agent-inspect 6.17.8 → 6.18.0

package/packages/cli/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-25LUDS4T.mjs';
+import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, renderErrorLine, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-S4TLTLXN.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
-import path18 from 'path';
+import path19 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, Option } from 'commander';
 import { readFile, stat, mkdir, writeFile, unlink, appendFile, access, rm, open, readdir, constants } from 'fs/promises';
@@ -13,7 +13,7 @@ import { createServer } from 'http';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.17.8";
+var version = "6.18.0";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -481,6 +481,16 @@ function filterErrorEvents(events) {
     return false;
   });
 }
+function pruneErrorTree(nodes) {
+  const pruned = [];
+  for (const node of nodes) {
+    const children = pruneErrorTree(node.children);
+    if (node.status === "error" || children.length > 0) {
+      pruned.push({ ...node, children });
+    }
+  }
+  return pruned;
+}
 async function view(runId, options = {}) {
   try {
     const id = typeof runId === "string" && runId.trim() !== "" ? runId.trim() : "";
@@ -553,11 +563,44 @@ async function view(runId, options = {}) {
       const errEvents = filterErrorEvents(events);
       if (options.json) {
         console.log(JSON.stringify(errEvents, null, 2));
-      } else if (errEvents.length === 0) {
+        return;
+      }
+      if (errEvents.length === 0) {
         console.log("No errors found in trace");
+        return;
+      }
+      const started2 = events.find(
+        (e) => e.event === "run_started"
+      );
+      const completed2 = events.filter(
+        (e) => e.event === "run_completed"
+      );
+      const last2 = completed2[completed2.length - 1];
+      const status2 = last2 ? last2.status : "running";
+      const durationLine2 = last2 !== void 0 && Number.isFinite(last2.durationMs) ? formatDuration(last2.durationMs) : "-";
+      const startedTs2 = started2 !== void 0 && Number.isFinite(started2.startTime) ? started2.startTime : started2?.timestamp;
+      const startedLabel2 = startedTs2 !== void 0 ? formatTimestamp(startedTs2) : "-";
+      console.log(`AgentInspect Run: ${started2?.name ?? id}`);
+      console.log(`ID: ${id}`);
+      console.log(`Status: ${status2}`);
+      console.log(`Duration: ${durationLine2}`);
+      console.log(`Started: ${startedLabel2}`);
+      console.log("");
+      console.log("Error Tree:");
+      const pruned = pruneErrorTree(buildStepTree(events));
+      if (pruned.length === 0) {
+        if (last2?.status === "error") {
+          console.log(
+            renderErrorLine(
+              last2.error ?? { message: "Run completed with error status" },
+              0
+            )
+          );
+        } else {
+          console.log("No error steps recorded");
+        }
       } else {
-        console.log("Error events");
-        console.log(JSON.stringify(errEvents, null, 2));
+        printStepTree(pruned, 0, options.verbose === true);
       }
       return;
     }
@@ -2979,9 +3022,9 @@ Trace directory: ${traceDir}`);
     process.exitCode = 1;
   }
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path18.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path19.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path18.dirname(outPath), { recursive: true });
+    await mkdir(path19.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     const vlabel = validation !== void 0 ? validation.ok ? "ok" : "failed" : "skipped";
     console.log(`Wrote ${result.fileExtension} export to ${outPath} (validation: ${vlabel})`);
@@ -3325,7 +3368,7 @@ function indexedToMetadata(row, traceDir) {
     endedAt: row.endedAt ?? void 0,
     durationMs: row.durationMs ?? void 0,
     eventCount: 0,
-    filePath: path18.join(traceDir, row.file),
+    filePath: path19.join(traceDir, row.file),
     fileSize: 0,
     createdAt: new Date(row.mtimeMs)
   };
@@ -3354,7 +3397,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-2FS6BLR7.mjs');
+    const mod = await import('./src-R6V5EZZH.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -3803,9 +3846,9 @@ async function reportCommand(runId, options = {}) {
     ...options.section ? { section: options.section } : {}
   });
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path18.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path19.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path18.dirname(outPath), { recursive: true });
+    await mkdir(path19.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     console.log(`Wrote ${result.fileExtension} report to ${outPath}`);
   }
@@ -4000,8 +4043,8 @@ function passesLuhn(value) {
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var EPOCH_MS_RE = /^1[0-9]{12}$/;
 var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
-function pathSuggestsNonCard(path29) {
-  const normalized = path29.toLowerCase().replace(/[^a-z0-9._]/g, "");
+function pathSuggestsNonCard(path30) {
+  const normalized = path30.toLowerCase().replace(/[^a-z0-9._]/g, "");
   return /(^|\.)(tokenusage|usage)(\.|$)/.test(normalized) || /(startedat|endedat|durationms|timestamp|createdat|updatedat)(\.|$)/.test(normalized) || /(^|\.)(runid|traceid|spanid|eventid|sessionid|userid|parentid|requestid|correlationid)(\.|$)/.test(
     normalized
   ) || /(^|\.)ts(\.|$)/.test(normalized);
@@ -4197,17 +4240,17 @@ function applyRule(rule, value, replacement) {
   }
   return value;
 }
-function childPath(path29, key) {
+function childPath(path30, key) {
   if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)) {
