trim() !== "") {
-    return path32__default.default.resolve(evidenceDir.trim());
+    return path33__default.default.resolve(evidenceDir.trim());
   }
   return defaultEvidenceDir(label);
 }
@@ -18184,23 +18950,23 @@ function evaluatePromptInjection(text, options = {}) {
   }
   return fail(ruleId, `Matched ${evidence.length} injection pattern(s).`, evidence, "warning");
 }
-function validateSchemaField(value, field, path43, evidence) {
+function validateSchemaField(value, field, path44, evidence) {
   const ruleId = "guardrail.structured-output";
   if (field.type) {
     const actual = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
     if (actual !== field.type) {
-      evidence.push({ ruleId, path: path43, preview: `expected ${field.type}, got ${actual}` });
+      evidence.push({ ruleId, path: path44, preview: `expected ${field.type}, got ${actual}` });
       return;
     }
   }
   if (field.enum && !field.enum.some((item) => Object.is(item, value))) {
-    evidence.push({ ruleId, path: path43, preview: "value not in enum" });
+    evidence.push({ ruleId, path: path44, preview: "value not in enum" });
   }
   if (field.type === "object" && field.required && value && typeof value === "object" && !Array.isArray(value)) {
     const record = value;
     for (const key of field.required) {
       if (!(key in record)) {
-        evidence.push({ ruleId, path: `${path43}.${key}`, preview: "missing required key" });
+        evidence.push({ ruleId, path: `${path44}.${key}`, preview: "missing required key" });
       }
     }
   }
@@ -18929,7 +19695,7 @@ function parseCheckConfig(value) {
 }
 async function loadConfig(configPath) {
   if (configPath === void 0) return {};
-  const extension = path32__default.default.extname(configPath);
+  const extension = path33__default.default.extname(configPath);
   if (TS_CONFIG_EXTENSIONS2.has(extension)) {
     throw new CheckConfigError(
       "AI_CHECK_CONFIG_LOAD_FAILED",
@@ -18942,7 +19708,7 @@ async function loadConfig(configPath) {
       "Unsupported check config extension. Use .json, .js, .mjs, or .cjs."
     );
   }
-  const absolute = path32__default.default.resolve(configPath);
+  const absolute = path33__default.default.resolve(configPath);
   try {
     if (extension === ".json") {
       const raw = await promises.readFile(absolute, "utf-8");
@@ -19136,7 +19902,7 @@ function buildRules(config, options, presetSelect = []) {
     diagnostics
   };
 }
-function exitCodeFor(result) {
+function exitCodeFor2(result) {
   if (result.status === "pass") return 0;
   if (result.status === "fail") return 1;
   const codes = result.diagnostics.map((item) => item.code);
@@ -19157,16 +19923,16 @@ function exitCodeFor(result) {
   }
   return 1;
 }
-function stable3(value) {
-  if (Array.isArray(value)) return value.map(stable3);
+function stable4(value) {
+  if (Array.isArray(value)) return value.map(stable4);
   if (value === null || typeof value !== "object") return value;
   const record = value;
   return Object.fromEntries(
-    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable3(record[key])])
+    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable4(record[key])])
   );
 }
-function printJson(result) {
-  console.log(JSON.stringify(stable3(result), null, 2));
+function printJson2(result) {
+  console.log(JSON.stringify(stable4(result), null, 2));
 }
 function isSafetyFinding(ruleId) {
   return ruleId.startsWith("safety.") || ruleId.startsWith("guardrail.") || ruleId.includes("pii") || ruleId.includes("secret");
@@ -19203,7 +19969,7 @@ function printPresetClassSummary(result, preset) {
     `Share safety: ${hasSafetyFindings || result.status === "fail" ? "FAIL" : result.status === "pass" ? "PASS" : "FAIL"}`
   );
 }
-function printHuman(result, options = {}) {
+function printHuman2(result, options = {}) {
   const scoped = result;
   if (scoped.scopeLabel) {
     console.log(`Scope: ${scoped.scopeKind} ${scoped.scopeLabel}`);
@@ -19223,13 +19989,13 @@ function printHuman(result, options = {}) {
     console.log(`- ${diagnostic7.code}: ${diagnostic7.message}`);
   }
   for (const finding of result.findings) {
-    const path43 = finding.evidence[0]?.path;
+    const path44 = finding.evidence[0]?.path;
     const run = finding.evidence[0]?.runId;
     const runPrefix = run ? `[${run}] ` : "";
-    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path43 ? ` (${path43})` : ""}`);
+    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path44 ? ` (${path44})` : ""}`);
   }
 }
-function readErrorResult(error) {
+function readErrorResult2(error) {
   if (error instanceof TraceReadError) {
     const code = error.code === "unsupported_format" ? "AI_CHECK_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_CHECK_AMBIGUOUS_FORMAT" : "AI_CHECK_TRACE_UNREADABLE";
     return errorResult2(code, error.message);
@@ -19256,9 +20022,9 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
         "AI_CHECK_CONFIG_NO_EFFECTIVE_RULES",
         "Explicit --config has no effective check rules. Configure checks.select, checks.run, checks.tool, checks.llm, checks.structure, or checks.safety."
       );
-      if (options.json) printJson(result);
-      else printHuman(result, options);
-      process.exitCode = exitCodeFor(result);
+      if (options.json) printJson2(result);
+      else printHuman2(result, options);
+      process.exitCode = exitCodeFor2(result);
       return;
     }
     let effectiveOptions = options;
@@ -19388,10 +20154,10 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
         result = errorResult2(code, message);
       }
     } else {
-      result = readErrorResult(error);
+      result = readErrorResult2(error);
     }
   }
-  process.exitCode = exitCodeFor(result);
+  process.exitCode = exitCodeFor2(result);
   const failed = result.status !== "pass";
   if (shouldEmitEvidence(options.evidenceOn, failed)) {
     try {
@@ -19431,8 +20197,8 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
       );
     }
   }
-  if (options.json) printJson(result);
-  else printHuman(result, options);
+  if (options.json) printJson2(result);
+  else printHuman2(result, options);
 }
 
 // packages/viewer/src/server.ts
@@ -19589,7 +20355,7 @@ async function loadSuiteViewerData(options) {
   for (const suiteCase of result.cases) {
     cases.push(await enrichCase(suiteCase, baselinePath));
   }
-  const artifactsDir = path32__default.default.join(path32__default.default.dirname(result.configPath), ".agent-inspect/suite-runs");
+  const artifactsDir = path33__default.default.join(path33__default.default.dirname(result.configPath), ".agent-inspect/suite-runs");
   return {
     suiteName: result.suiteName,
     configPath: result.configPath,
@@ -19785,19 +20551,19 @@ function serializeWorkspaceManifest(manifest) {
 }
 var INDEX_DIR_NAME = "index";
 function resolveWorkspaceLocation(cwd = process.cwd()) {
-  const projectRoot = path32__default.default.resolve(cwd);
-  const workspaceDir = path32__default.default.join(projectRoot, WORKSPACE_DIR_NAME);
+  const projectRoot = path33__default.default.resolve(cwd);
+  const workspaceDir = path33__default.default.join(projectRoot, WORKSPACE_DIR_NAME);
   return {
     projectRoot,
     workspaceDir,
-    manifestPath: path32__default.default.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
+    manifestPath: path33__default.default.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
   };
 }
 function resolveInsideWorkspace(workspaceDir, relative) {
-  const base = path32__default.default.resolve(workspaceDir);
-  const resolved = path32__default.default.resolve(base, relative);
-  const rel = path32__default.default.relative(base, resolved);
-  if (rel === "" || rel === "." || !rel.startsWith("..") && !path32__default.default.isAbsolute(rel)) {
+  const base = path33__default.default.resolve(workspaceDir);
+  const resolved = path33__default.default.resolve(base, relative);
+  const rel = path33__default.default.relative(base, resolved);
+  if (rel === "" || rel === "." || !rel.startsWith("..") && !path33__default.default.isAbsolute(rel)) {
     return resolved;
   }
   throw new Error(
@@ -19866,7 +20632,7 @@ async function createWorkspace(options = {}) {
     created = false;
     adopted = true;
   } else {
-    const project = options.project?.trim() || path32__default.default.basename(location.projectRoot) || "workspace";
+    const project = options.project?.trim() || path33__default.default.basename(location.projectRoot) || "workspace";
     const traceDirs = detectedExistingTraces ? ["runs", "."] : ["runs"];
     manifest = createDefaultWorkspaceManifest({
       project,
@@ -20005,7 +20771,7 @@ async function doctorWorkspace(location) {
     const abs = resolveInsideWorkspace(location.workspaceDir, rel);
     for (const file of await listJsonl(abs)) {
       try {
-        const s = await promises.stat(path32__default.default.join(abs, file));
+        const s = await promises.stat(path33__default.default.join(abs, file));
         newestTraceMtime = Math.max(newestTraceMtime, s.mtimeMs);
       } catch {
         checks2.push({ id: "trace-readability", status: "warn", message: `cannot stat ${rel}/${file}` });
@@ -20053,7 +20819,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
       const relPath = `${rel}/${entry}`;
       removed.push(relPath);
       if (!dryRun) {
-        await promises.rm(path32__default.default.join(abs, entry), { recursive: true, force: true });
+        await promises.rm(path33__default.default.join(abs, entry), { recursive: true, force: true });
       }
     }
   }
@@ -20062,7 +20828,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
 
 // packages/viewer/src/workspace-data.ts
 async function loadWorkspaceViewerData(options) {
-  const cwd = path32__default.default.resolve(options.cwd ?? process.cwd());
+  const cwd = path33__default.default.resolve(options.cwd ?? process.cwd());
   const location = resolveWorkspaceLocation(cwd);
   const manifestRead = await readWorkspaceManifestFile(location);
   if (!manifestRead.ok || manifestRead.manifest === void 0) {
@@ -20075,7 +20841,7 @@ async function loadWorkspaceViewerData(options) {
   const runs = [];
   for (const rel of manifestRead.manifest.traceDirs) {
     const traceDir = resolveTraceDir({
-      dir: path32__default.default.join(location.workspaceDir, rel)
+      dir: path33__default.default.join(location.workspaceDir, rel)
     });
     const td = new TraceDirectory({ dir: traceDir });
     const files = await td.list();
@@ -20089,7 +20855,7 @@ async function loadWorkspaceViewerData(options) {
         runId: meta2.runId,
         ...meta2.name !== void 0 ? { name: meta2.name } : {},
         status: meta2.status,
-        file: path32__default.default.basename(meta2.filePath)
+        file: path33__default.default.basename(meta2.filePath)
       });
     }
   }
@@ -20100,8 +20866,8 @@ async function loadWorkspaceViewerData(options) {
     doctor,
     runs,
     bundleDirs: [
-      path32__default.default.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
-      path32__default.default.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
+      path33__default.default.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
+      path33__default.default.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
     ]
   };
 }
@@ -20164,7 +20930,7 @@ function createViewerServer(options = {}) {
           ok: true,
           readOnly: true,
           mode,
-          traceDir: path32__default.default.resolve(traceDir)
+          traceDir: path33__default.default.resolve(traceDir)
         });
       }
       if (pathname === "/api/suite" && mode === "suite") {
@@ -20193,7 +20959,7 @@ function createViewerServer(options = {}) {
             runId: meta2.runId,
             name: meta2.name,
             status: meta2.status,
-            file: path32__default.default.basename(meta2.filePath),
+            file: path33__default.default.basename(meta2.filePath),
             startedAt: meta2.startedAt,
             durationMs: meta2.durationMs
           }))
@@ -20310,7 +21076,7 @@ function startViewerServer(options = {}) {
       resolve({
         host,
         port: resolvedPort,
-        traceDir: path32__default.default.resolve(traceDir),
+        traceDir: path33__default.default.resolve(traceDir),
         url: `http://${host}:${resolvedPort}/${modeQuery}`,
         mode
       });
@@ -20721,10 +21487,10 @@ async function evalRun(input3, options = {}) {
     diagnostics: []
   };
 }
-function evidenceForRun(run, path43) {
-  return [{ runId: run.runId, ...path43 !== void 0 ? { path: path43 } : {} }];
+function evidenceForRun(run, path44) {
+  return [{ runId: run.runId, ...path44 !== void 0 ? { path: path44 } : {} }];
 }
-function evidenceForEvent(event, path43) {
+function evidenceForEvent(event, path44) {
   return [
     {
       runId: event.runId,
@@ -20732,7 +21498,7 @@ function evidenceForEvent(event, path43) {
       ...event.parentId !== void 0 ? { parentId: event.parentId } : {},
       kind: event.kind,
       name: event.name,
-      ...path43 !== void 0 ? { path: path43 } : {}
+      ...path44 !== void 0 ? { path: path44 } : {}
     }
   ];
 }
@@ -20890,9 +21656,9 @@ function collectTextFields(nodes, keys, preferredKinds = []) {
 function tokenize(text) {
   return [...text.toLowerCase().matchAll(/[a-z0-9][a-z0-9'-]{2,}/g)].map((match) => match[0].replace(/^['-]+|['-]+$/g, "")).filter((token) => token.length > 2 && !STOP_WORDS.has(token));
 }
-function firstEvidence(fields, run, path43) {
+function firstEvidence(fields, run, path44) {
   const first = fields[0];
-  return first === void 0 ? evidenceForRun(run, path43) : evidenceForEvent(first.node.event, first.path);
+  return first === void 0 ? evidenceForRun(run, path44) : evidenceForEvent(first.node.event, first.path);
 }
 function collectSourceIds(nodes, keys) {
   const wanted = keySet(keys);
@@ -21245,273 +22011,55 @@ var checks = {
           "Answer contained banned unsupported-answer phrasing.",
           firstEvidence(answers, context.run, "attributes.answer"),
           { bannedPhraseCount: banned.length },
-          { matchedPhraseCount: matches.length }
-        )
-      ] : [];
-    });
-  }
-};
-function renderEvalMarkdown(result) {
-  const lines = [
-    `# AgentInspect Eval`,
-    "",
-    `Status: ${result.status}`,
-    `Format: ${result.format}`,
-    ...result.runId !== void 0 ? [`Run: ${result.runId}`] : [],
-    `Summary: ${result.summary.passed} passed, ${result.summary.failed} failed, ${result.summary.warnings} warnings, ${result.summary.errors} errors`
-  ];
-  if (result.diagnostics.length > 0) {
-    lines.push("", "## Diagnostics");
-    for (const diagnostic7 of result.diagnostics) {
-      lines.push(`- ${diagnostic7.code}: ${diagnostic7.message}`);
-    }
-  }
-  if (result.findings.length > 0) {
-    lines.push("", "## Findings");
-    for (const finding of result.findings) {
-      const path43 = finding.evidence[0]?.path;
-      lines.push(`- ${finding.ruleId}: ${finding.message}${path43 ? ` (${path43})` : ""}`);
-    }
-  }
-  return `${lines.join("\n")}
-`;
-}
-
-// packages/cli/src/eval.ts
-var CONFIG_EXTENSIONS3 = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
-var TS_CONFIG_EXTENSIONS3 = /* @__PURE__ */ new Set([".ts", ".mts", ".cts"]);
-function diagnostic6(code, message, severity = "error") {
-  return { code, message, severity };
-}
-function errorResult4(code, message, format = "unknown") {
-  return {
-    ok: false,
-    status: "error",
-    format,
-    summary: { passed: 0, failed: 0, warnings: 0, errors: 1 },
-    findings: [],
-    diagnostics: [diagnostic6(code, message)]
-  };
-}
-function parseNumber2(value, label) {
-  if (value === void 0) return void 0;
-  const parsed = Number(value);
-  if (!Number.isFinite(parsed) || parsed < 0) {
-    throw new Error(`${label} must be a non-negative number.`);
-  }
-  return parsed;
-}
-function asStringArray3(value, label) {
-  if (value === void 0) return void 0;
-  if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
-    throw new Error(`${label} must be an array of strings.`);
-  }
-  return value;
-}
-function asConfig(value) {
-  if (value === void 0 || value === null) return {};
-  if (typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("Config must export an object.");
-  }
-  return value;
-}
-async function loadConfig2(configPath) {
-  if (configPath === void 0) return {};
-  const extension = path32__default.default.extname(configPath);
-  if (TS_CONFIG_EXTENSIONS3.has(extension)) {
-    throw new Error(
-      "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
-    );
-  }
-  if (!CONFIG_EXTENSIONS3.has(extension)) {
-    throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
-  }
-  const absolute = path32__default.default.resolve(configPath);
-  if (extension === ".json") {
-    const raw = await promises.readFile(absolute, "utf-8");
-    return asConfig(JSON.parse(raw));
-  }
-  const mod = await import(url.pathToFileURL(absolute).href);
-  return asConfig("default" in mod ? mod.default : mod);
-}
-function normalizeConfig2(config) {
-  if (config.eval === void 0) return {};
-  if (typeof config.eval !== "object" || Array.isArray(config.eval)) {
-    throw new Error("eval config must be an object.");
-  }
-  return config.eval;
-}
-function maybeAdd(rules, value, makeRule) {
-  if (value !== void 0) rules.push(makeRule(value));
-}
-function optionObject(value) {
-  if (value === void 0 || value === false) return void 0;
-  if (value === true) return {};
-  if (typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("Eval heuristic config must be a boolean or object.");
-  }
-  return value;
-}
-function sourceIdsFromConfig(value) {
-  if (value === void 0) return void 0;
-  if (Array.isArray(value)) return { ids: asStringArray3(value, "eval.requiredSourceIds") ?? [] };
-  if (typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("eval.requiredSourceIds must be an array or object.");
-  }
-  const ids = asStringArray3(value.ids, "eval.requiredSourceIds.ids") ?? [];
-  return { ids, options: { sourceIdKeys: value.sourceIdKeys } };
-}
-function buildRules2(config, options) {
-  const evalConfig = normalizeConfig2(config);
-  const rules = [];
-  if (evalConfig.requireSuccess || options.requireSuccess) rules.push(checks.requireSuccess());
-  const requiredTools = [
-    ...asStringArray3(evalConfig.requiredTools, "eval.requiredTools") ?? [],
-    ...options.requiredTool ?? []
-  ];
-  if (requiredTools.length > 0) rules.push(checks.requiredTools(requiredTools));
-  const forbiddenTools = [
-    ...asStringArray3(evalConfig.forbiddenTools, "eval.forbiddenTools") ?? [],
-    ...options.forbidTool ?? [],
-    ...options.forbiddenTool ?? []
-  ];
-  if (forbiddenTools.length > 0) rules.push(checks.forbiddenTools(forbiddenTools));
-  const maxDurationMs = parseNumber2(options.maxDurationMs, "--max-duration-ms") ?? evalConfig.maxDurationMs;
-  maybeAdd(rules, maxDurationMs, checks.maxDurationMs);
-  const maxDepth = parseNumber2(options.maxDepth, "--max-depth") ?? evalConfig.maxDepth;
-  maybeAdd(rules, maxDepth, checks.maxDepth);
-  const maxRetries = parseNumber2(options.maxRetries, "--max-retries") ?? evalConfig.maxRetries;
-  maybeAdd(rules, maxRetries, checks.maxRetries);
-  const maxTotalTokens = parseNumber2(options.maxTotalTokens, "--max-total-tokens") ?? evalConfig.maxTotalTokens;
-  maybeAdd(rules, maxTotalTokens, checks.maxTotalTokens);
-  if (evalConfig.requiredRetrievalBeforeGeneration || options.requireRetrievalBeforeGeneration) {
-    rules.push(checks.requiredRetrievalBeforeGeneration());
-  }
-  const requiredDecisionMetadata = [
-    ...asStringArray3(
-      evalConfig.requiredDecisionMetadata,
-      "eval.requiredDecisionMetadata"
-    ) ?? [],
-    ...options.requiredDecisionMetadata ?? []
-  ];
-  if (requiredDecisionMetadata.length > 0) {
-    rules.push(checks.requiredDecisionMetadata(requiredDecisionMetadata));
-  }
-  const contextOverlap = optionObject(evalConfig.contextOverlap);
-  const minOverlap = parseNumber2(options.minContextOverlap, "--min-context-overlap");
-  const minSharedTerms = parseNumber2(options.minSharedTerms, "--min-shared-terms");
-  if (contextOverlap !== void 0 || options.contextOverlap || minOverlap !== void 0 || minSharedTerms !== void 0) {
-    rules.push(checks.contextOverlap({ ...contextOverlap, minOverlap, minSharedTerms }));
-  }
-  const quoteOverlap = optionObject(evalConfig.quoteOverlap);
-  if (quoteOverlap !== void 0 || options.quoteOverlap) {
-    rules.push(checks.quoteOverlap(quoteOverlap));
-  }
-  const citationPresence = optionObject(evalConfig.citationPresence);
-  if (citationPresence !== void 0 || options.citationPresence) {
-    rules.push(checks.citationPresence(citationPresence));
-  }
-  const sourceIds = sourceIdsFromConfig(evalConfig.requiredSourceIds);
-  const requiredSourceIds = [...sourceIds?.ids ?? [], ...options.requiredSourceId ?? []];
-  if (requiredSourceIds.length > 0) {
-    rules.push(checks.requiredSourceIds(requiredSourceIds, sourceIds?.options));
-  }
-  const cliAnswerLength = {
-    minCharacters: parseNumber2(options.minAnswerCharacters, "--min-answer-characters"),
-    maxCharacters: parseNumber2(options.maxAnswerCharacters, "--max-answer-characters"),
-    minWords: parseNumber2(options.minAnswerWords, "--min-answer-words"),
-    maxWords: parseNumber2(options.maxAnswerWords, "--max-answer-words")
-  };
-  const hasCliAnswerLength = Object.values(cliAnswerLength).some((value) => value !== void 0);
-  if (evalConfig.answerLengthBounds !== void 0 || hasCliAnswerLength) {
-    rules.push(checks.answerLengthBounds({ ...evalConfig.answerLengthBounds, ...cliAnswerLength }));
-  }
-  const bannedPhrases = [
-    ...asStringArray3(
-      evalConfig.bannedUnsupportedPhrases,
-      "eval.bannedUnsupportedPhrases"
-    ) ?? [],
-    ...options.bannedPhrase ?? []
-  ];
-  if (bannedPhrases.length > 0) rules.push(checks.bannedUnsupportedPhrases(bannedPhrases));
-  return rules.length > 0 ? rules : void 0;
-}
-function exitCodeFor2(result) {
-  if (result.status === "pass") return 0;
-  if (result.status === "fail") return 1;
-  return 2;
-}
-function stable4(value) {
-  if (Array.isArray(value)) return value.map(stable4);
-  if (value === null || typeof value !== "object") return value;
-  const record = value;
-  return Object.fromEntries(
-    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable4(record[key])])
-  );
-}
-function printJson2(result) {
-  console.log(JSON.stringify(stable4(result), null, 2));
-}
-function printHuman2(result) {
-  console.log(`Eval status: ${result.status}`);
-  console.log(`Format: ${result.format}`);
-  if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
-  console.log(
-    `Summary: ${result.summary.failed} failed, ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
-  );
-  for (const diagnostic7 of result.diagnostics) {
-    console.log(`- ${diagnostic7.code}: ${diagnostic7.message}`);
-  }
-  for (const finding of result.findings) {
-    const path43 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path43 ? ` (${path43})` : ""}`);
-  }
-}
-function readErrorResult2(error) {
-  if (error instanceof TraceReadError) {
-    const code = error.code === "unsupported_format" ? "AI_EVAL_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_EVAL_AMBIGUOUS_FORMAT" : "AI_EVAL_TRACE_UNREADABLE";
-    return errorResult4(code, error.message);
-  }
-  return errorResult4(
-    "AI_EVAL_TRACE_UNREADABLE",
-    error instanceof Error ? error.message : String(error)
-  );
-}
-async function evalCommand(target, options = {}, stdin = process.stdin) {
-  let result;
-  let phase = "config";
-  try {
-    const config = await loadConfig2(options.config);
-    const rules = buildRules2(config, options);
-    phase = "read";
-    const input3 = await inputFromTarget(target, options, stdin);
-    const read = await openTrace(input3, {
-      ...options.format !== void 0 ? { format: options.format } : {}
-    });
-    result = await evalRun(read, {
-      ...rules !== void 0 ? { checks: rules } : {},
-      ...options.run !== void 0 ? { runId: options.run } : {}
+          { matchedPhraseCount: matches.length }
+        )
+      ] : [];
     });
-  } catch (error) {
-    if (phase === "config") {
-      const message = error instanceof Error ? error.message : String(error);
-      const code = message.startsWith("--") ? "AI_EVAL_INVALID_ARGUMENTS" : error instanceof SyntaxError || message.includes("Unsupported eval config extension") || message.includes("TypeScript eval configs") || message.includes("Config must") || message.includes("eval config") || message.includes("must be an array") ? "AI_EVAL_INVALID_CONFIG" : "AI_EVAL_CONFIG_LOAD_FAILED";
-      result = errorResult4(code, message);
-    } else {
-      result = readErrorResult2(error);
+  }
+};
+function renderEvalMarkdown(result) {
+  const lines = [
+    `# AgentInspect Eval`,
+    "",
+    `Status: ${result.status}`,
+    `Format: ${result.format}`,
+    ...result.runId !== void 0 ? [`Run: ${result.runId}`] : [],
+    `Summary: ${result.summary.passed} passed, ${result.summary.failed} failed, ${result.summary.warnings} warnings, ${result.summary.errors} errors`
+  ];
+  if (result.diagnostics.length > 0) {
+    lines.push("", "## Diagnostics");
+    for (const diagnostic7 of result.diagnostics) {
+      lines.push(`- ${diagnostic7.code}: ${diagnostic7.message}`);
     }
   }
-  process.exitCode = exitCodeFor2(result);
-  if (options.json) printJson2(result);
-  else if (options.markdown) console.log(renderEvalMarkdown(result).trimEnd());
-  else printHuman2(result);
+  if (result.findings.length > 0) {
+    lines.push("", "## Findings");
+    for (const finding of result.findings) {
+      const path44 = finding.evidence[0]?.path;
+      lines.push(`- ${finding.ruleId}: ${finding.message}${path44 ? ` (${path44})` : ""}`);
+    }
+  }
+  return `${lines.join("\n")}
+`;
 }
-var BEST_EFFORT_NOTE = "Best-effort local safety verification only; not a compliance, privacy, security, or regulatory certification.";
-var DEFAULT_MAX_STRING_LENGTH = 16384;
-var DEFAULT_MAX_ARRAY_LENGTH = 1e3;
-var DEFAULT_MAX_OBJECT_KEYS = 200;
-var DEFAULT_MAX_SERIALIZED_BYTES = 128 * 1024;
-function parseLimit3(value, label) {
+
+// packages/cli/src/eval.ts
+var CONFIG_EXTENSIONS3 = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
+var TS_CONFIG_EXTENSIONS3 = /* @__PURE__ */ new Set([".ts", ".mts", ".cts"]);
+function diagnostic6(code, message, severity = "error") {
+  return { code, message, severity };
+}
+function errorResult4(code, message, format = "unknown") {
+  return {
+    ok: false,
+    status: "error",
+    format,
+    summary: { passed: 0, failed: 0, warnings: 0, errors: 1 },
+    findings: [],
+    diagnostics: [diagnostic6(code, message)]
+  };
+}
+function parseNumber2(value, label) {
   if (value === void 0) return void 0;
   const parsed = Number(value);
   if (!Number.isFinite(parsed) || parsed < 0) {
@@ -21519,368 +22067,210 @@ function parseLimit3(value, label) {
   }
   return parsed;
 }
-function stable5(value) {
-  if (Array.isArray(value)) return value.map(stable5);
-  if (value === null || typeof value !== "object") return value;
-  const record = value;
-  return Object.fromEntries(
-    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable5(record[key])])
-  );
-}
-function safetyDiagnostic(code, message, severity = "error") {
-  return { code, message, severity };
-}
-function warningDiagnostics(warnings, unsupportedFields) {
-  return [
-    ...warnings.map(
-      (warning) => safetyDiagnostic(
-        warning.code,
-        warning.message,
-        warning.severity === "error" ? "error" : "warning"
-      )
-    ),
-    ...unsupportedFields.map(
-      (field) => safetyDiagnostic(
-        "unsupported_field",
-        `Reader reported unsupported field: ${field}`,
-        "warning"
-      )
-    )
-  ];
+function asStringArray3(value, label) {
+  if (value === void 0) return void 0;
+  if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
+    throw new Error(`${label} must be an array of strings.`);
+  }
+  return value;
 }
-function diagnosticFromCheck(item) {
-  return safetyDiagnostic(item.code, item.message, item.severity);
+function asConfig(value) {
+  if (value === void 0 || value === null) return {};
+  if (typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("Config must export an object.");
+  }
+  return value;
 }
-function statusFrom(findings, diagnostics) {
-  if (diagnostics.some((item) => item.severity === "error")) return "UNKNOWN";
-  if (findings.some((item) => item.severity === "error")) return "UNSAFE";
-  if (diagnostics.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
-  if (findings.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
-  return "SAFE";
+async function loadConfig2(configPath) {
+  if (configPath === void 0) return {};
+  const extension = path33__default.default.extname(configPath);
+  if (TS_CONFIG_EXTENSIONS3.has(extension)) {
+    throw new Error(
+      "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
+    );
+  }
+  if (!CONFIG_EXTENSIONS3.has(extension)) {
+    throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
+  }
+  const absolute = path33__default.default.resolve(configPath);
+  if (extension === ".json") {
+    const raw = await promises.readFile(absolute, "utf-8");
+    return asConfig(JSON.parse(raw));
+  }
+  const mod = await import(url.pathToFileURL(absolute).href);
+  return asConfig("default" in mod ? mod.default : mod);
 }
-function resultFromParts(parts) {
-  const findings = [...parts.findings ?? []];
-  const diagnostics = [...parts.diagnostics ?? []];
-  const warnings = [...parts.warnings ?? []];
-  const unsupportedFields = [...parts.unsupportedFields ?? []];
-  const status = parts.status ?? statusFrom(findings, diagnostics);
-  return {
-    ok: status === "SAFE" || status === "SAFE WITH WARNINGS",
-    command: parts.command,
-    status,
-    format: parts.format,
-    ...parts.runId !== void 0 ? { runId: parts.runId } : {},
-    summary: {
-      findings: findings.length,
-      warnings: diagnostics.filter((item) => item.severity === "warning").length + findings.filter((item) => item.severity === "warning").length,
-      errors: diagnostics.filter((item) => item.severity === "error").length + findings.filter((item) => item.severity === "error").length
-    },
-    findings,
-    diagnostics,
-    warnings,
-    unsupportedFields,
-    note: BEST_EFFORT_NOTE,
-    ...parts.sourceAssessment !== void 0 ? { sourceAssessment: parts.sourceAssessment } : {},
-    ...parts.artifactAssessment !== void 0 ? { artifactAssessment: parts.artifactAssessment } : {},
-    ...parts.redactionSummary !== void 0 ? { redactionSummary: parts.redactionSummary } : {}
-  };
+function normalizeConfig2(config) {
+  if (config.eval === void 0) return {};
+  if (typeof config.eval !== "object" || Array.isArray(config.eval)) {
+    throw new Error("eval config must be an object.");
+  }
+  return config.eval;
 }
-function layerFromResult(result) {
-  return {
-    status: result.status,
-    summary: result.summary,
-    findings: result.findings
-  };
+function maybeAdd(rules, value, makeRule) {
+  if (value !== void 0) rules.push(makeRule(value));
 }
-function readErrorResult3(command, error) {
-  if (error instanceof TraceReadError) {
-    const code = error.code === "unsupported_format" ? "AI_SAFETY_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_SAFETY_AMBIGUOUS_FORMAT" : "AI_SAFETY_TRACE_UNREADABLE";
-    return resultFromParts({
-      command,
-      format: "unknown",
-      diagnostics: [safetyDiagnostic(code, error.message)],
-      warnings: error.warnings
-    });
+function optionObject(value) {
+  if (value === void 0 || value === false) return void 0;
+  if (value === true) return {};
+  if (typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("Eval heuristic config must be a boolean or object.");
   }
-  return resultFromParts({
-    command,
-    format: "unknown",
-    diagnostics: [
-      safetyDiagnostic(
-        "AI_SAFETY_TRACE_UNREADABLE",
-        error instanceof Error ? error.message : String(error)
-      )
-    ]
-  });
+  return value;
 }
-function invalidArgumentResult(command, error) {
-  return resultFromParts({
-    command,
-    format: "unknown",
-    diagnostics: [
-      safetyDiagnostic(
-        "AI_SAFETY_INVALID_ARGUMENTS",
-        error instanceof Error ? error.message : String(error)
-      )
-    ]
-  });
+function sourceIdsFromConfig(value) {
+  if (value === void 0) return void 0;
+  if (Array.isArray(value)) return { ids: asStringArray3(value, "eval.requiredSourceIds") ?? [] };
+  if (typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("eval.requiredSourceIds must be an array or object.");
+  }
+  const ids = asStringArray3(value.ids, "eval.requiredSourceIds.ids") ?? [];
+  return { ids, options: { sourceIdKeys: value.sourceIdKeys } };
 }
-function buildSafetyRules(options) {
-  const maxStringLength2 = parseLimit3(options.maxStringLength, "--max-string-length") ?? DEFAULT_MAX_STRING_LENGTH;
-  const maxArrayLength = parseLimit3(options.maxArrayLength, "--max-array-length") ?? DEFAULT_MAX_ARRAY_LENGTH;
-  const maxObjectKeys = parseLimit3(options.maxObjectKeys, "--max-object-keys") ?? DEFAULT_MAX_OBJECT_KEYS;
-  const maxSerializedBytes = parseLimit3(options.maxSerializedBytes, "--max-serialized-bytes") ?? DEFAULT_MAX_SERIALIZED_BYTES;
-  return [
-    createSafetyRawContentRule(),
-    createSafetyRedactionRule(),
-    createSafetySecretPatternRule(),
-    createSafetyOversizedAttributeRule({
-      maxStringLength: maxStringLength2,
-      maxArrayLength,
-      maxObjectKeys,
-      maxSerializedBytes
-    })
+function buildRules2(config, options) {
+  const evalConfig = normalizeConfig2(config);
+  const rules = [];
+  if (evalConfig.requireSuccess || options.requireSuccess) rules.push(checks.requireSuccess());
+  const requiredTools = [
+    ...asStringArray3(evalConfig.requiredTools, "eval.requiredTools") ?? [],
+    ...options.requiredTool ?? []
   ];
-}
-function flattenNodes2(nodes) {
-  return nodes.flatMap((node) => [
-    node,
-    ...flattenNodes2(
-      node.children
-    )
-  ]);
-}
-function detectorSeverity(finding) {
-  return finding.severity;
-}
-function classifyRedactionDetector(detector) {
-  if (detector === "value.creditCard" || detector === "value.email" || detector === "value.phone") {
-    return { category: "personal-data", confidence: "high" };
+  if (requiredTools.length > 0) rules.push(checks.requiredTools(requiredTools));
+  const forbiddenTools = [
+    ...asStringArray3(evalConfig.forbiddenTools, "eval.forbiddenTools") ?? [],
+    ...options.forbidTool ?? [],
+    ...options.forbiddenTool ?? []
+  ];
+  if (forbiddenTools.length > 0) rules.push(checks.forbiddenTools(forbiddenTools));
+  const maxDurationMs = parseNumber2(options.maxDurationMs, "--max-duration-ms") ?? evalConfig.maxDurationMs;
+  maybeAdd(rules, maxDurationMs, checks.maxDurationMs);
+  const maxDepth = parseNumber2(options.maxDepth, "--max-depth") ?? evalConfig.maxDepth;
+  maybeAdd(rules, maxDepth, checks.maxDepth);
+  const maxRetries = parseNumber2(options.maxRetries, "--max-retries") ?? evalConfig.maxRetries;
+  maybeAdd(rules, maxRetries, checks.maxRetries);
+  const maxTotalTokens = parseNumber2(options.maxTotalTokens, "--max-total-tokens") ?? evalConfig.maxTotalTokens;
+  maybeAdd(rules, maxTotalTokens, checks.maxTotalTokens);
+  if (evalConfig.requiredRetrievalBeforeGeneration || options.requireRetrievalBeforeGeneration) {
+    rules.push(checks.requiredRetrievalBeforeGeneration());
   }
-  if (detector === "value.ipv4" || detector === "value.ipv6") {
-    return { category: "identifier", confidence: "medium" };
+  const requiredDecisionMetadata = [
+    ...asStringArray3(
+      evalConfig.requiredDecisionMetadata,
+      "eval.requiredDecisionMetadata"
+    ) ?? [],
+    ...options.requiredDecisionMetadata ?? []
+  ];
+  if (requiredDecisionMetadata.length > 0) {
+    rules.push(checks.requiredDecisionMetadata(requiredDecisionMetadata));
   }
-  if (detector.startsWith("value.") && (detector.includes("Token") || detector.includes("Key") || detector.includes("jwt") || detector.includes("authorization") || detector.includes("bearer") || detector.includes("cookie") || detector.includes("privateKey") || detector.includes("github") || detector.includes("aws") || detector.includes("provider"))) {
-    return { category: "credential", confidence: "high" };
+  const contextOverlap = optionObject(evalConfig.contextOverlap);
+  const minOverlap = parseNumber2(options.minContextOverlap, "--min-context-overlap");
+  const minSharedTerms = parseNumber2(options.minSharedTerms, "--min-shared-terms");
+  if (contextOverlap !== void 0 || options.contextOverlap || minOverlap !== void 0 || minSharedTerms !== void 0) {
+    rules.push(checks.contextOverlap({ ...contextOverlap, minOverlap, minSharedTerms }));
   }
-  if (detector.startsWith("key.")) {
-    return { category: "credential", confidence: "medium" };
+  const quoteOverlap = optionObject(evalConfig.quoteOverlap);
+  if (quoteOverlap !== void 0 || options.quoteOverlap) {
+    rules.push(checks.quoteOverlap(quoteOverlap));
   }
-  return { category: "credential", confidence: "medium" };
-}
-function redactionDetectorFindings(read, runId) {
-  const runs = runId === void 0 ? read.runs : read.runs.filter((run) => run.runId === runId);
-  const out = [];
-  for (const run of runs) {
-    for (const node of flattenNodes2(run.children)) {
-      const attrs = node.event.attributes;
-      if (attrs === void 0) continue;
-      const result = redact(attrs, { profile: "share" });
-      for (const finding of result.findings) {
-        if (finding.action === "keep") continue;
-        const taxonomy = classifyRedactionDetector(finding.detector);
-        out.push({
-          ruleId: "safety.redactDetector",
-          severity: detectorSeverity(finding),
-          status: finding.severity === "error" ? "fail" : "warning",
-          message: `Redaction detector ${finding.detector} matched ${finding.matchKind} at ${finding.path}.`,
-          expected: "redacted trace content",
-          actual: finding.detector,
-          evidence: [
-            {
-              runId: node.event.runId,
-              eventId: node.event.eventId,
-              ...node.event.parentId !== void 0 ? { parentId: node.event.parentId } : {},
-              kind: node.event.kind,
-              name: node.event.name,
-              ...node.event.status !== void 0 ? { status: node.event.status } : {},
-              path: `attributes.${finding.path.replace(/^\$\.?/, "")}`
-            }
-          ],
-          category: taxonomy.category,
-          confidence: taxonomy.confidence,
-          detector: finding.detector,
-          action: finding.action
-        });
-      }
-    }
+  const citationPresence = optionObject(evalConfig.citationPresence);
+  if (citationPresence !== void 0 || options.citationPresence) {
+    rules.push(checks.citationPresence(citationPresence));
   }
-  return out.sort((a, b) => {
-    const aEvidence = a.evidence[0];
-    const bEvidence = b.evidence[0];
-    return (aEvidence?.runId ?? "").localeCompare(bEvidence?.runId ?? "") || (aEvidence?.eventId ?? "").localeCompare(bEvidence?.eventId ?? "") || (aEvidence?.path ?? "").localeCompare(bEvidence?.path ?? "") || a.message.localeCompare(b.message);
-  });
+  const sourceIds = sourceIdsFromConfig(evalConfig.requiredSourceIds);
+  const requiredSourceIds = [...sourceIds?.ids ?? [], ...options.requiredSourceId ?? []];
+  if (requiredSourceIds.length > 0) {
+    rules.push(checks.requiredSourceIds(requiredSourceIds, sourceIds?.options));
+  }
+  const cliAnswerLength = {
+    minCharacters: parseNumber2(options.minAnswerCharacters, "--min-answer-characters"),
+    maxCharacters: parseNumber2(options.maxAnswerCharacters, "--max-answer-characters"),
+    minWords: parseNumber2(options.minAnswerWords, "--min-answer-words"),
+    maxWords: parseNumber2(options.maxAnswerWords, "--max-answer-words")
+  };
+  const hasCliAnswerLength = Object.values(cliAnswerLength).some((value) => value !== void 0);
+  if (evalConfig.answerLengthBounds !== void 0 || hasCliAnswerLength) {
+    rules.push(checks.answerLengthBounds({ ...evalConfig.answerLengthBounds, ...cliAnswerLength }));
+  }
+  const bannedPhrases = [
+    ...asStringArray3(
+      evalConfig.bannedUnsupportedPhrases,
+      "eval.bannedUnsupportedPhrases"
+    ) ?? [],
+    ...options.bannedPhrase ?? []
+  ];
+  if (bannedPhrases.length > 0) rules.push(checks.bannedUnsupportedPhrases(bannedPhrases));
+  return rules.length > 0 ? rules : void 0;
 }
 function exitCodeFor3(result) {
-  if (result.status === "SAFE" || result.status === "SAFE WITH WARNINGS") return 0;
-  if (result.status === "UNSAFE") return 1;
+  if (result.status === "pass") return 0;
+  if (result.status === "fail") return 1;
   return 2;
 }
-function explainFinding(finding, blocksBundle) {
-  const path43 = finding.evidence[0]?.path ?? "(unknown path)";
-  const category = finding.category ?? "structure";
-  const confidence = finding.confidence ?? "medium";
-  const detector = finding.detector ?? finding.ruleId;
-  const action = finding.action ?? "review";
-  const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
-  return [
-    `  Matched: detector=${detector}; path=${path43}; category=${category}`,
-    `  Why: ${finding.message}`,
-    `  Confidence: ${confidence}`,
-    `  Redaction: ${redactionHint}`,
-    `  Override: configure a custom redaction/detector rule locally (see docs/SAFETY-POLICY.md); do not weaken defaults globally.`,
-    `  Bundle gate: ${blocksBundle ? "blocks share-safe bundle unless --allow-unsafe" : "does not block by itself (warning/info)"}`
-  ];
+function stable5(value) {
+  if (Array.isArray(value)) return value.map(stable5);
+  if (value === null || typeof value !== "object") return value;
+  const record = value;
+  return Object.fromEntries(
+    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable5(record[key])])
+  );
 }
-function findingExplanation(finding) {
-  const blocks = finding.severity === "error" || finding.status === "fail";
-  return {
-    ruleId: finding.ruleId,
-    detector: finding.detector ?? finding.ruleId,
-    path: finding.evidence[0]?.path,
-    category: finding.category,
-    confidence: finding.confidence,
-    action: finding.action,
-    blocksBundle: blocks,
-    // Never include matched secret/PII values.
-    message: finding.message
-  };
+function printJson3(result) {
+  console.log(JSON.stringify(stable5(result), null, 2));
 }
-function printHuman3(result, explain = false) {
-  console.log(`Safety status: ${result.status}`);
+function printHuman3(result) {
+  console.log(`Eval status: ${result.status}`);
   console.log(`Format: ${result.format}`);
   if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
-  if (result.sourceAssessment !== void 0 && result.artifactAssessment !== void 0) {
-    console.log(`Source assessment: ${result.sourceAssessment.status}`);
-    console.log(`Artifact assessment: ${result.artifactAssessment.status}`);
-    if (result.redactionSummary !== void 0) {
-      console.log(
-        `Redaction: profile=${result.redactionSummary.profile}, findings=${result.redactionSummary.findings}`
-      );
-    }
-  }
   console.log(
-    `Summary: ${result.summary.findings} finding(s), ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
+    `Summary: ${result.summary.failed} failed, ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
   );
   for (const diagnostic7 of result.diagnostics) {
     console.log(`- ${diagnostic7.code}: ${diagnostic7.message}`);
   }
   for (const finding of result.findings) {
-    const path43 = finding.evidence[0]?.path;
-    const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
-    console.log(`- ${finding.ruleId}: ${finding.message}${path43 ? ` (${path43})` : ""}${taxonomy}`);
-    if (explain) {
-      const blocks = finding.severity === "error" || finding.status === "fail";
-      for (const line of explainFinding(finding, blocks)) {
-        console.log(line);
-      }
-    }
+    const path44 = finding.evidence[0]?.path;
+    console.log(`- ${finding.ruleId}: ${finding.message}${path44 ? ` (${path44})` : ""}`);
   }
-  console.log(`Note: ${result.note}`);
 }
-function printJson3(result, explain = false) {
-  const payload = explain === true ? { ...result, explanations: result.findings.map(findingExplanation) } : result;
-  console.log(JSON.stringify(stable5(payload), null, 2));
+function readErrorResult3(error) {
+  if (error instanceof TraceReadError) {
+    const code = error.code === "unsupported_format" ? "AI_EVAL_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_EVAL_AMBIGUOUS_FORMAT" : "AI_EVAL_TRACE_UNREADABLE";
+    return errorResult4(code, error.message);
+  }
+  return errorResult4(
+    "AI_EVAL_TRACE_UNREADABLE",
+    error instanceof Error ? error.message : String(error)
+  );
 }
-async function safetyCommand(command, target, options, stdin) {
+async function evalCommand(target, options = {}, stdin = process.stdin) {
   let result;
+  let phase = "config";
   try {
+    const config = await loadConfig2(options.config);
+    const rules = buildRules2(config, options);
+    phase = "read";
     const input3 = await inputFromTarget(target, options, stdin);
     const read = await openTrace(input3, {
       ...options.format !== void 0 ? { format: options.format } : {}
     });
-    const source = assessOpenedTrace(read, {
-      ...options,
+    result = await evalRun(read, {
+      ...rules !== void 0 ? { checks: rules } : {},
       ...options.run !== void 0 ? { runId: options.run } : {}
     });
-    if (command === "scan") {
-      result = { ...source, command: "scan" };
+  } catch (error) {
+    if (phase === "config") {
+      const message = error instanceof Error ? error.message : String(error);
+      const code = message.startsWith("--") ? "AI_EVAL_INVALID_ARGUMENTS" : error instanceof SyntaxError || message.includes("Unsupported eval config extension") || message.includes("TypeScript eval configs") || message.includes("Config must") || message.includes("eval config") || message.includes("must be an array") ? "AI_EVAL_INVALID_CONFIG" : "AI_EVAL_CONFIG_LOAD_FAILED";
+      result = errorResult4(code, message);
     } else {
-      const profile = options.redactionProfile ?? "share";
-      const rawContent = input3.type === "string" ? input3.content : input3.type === "file" ? await promises.readFile(input3.path, "utf-8") : void 0;
-      if (rawContent === void 0) {
-        result = {
-          ...source,
-          command: "verify-safe",
-          sourceAssessment: layerFromResult(source)
-        };
-      } else {
-        const redacted = redactTraceContent(rawContent, profile);
-        const artifactRead = await openTrace(
-          { type: "string", content: redacted.content },
-          { format: options.format ?? "agent-inspect-jsonl" }
-        );
-        const artifact = assessOpenedTrace(artifactRead, {
-          ...options,
-          ...options.run !== void 0 ? { runId: options.run } : {}
-        });
-        const detectors = [
-          ...new Set(redacted.findings.map((finding) => finding.detector))
-        ].sort((a, b) => a.localeCompare(b));
-        result = resultFromParts({
-          command: "verify-safe",
-          format: artifact.format,
-          runId: artifact.runId ?? source.runId,
-          findings: artifact.findings,
-          diagnostics: artifact.diagnostics,
-          warnings: artifact.warnings,
-          unsupportedFields: artifact.unsupportedFields,
-          status: artifact.status,
-          sourceAssessment: layerFromResult(source),
-          artifactAssessment: layerFromResult(artifact),
-          redactionSummary: {
-            profile,
-            findings: redacted.findings.length,
-            detectors
-          }
-        });
-      }
+      result = readErrorResult3(error);
     }
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    result = message.startsWith("--") ? invalidArgumentResult(command, error) : readErrorResult3(command, error);
   }
   process.exitCode = exitCodeFor3(result);
-  if (options.json) printJson3(result, options.explain === true);
-  else printHuman3(result, options.explain === true);
-}
-function scanCommand(target, options = {}, stdin = process.stdin) {
-  return safetyCommand("scan", target, options, stdin);
-}
-function verifySafeCommand(target, options = {}, stdin = process.stdin) {
-  return safetyCommand("verify-safe", target, options, stdin);
-}
-function assessOpenedTrace(read, options = {}) {
-  try {
-    const rules = buildSafetyRules(options);
-    const checkResult = runTraceChecks(
-      { read },
-      {
-        rules,
-        ...options.runId !== void 0 ? { runId: options.runId } : {},
-        ...options.run !== void 0 ? { runId: options.run } : {}
-      }
-    );
-    const detectorFindings = checkResult.diagnostics.length === 0 ? redactionDetectorFindings(read, checkResult.runId) : [];
-    return resultFromParts({
-      command: "verify-safe",
-      format: checkResult.format,
-      runId: checkResult.runId,
-      findings: [...checkResult.findings, ...detectorFindings],
-      diagnostics: [
-        ...checkResult.diagnostics.map(diagnosticFromCheck),
-        ...warningDiagnostics(read.warnings, read.unsupportedFields)
-      ],
-      warnings: read.warnings,
-      unsupportedFields: read.unsupportedFields
-    });
-  } catch (error) {
-    return messageStartsWithDash(error) ? invalidArgumentResult("verify-safe", error) : readErrorResult3("verify-safe", error);
-  }
-}
-function messageStartsWithDash(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  return message.startsWith("--");
+  if (options.json) printJson3(result);
+  else if (options.markdown) console.log(renderEvalMarkdown(result).trimEnd());
+  else printHuman3(result);
 }
 init_advanced();
 var NOTE = "Generated locally by AgentInspect. Artifacts are best-effort summaries, not compliance or security certification.";
@@ -21956,8 +22346,8 @@ function renderCheckSection(result) {
     `Diagnostics: ${result.diagnostics.length}`
   ];
   for (const finding of result.findings.slice(0, 10)) {
-    const path43 = finding.evidence[0]?.path ?? "(run)";
-    lines.push(`- ${finding.ruleId}: ${finding.message} (${path43})`);
+    const path44 = finding.evidence[0]?.path ?? "(run)";
+    lines.push(`- ${finding.ruleId}: ${finding.message} (${path44})`);
   }
   for (const diagnostic7 of result.diagnostics.slice(0, 10)) {
     lines.push(`- ${diagnostic7.code}: ${diagnostic7.message}`);
@@ -22035,8 +22425,8 @@ function renderHtml(trace, check, diff) {
 `;
 }
 async function writeArtifact(outputDir, relativePath, content, files) {
-  const outPath = path32__default.default.join(outputDir, relativePath);
-  await promises.mkdir(path32__default.default.dirname(outPath), { recursive: true });
+  const outPath = path33__default.default.join(outputDir, relativePath);
+  await promises.mkdir(path33__default.default.dirname(outPath), { recursive: true });
   await promises.writeFile(outPath, content, "utf-8");
   files.push(relativePath);
 }
@@ -22065,7 +22455,7 @@ function shouldWriteEvidence(options, status) {
   return status === "unsafe" || status === "regression" || status === "unknown" || status === "warning";
 }
 async function artifactsCommand(target, options = {}, stdin = process.stdin) {
-  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path32__default.default.resolve(options.outputDir.trim()) : "";
+  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path33__default.default.resolve(options.outputDir.trim()) : "";
   if (outputDir === "") {
     console.error("--output-dir is required.");
     process.exitCode = 1;
@@ -22205,8 +22595,8 @@ async function artifactsCommand(target, options = {}, stdin = process.stdin) {
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    await promises.mkdir(path32__default.default.dirname(path32__default.default.resolve(summaryTarget)), { recursive: true });
-    await promises.appendFile(path32__default.default.resolve(summaryTarget), `
+    await promises.mkdir(path33__default.default.dirname(path33__default.default.resolve(summaryTarget)), { recursive: true });
+    await promises.appendFile(path33__default.default.resolve(summaryTarget), `
 ${renderMarkdown(trace, check, diff)}`, "utf-8");
   }
   const manifestFiles = [...files, "manifest.json"].sort((a, b) => a.localeCompare(b));
@@ -22225,10 +22615,10 @@ ${renderMarkdown(trace, check, diff)}`, "utf-8");
       findings: diff?.findings.length ?? 0,
       diagnostics: diff?.diagnostics.length ?? 0
     },
-    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path32__default.default.resolve(summaryTarget) } : {},
+    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path33__default.default.resolve(summaryTarget) } : {},
     note: NOTE
   };
-  await promises.writeFile(path32__default.default.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
+  await promises.writeFile(path33__default.default.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
   if (options.json === true) {
     console.log(writeJson3(manifest).trimEnd());
   } else {
@@ -22289,8 +22679,8 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const location = resolveWorkspaceLocation(cwd);
       const manifest = await readWorkspaceManifestFile(location);
       if (manifest.ok && manifest.manifest) {
-        const rel = path32__default.default.relative(location.workspaceDir, normalized);
-        if (!rel.startsWith("..") && !path32__default.default.isAbsolute(rel)) {
+        const rel = path33__default.default.relative(location.workspaceDir, normalized);
+        if (!rel.startsWith("..") && !path33__default.default.isAbsolute(rel)) {
           return resolveInsideWorkspace(location.workspaceDir, rel);
         }
       }
@@ -22306,7 +22696,7 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const label = runIds.length === 1 ? sanitizeBundleRunId(runIds[0]) : `multi-${runIds.length}`;
       const base2 = resolveInsideWorkspace(
         location.workspaceDir,
-        path32__default.default.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
+        path33__default.default.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
       );
       return format === "zip" ? `${base2}.zip` : base2;
     }
@@ -22711,19 +23101,19 @@ async function bundleCommand(runIdArg, options = {}) {
     let sidecarDir = outputDir;
     if (outputDir.toLowerCase().endsWith(".html")) {
       htmlPath = outputDir;
-      sidecarDir = path32__default.default.dirname(outputDir);
+      sidecarDir = path33__default.default.dirname(outputDir);
     } else {
       await promises.mkdir(outputDir, { recursive: true });
-      htmlPath = path32__default.default.join(outputDir, EVIDENCE_HTML_FILENAME);
+      htmlPath = path33__default.default.join(outputDir, EVIDENCE_HTML_FILENAME);
       sidecarDir = outputDir;
     }
     await promises.mkdir(sidecarDir, { recursive: true });
     await promises.writeFile(htmlPath, htmlContent, "utf-8");
-    await promises.writeFile(path32__default.default.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await promises.writeFile(path33__default.default.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     outputPath = htmlPath;
   } else if (format === "zip") {
     const zipPath = outputDir.toLowerCase().endsWith(".zip") ? outputDir : `${outputDir}.zip`;
-    const zipParent = path32__default.default.dirname(zipPath);
+    const zipParent = path33__default.default.dirname(zipPath);
     await promises.mkdir(zipParent, { recursive: true });
     const entries = [
       ...[...packaged.entries()].map(([relativePath, content]) => ({
@@ -22739,10 +23129,10 @@ async function bundleCommand(runIdArg, options = {}) {
     await promises.mkdir(outputDir, { recursive: true });
     for (const [relativePath, content] of packaged.entries()) {
       const outPath = assertBundlePathContained(outputDir, relativePath);
-      await promises.mkdir(path32__default.default.dirname(outPath), { recursive: true });
+      await promises.mkdir(path33__default.default.dirname(outPath), { recursive: true });
       await promises.writeFile(outPath, content, "utf-8");
     }
-    await promises.writeFile(path32__default.default.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await promises.writeFile(path33__default.default.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     if (!files.includes(EVIDENCE_MANIFEST_FILENAME)) {
       files.push(EVIDENCE_MANIFEST_FILENAME);
     }
@@ -22791,7 +23181,7 @@ function writeJson5(value) {
 `;
 }
 async function bundleVerifyCommand(targetPath, options = {}) {
-  const root = path32__default.default.resolve(targetPath.trim() || ".");
+  const root = path33__default.default.resolve(targetPath.trim() || ".");
   const result = await verifyEvidenceDirectory(root, {
     unexpectedFiles: options.unexpected ?? "fail"
   });
@@ -22833,7 +23223,7 @@ function writeJson6(value) {
 }
 async function resolveHtmlPath(root) {
   const candidates = [
-    path32__default.default.join(root, "evidence.html"),
+    path33__default.default.join(root, "evidence.html"),
     root.toLowerCase().endsWith(".html") ? root : ""
   ].filter(Boolean);
   for (const candidate of candidates) {
@@ -22848,7 +23238,7 @@ async function resolveHtmlPath(root) {
   );
 }
 async function bundleOpenCommand(targetPath, options = {}) {
-  const root = path32__default.default.resolve(targetPath.trim() || ".");
+  const root = path33__default.default.resolve(targetPath.trim() || ".");
   try {
     await promises.access(root);
   } catch {
@@ -22865,7 +23255,7 @@ async function bundleOpenCommand(targetPath, options = {}) {
   try {
     const info = await promises.stat(root);
     if (info.isFile() && root.toLowerCase().endsWith(".html")) {
-      verifyRoot = path32__default.default.dirname(root);
+      verifyRoot = path33__default.default.dirname(root);
     }
   } catch {
   }
@@ -22897,7 +23287,7 @@ async function bundleOpenCommand(targetPath, options = {}) {
   let htmlPath;
   try {
     htmlPath = await resolveHtmlPath(
-      root.toLowerCase().endsWith(".html") ? path32__default.default.dirname(root) : root
+      root.toLowerCase().endsWith(".html") ? path33__default.default.dirname(root) : root
     );
     if (root.toLowerCase().endsWith(".html")) {
       htmlPath = root;
@@ -22913,7 +23303,7 @@ async function bundleOpenCommand(targetPath, options = {}) {
     return;
   }
   try {
-    await promises.readFile(path32__default.default.join(path32__default.default.dirname(htmlPath), "evidence.json"), "utf-8");
+    await promises.readFile(path33__default.default.join(path33__default.default.dirname(htmlPath), "evidence.json"), "utf-8");
   } catch {
   }
   const fileUrl = url.pathToFileURL(htmlPath).href;
@@ -22999,24 +23389,24 @@ function resolveTargetPath(client, projectLocal) {
   if (projectLocal) {
     switch (client) {
       case "cursor":
-        return path32__default.default.join(".cursor", "mcp.json");
+        return path33__default.default.join(".cursor", "mcp.json");
       case "claude-code":
-        return path32__default.default.join(".mcp.json");
+        return path33__default.default.join(".mcp.json");
       case "codex":
-        return path32__default.default.join(".codex", "config.toml.json");
+        return path33__default.default.join(".codex", "config.toml.json");
       case "gemini":
-        return path32__default.default.join(".gemini", "settings.json");
+        return path33__default.default.join(".gemini", "settings.json");
     }
   }
   switch (client) {
     case "cursor":
-      return path32__default.default.join("~", ".cursor", "mcp.json");
+      return path33__default.default.join("~", ".cursor", "mcp.json");
     case "claude-code":
-      return path32__default.default.join("~", ".claude.json");
+      return path33__default.default.join("~", ".claude.json");
     case "codex":
-      return path32__default.default.join("~", ".codex", "config.toml");
+      return path33__default.default.join("~", ".codex", "config.toml");
     case "gemini":
-      return path32__default.default.join("~", ".gemini", "settings.json");
+      return path33__default.default.join("~", ".gemini", "settings.json");
   }
 }
 async function mcpConfigureCommand(options) {
@@ -23040,8 +23430,8 @@ async function mcpConfigureCommand(options) {
   ];
   let wrote = false;
   if (!dryRun && projectLocal) {
-    const abs = path32__default.default.resolve(targetPath);
-    await promises.mkdir(path32__default.default.dirname(abs), { recursive: true });
+    const abs = path33__default.default.resolve(targetPath);
+    await promises.mkdir(path33__default.default.dirname(abs), { recursive: true });
     await promises.writeFile(abs, `${JSON.stringify(config, null, 2)}
 `, "utf8");
     wrote = true;
@@ -23201,23 +23591,23 @@ function readManifestDocument(value) {
   };
 }
 function cwdRelative(filePath) {
-  const relative = path32__default.default.relative(process.cwd(), path32__default.default.resolve(filePath)).replace(/\\/g, "/");
-  if (relative === "" || relative.startsWith("../") || path32__default.default.isAbsolute(relative)) {
-    return path32__default.default.basename(filePath);
+  const relative = path33__default.default.relative(process.cwd(), path33__default.default.resolve(filePath)).replace(/\\/g, "/");
+  if (relative === "" || relative.startsWith("../") || path33__default.default.isAbsolute(relative)) {
+    return path33__default.default.basename(filePath);
   }
   return relative;
 }
 async function readReporterManifest(filePath) {
-  const absolute = path32__default.default.resolve(filePath);
+  const absolute = path33__default.default.resolve(filePath);
   const raw = await promises.readFile(absolute, "utf-8");
   const document = readManifestDocument(JSON.parse(raw));
   const manifest = document.manifest;
   const results = manifest.results.map((result) => ({
     testId: safeText(result.testId),
     name: safeText(result.name),
-    ...result.file === void 0 ? {} : { file: safeText(path32__default.default.basename(result.file)) },
+    ...result.file === void 0 ? {} : { file: safeText(path33__default.default.basename(result.file)) },
     status: result.status,
-    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path32__default.default.basename(result.tracePath)) },
+    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path33__default.default.basename(result.tracePath)) },
     artifacts: result.artifacts,
     diagnostics: result.diagnostics
   }));
@@ -23356,15 +23746,15 @@ async function ciSummaryCommand(manifestPaths, options = {}) {
     return;
   }
   const markdown = renderMarkdown2(result);
-  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path32__default.default.resolve(options.output.trim()) : void 0;
+  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path33__default.default.resolve(options.output.trim()) : void 0;
   if (outputPath !== void 0) {
-    await promises.mkdir(path32__default.default.dirname(outputPath), { recursive: true });
+    await promises.mkdir(path33__default.default.dirname(outputPath), { recursive: true });
     await promises.writeFile(outputPath, markdown, "utf-8");
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    const summaryPath = path32__default.default.resolve(summaryTarget);
-    await promises.mkdir(path32__default.default.dirname(summaryPath), { recursive: true });
+    const summaryPath = path33__default.default.resolve(summaryTarget);
+    await promises.mkdir(path33__default.default.dirname(summaryPath), { recursive: true });
     await promises.appendFile(summaryPath, `
 ${markdown}`, "utf-8");
   }
@@ -23549,7 +23939,7 @@ jobs:
 }
 async function planInit(options = {}) {
   const framework = normalizeFramework(options.framework);
-  const cwd = path32__default.default.resolve(options.cwd ?? process.cwd());
+  const cwd = path33__default.default.resolve(options.cwd ?? process.cwd());
   const demoPath = framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${framework}-demo.mjs`;
   const candidates = [
     { rel: CONFIG_FILE, content: configTemplate(framework) },
@@ -23564,7 +23954,7 @@ async function planInit(options = {}) {
   }
   const files = [];
   for (const candidate of candidates) {
-    const abs = path32__default.default.join(cwd, candidate.rel);
+    const abs = path33__default.default.join(cwd, candidate.rel);
     try {
       await promises.access(abs);
       files.push({
@@ -23585,12 +23975,12 @@ async function writePlannedFiles(plan, cwd, options) {
     if (entry.action === "skip") {
       continue;
     }
-    const abs = path32__default.default.join(cwd, entry.path);
+    const abs = path33__default.default.join(cwd, entry.path);
     if (options.dryRun) {
       written.push(entry.path);
       continue;
     }
-    await promises.mkdir(path32__default.default.dirname(abs), { recursive: true });
+    await promises.mkdir(path33__default.default.dirname(abs), { recursive: true });
     const demoPath = plan.framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${plan.framework}-demo.mjs`;
     const content = entry.path === CONFIG_FILE ? configTemplate(plan.framework) : entry.path === GITKEEP ? "" : entry.path.endsWith(".yml") ? githubWorkflowTemplate(demoPath) : demoTemplate(plan.framework);
     await promises.writeFile(abs, content, "utf-8");
@@ -23599,7 +23989,7 @@ async function writePlannedFiles(plan, cwd, options) {
   return written;
 }
 async function initCommand(options = {}) {
-  const cwd = path32__default.default.resolve(options.cwd ?? process.cwd());
+  const cwd = path33__default.default.resolve(options.cwd ?? process.cwd());
   try {
     const plan = await planInit({ ...options, cwd });
     const toWrite = plan.files.filter((file) => file.action === "create").map((f) => f.path);
@@ -23694,7 +24084,7 @@ function envCheck(name, optional = true) {
   };
 }
 async function traceDirWritable(traceDir) {
-  const resolved = path32__default.default.resolve(traceDir);
+  const resolved = path33__default.default.resolve(traceDir);
   try {
     await promises.mkdir(resolved, { recursive: true });
     await promises.access(resolved, promises.constants.W_OK);
@@ -23715,10 +24105,10 @@ async function traceDirWritable(traceDir) {
   }
 }
 function readPackageVersionNearEntry(entryPath, packageName) {
-  let dir = path32__default.default.dirname(path32__default.default.resolve(entryPath));
-  const { root } = path32__default.default.parse(dir);
+  let dir = path33__default.default.dirname(path33__default.default.resolve(entryPath));
+  const { root } = path33__default.default.parse(dir);
   while (true) {
-    const candidate = path32__default.default.join(dir, "package.json");
+    const candidate = path33__default.default.join(dir, "package.json");
     if (fs.existsSync(candidate)) {
       try {
         const pkg = JSON.parse(fs.readFileSync(candidate, "utf8"));
@@ -23729,14 +24119,14 @@ function readPackageVersionNearEntry(entryPath, packageName) {
       }
     }
     if (dir === root) break;
-    const parent = path32__default.default.dirname(dir);
+    const parent = path33__default.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return void 0;
 }
 function resolveInstalledPackage(cwd, name) {
-  const require2 = module$1.createRequire(path32__default.default.join(cwd, "package.json"));
+  const require2 = module$1.createRequire(path33__default.default.join(cwd, "package.json"));
   try {
     const entry = require2.resolve(name);
     let version2;
@@ -23834,7 +24224,7 @@ function versionMismatchCheck(cwd) {
   };
 }
 async function runDoctorChecks(options = {}) {
-  const cwd = path32__default.default.resolve(options.cwd ?? process3__default.default.cwd());
+  const cwd = path33__default.default.resolve(options.cwd ?? process3__default.default.cwd());
   const traceDir = options.traceDir?.trim() || process3__default.default.env.AGENT_INSPECT_TRACE_DIR?.trim() || ".agent-inspect";
   const checks2 = [
     nodeVersionCheck(),
@@ -24074,7 +24464,7 @@ function parsePluginManifest(input3) {
   };
 }
 async function readPluginManifestFile(packageDir) {
-  const manifestPath = path32__default.default.join(packageDir, PLUGIN_MANIFEST_FILENAME);
+  const manifestPath = path33__default.default.join(packageDir, PLUGIN_MANIFEST_FILENAME);
   try {
     const raw = await promises.readFile(manifestPath, "utf8");
     const parsed = parsePluginManifest(JSON.parse(raw));
@@ -24149,7 +24539,7 @@ function createTraceDirectoryIndexer() {
 // packages/cli/src/plugins.ts
 async function readPackageName(packageDir) {
   try {
-    const raw = await promises.readFile(path32__default.default.join(packageDir, "package.json"), "utf8");
+    const raw = await promises.readFile(path33__default.default.join(packageDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     return typeof parsed.name === "string" ? parsed.name : void 0;
   } catch {
@@ -24157,7 +24547,7 @@ async function readPackageName(packageDir) {
   }
 }
 async function discoverPlugins(cwd = process.cwd()) {
-  const nodeModules = path32__default.default.join(cwd, "node_modules");
+  const nodeModules = path33__default.default.join(cwd, "node_modules");
   const found = [];
   let entries;
   try {
@@ -24168,7 +24558,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   for (const entry of entries.sort()) {
     if (entry.startsWith("@")) continue;
     if (!isPluginPackageName(entry)) continue;
-    const packageDir = path32__default.default.join(nodeModules, entry);
+    const packageDir = path33__default.default.join(nodeModules, entry);
     const manifestRead = await readPluginManifestFile(packageDir);
     found.push({
       packageName: entry,
@@ -24181,7 +24571,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   return found;
 }
 async function validatePluginPackage(packageRef, cwd = process.cwd()) {
-  const packageDir = path32__default.default.isAbsolute(packageRef) ? packageRef : path32__default.default.join(cwd, "node_modules", packageRef);
+  const packageDir = path33__default.default.isAbsolute(packageRef) ? packageRef : path33__default.default.join(cwd, "node_modules", packageRef);
   const packageName = await readPackageName(packageDir) ?? packageRef;
   const errors = [];
   const warnings = [];
@@ -24258,7 +24648,7 @@ async function pluginsValidateCommand(packageRef, cwd) {
 init_advanced();
 var INDEX_FILENAME = ".agent-inspect-index.json";
 function traceIndexPath(traceDir) {
-  return path32__default.default.join(traceDir, INDEX_FILENAME);
+  return path33__default.default.join(traceDir, INDEX_FILENAME);
 }
 function parseMaxEntries(raw) {
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -24404,7 +24794,7 @@ async function newestTraceMtimeMs2(traceDir) {
     for (const file of files) {
       if (!file.endsWith(".jsonl")) continue;
       try {
-        const s = await promises.stat(path32__default.default.join(traceDir, file));
+        const s = await promises.stat(path33__default.default.join(traceDir, file));
         if (s.mtimeMs > newest) newest = s.mtimeMs;
       } catch {
       }
@@ -24659,11 +25049,11 @@ function printJson5(value) {
   console.log(JSON.stringify(value, null, 2));
 }
 function resolveCwd(options) {
-  return path32__default.default.resolve(options.cwd ?? process.cwd());
+  return path33__default.default.resolve(options.cwd ?? process.cwd());
 }
 async function suiteInitCommand(options = {}) {
   const cwd = resolveCwd(options);
-  const configPath = path32__default.default.join(cwd, DEFAULT_CONFIG_FILENAME);
+  const configPath = path33__default.default.join(cwd, DEFAULT_CONFIG_FILENAME);
   const template = options.template?.trim();
   const suiteConfig = template !== void 0 && template !== "" ? resolveSuiteTemplate(template) : defaultSuiteConfigTemplate();
   if (options.dryRun) {
@@ -24782,13 +25172,13 @@ async function suiteListCommand(options = {}) {
 }
 async function writeSuiteArtifact(result, configOutputDir, options) {
   const cwd = resolveCwd(options);
-  const outputDir = path32__default.default.resolve(
+  const outputDir = path33__default.default.resolve(
     cwd,
     options.output ?? configOutputDir ?? DEFAULT_SUITE_ARTIFACTS_DIR
   );
   await promises.mkdir(outputDir, { recursive: true });
   const stamp = result.startedAt.replace(/[:.]/g, "-");
-  const filePath = path32__default.default.join(outputDir, `${result.suiteName}-${stamp}.json`);
+  const filePath = path33__default.default.join(outputDir, `${result.suiteName}-${stamp}.json`);
   await promises.writeFile(filePath, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
   return filePath;
@@ -24846,7 +25236,7 @@ async function loadSuiteResultFromInput(options) {
   if (options.input === void 0 || options.input.trim() === "") {
     throw new Error("Pass --input <suite-run.json> from a prior suite run.");
   }
-  const inputPath = path32__default.default.resolve(cwd, options.input.trim());
+  const inputPath = path33__default.default.resolve(cwd, options.input.trim());
   const raw = await promises.readFile(inputPath, "utf-8");
   return JSON.parse(raw);
 }
@@ -24889,9 +25279,9 @@ function normalizeMetrics2(raw) {
 }
 async function writeArtifacts(result, outputDir) {
   await promises.mkdir(outputDir, { recursive: true });
-  const jsonPath = path32__default.default.join(outputDir, "cohort-results.json");
-  const markdownPath = path32__default.default.join(outputDir, "cohort-summary.md");
-  const htmlPath = path32__default.default.join(outputDir, "cohort-report.html");
+  const jsonPath = path33__default.default.join(outputDir, "cohort-results.json");
+  const markdownPath = path33__default.default.join(outputDir, "cohort-summary.md");
+  const htmlPath = path33__default.default.join(outputDir, "cohort-report.html");
   await promises.writeFile(jsonPath, `${renderCohortReport(result, { format: "json" })}
 `, "utf-8");
   await promises.writeFile(
@@ -24920,7 +25310,7 @@ async function cohortCommand(options = {}) {
     const format = options.format ?? (options.json ? "json" : "markdown");
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts(result, path32__default.default.resolve(options.output.trim()));
+      artifacts = await writeArtifacts(result, path33__default.default.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(
@@ -24993,11 +25383,11 @@ function parseDuration2(value) {
 async function writeArtifacts2(result, outputDir) {
   await promises.mkdir(outputDir, { recursive: true });
   const paths = {
-    jsonPath: path32__default.default.join(outputDir, "gate-results.json"),
-    markdownPath: path32__default.default.join(outputDir, "gate-summary.md"),
-    htmlPath: path32__default.default.join(outputDir, "gate-report.html"),
-    junitPath: path32__default.default.join(outputDir, "junit.xml"),
-    githubPath: path32__default.default.join(outputDir, "github-step-summary.md")
+    jsonPath: path33__default.default.join(outputDir, "gate-results.json"),
+    markdownPath: path33__default.default.join(outputDir, "gate-summary.md"),
+    htmlPath: path33__default.default.join(outputDir, "gate-report.html"),
+    junitPath: path33__default.default.join(outputDir, "junit.xml"),
+    githubPath: path33__default.default.join(outputDir, "github-step-summary.md")
   };
   await promises.writeFile(
     paths.jsonPath,
@@ -25065,7 +25455,7 @@ async function gateCommand(options = {}) {
     const result = await runGate(runs, gateOptions);
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts2(result, path32__default.default.resolve(options.output.trim()));
+      artifacts = await writeArtifacts2(result, path33__default.default.resolve(options.output.trim()));
     }
     const failed = !result.ok;
     if (shouldEmitEvidence(options.evidenceOn, failed)) {
@@ -25372,7 +25762,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").option("--policy <path>", "local JSON redaction policy (extraKeys + bounded patterns)").action((target, opts) => {
     runCommand(() => scanCommand(target, opts));
   });
   program.command("verify-safe").description("Best-effort local trace safety verification").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -25381,7 +25771,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").option("--policy <path>", "local JSON redaction policy (extraKeys + bounded patterns)").action((target, opts) => {
     runCommand(() => verifySafeCommand(target, opts));
   });
   program.command("artifacts").description("Create safe local CI trace artifacts").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").requiredOption("--output-dir <path>", "directory for generated artifacts").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -25541,7 +25931,10 @@ function createCliProgram() {
       "--redaction-profile <profile>",
       "alias for --profile (canonical spelling)"
     ).choices(["local", "share", "strict"])
-  ).option("-o, --output <path>", "write redacted content to a file").option("--out <path>", "alias for --output").option("--json", "print deterministic JSON wrapper with findings").action((target, opts) => {
+  ).option("-o, --output <path>", "write redacted content to a file").option("--out <path>", "alias for --output").option("--json", "print deterministic JSON wrapper with findings").option("--policy <path>", "local JSON redaction policy (extraKeys + bounded patterns)").option(
+    "--fail-on-residual",
+    "exit non-zero when residual safety is UNSAFE or UNKNOWN (opt-in)"
+  ).action((target, opts) => {
     runCommand(() => redactCommand(target, opts));
   });
   program.command("explain").description("Explain a local trace with deterministic facts (no provider calls)").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -25723,9 +26116,9 @@ function isPrimaryModule() {
   if (!entry) return false;
   const selfPath = url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
   try {
-    return fs.realpathSync(path32__default.default.resolve(entry)) === fs.realpathSync(path32__default.default.resolve(selfPath));
+    return fs.realpathSync(path33__default.default.resolve(entry)) === fs.realpathSync(path33__default.default.resolve(selfPath));
   } catch {
-    return path32__default.default.resolve(entry) === path32__default.default.resolve(selfPath);
+    return path33__default.default.resolve(entry) === path33__default.default.resolve(selfPath);
   }
 }
 if (isPrimaryModule()) {