-    return path29 ? `${path29}.${key}` : key;
+    return path30 ? `${path30}.${key}` : key;
   }
-  return `${path29 || "$"}[${JSON.stringify(key)}]`;
+  return `${path30 || "$"}[${JSON.stringify(key)}]`;
 }
-function indexPath(path29, index) {
-  return `${path29 || "$"}[${index}]`;
+function indexPath(path30, index) {
+  return `${path30 || "$"}[${index}]`;
 }
-function makeFinding(path29, detector, action, matchKind, severity = "warning", preview) {
-  return preview === void 0 ? { path: path29, detector, action, severity, matchKind } : { path: path29, detector, action, severity, matchKind, preview };
+function makeFinding(path30, detector, action, matchKind, severity = "warning", preview) {
+  return preview === void 0 ? { path: path30, detector, action, severity, matchKind } : { path: path30, detector, action, severity, matchKind, preview };
 }
 function createRedactionProfile(profile = "local") {
   switch (profile) {
@@ -4276,11 +4319,11 @@ var Redactor2 = class {
   #recordFinding(state, finding) {
     if (this.#collectFindings) state.findings.push(finding);
   }
-  #redactValue(value, key, path29, depth, state) {
+  #redactValue(value, key, path30, depth, state) {
     if (depth > this.#maxDepth) {
       this.#recordFinding(
         state,
-        makeFinding(path29, "structure.maxDepth", "truncate", "value", "warning")
+        makeFinding(path30, "structure.maxDepth", "truncate", "value", "warning")
       );
       return "[Truncated]";
     }
@@ -4289,19 +4332,19 @@ var Redactor2 = class {
       if (rule) {
         this.#recordFinding(
           state,
-          makeFinding(path29, `key.${rule.key}`, actionForRule(rule), "key", "warning")
+          makeFinding(path30, `key.${rule.key}`, actionForRule(rule), "key", "warning")
         );
         return applyRule(rule, value, this.#replacement);
       }
     }
     for (const detector of this.#detectors) {
-      const detections = detector.detect({ path: path29, key, value });
+      const detections = detector.detect({ path: path30, key, value });
       for (const detection of detections) {
         const action = detection.action ?? "replace";
         this.#recordFinding(
           state,
           makeFinding(
-            path29,
+            path30,
             detector.id,
             action,
             detection.matchKind ?? detector.matchKind ?? "custom",
@@ -4319,7 +4362,7 @@ var Redactor2 = class {
       const out = [];
       state.seen.set(value, out);
       value.forEach((item, index) => {
-        out[index] = this.#redactValue(item, void 0, indexPath(path29, index), depth + 1, state);
+        out[index] = this.#redactValue(item, void 0, indexPath(path30, index), depth + 1, state);
       });
       return out;
     }
@@ -4331,7 +4374,7 @@ var Redactor2 = class {
         out[entryKey] = this.#redactValue(
           entryValue,
           entryKey,
-          childPath(path29 === "$" ? "" : path29, entryKey),
+          childPath(path30 === "$" ? "" : path30, entryKey),
           depth + 1,
           state
         );
@@ -4347,6 +4390,230 @@ function createRedactor(options) {
 function redact(value, options) {
   return createRedactor(options).redact(value);
 }
+var REDACTION_POLICY_LIMITS = {
+  maxExtraKeys: 64,
+  maxKeyLength: 64,
+  maxPatterns: 32,
+  maxPatternLength: 128,
+  maxPatternIdLength: 64,
+  maxTypedQuantifier: 64
+};
+var SAFE_TYPED_PATTERN = /^[A-Za-z0-9_@./:=<>\-[\]()|+*?{},\\\s^$]+$/;
+function isRecord6(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function rejectRemotePolicyPath(policyPath) {
+  const trimmed = policyPath.trim();
+  if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) {
+    throw new Error(
+      `--policy must be a local JSON file path (got a URL-like value). Remote policy fetch is not supported.`
+    );
+  }
+}
+function parseSeverity(value, label) {
+  if (value === void 0) return "error";
+  if (value === "info" || value === "warning" || value === "error") return value;
+  throw new Error(`${label} severity must be info, warning, or error.`);
+}
+function validateExtraKey(key, index) {
+  const label = `extraKeys[${index}]`;
+  if (key.length === 0) throw new Error(`${label} must be a non-empty string.`);
+  if (key.length > REDACTION_POLICY_LIMITS.maxKeyLength) {
+    throw new Error(
+      `${label} exceeds max length ${REDACTION_POLICY_LIMITS.maxKeyLength}.`
+    );
+  }
+  if (!/^[A-Za-z_][A-Za-z0-9_.-]*$/.test(key)) {
+    throw new Error(
+      `${label} must be an identifier-like key (letters, digits, _, ., -).`
+    );
+  }
+  return key;
+}
+function assertBoundedTypedPattern(pattern, label) {
+  if (pattern.length === 0) throw new Error(`${label} must be non-empty.`);
+  if (pattern.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
+    throw new Error(
+      `${label} exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
+    );
+  }
+  if (!SAFE_TYPED_PATTERN.test(pattern)) {
+    throw new Error(
+      `${label} contains unsupported characters for bounded typed patterns.`
+    );
+  }
+  if (/\(\?/.test(pattern) || /\\[1-9]/.test(pattern)) {
+    throw new Error(
+      `${label} rejects lookaround, backreferences, and nested quantifiers.`
+    );
+  }
+  if (/\([^)]*[+*{][^)]*\)[+*{]/.test(pattern) || /\[[^\]]*[+*{][^\]]*\][+*{]/.test(pattern)) {
+    throw new Error(`${label} rejects nested quantifiers.`);
+  }
+  if (/\.[*+]/.test(pattern) || /[*+]\{/.test(pattern)) {
+    throw new Error(`${label} rejects unbounded .* / .+ style quantifiers.`);
+  }
+  for (const match of pattern.matchAll(/\{(\d+)(?:,(\d*))?\}/g)) {
+    const min = Number(match[1]);
+    const maxRaw = match[2];
+    const max = maxRaw === void 0 || maxRaw === "" ? min : Number(maxRaw);
+    if (!Number.isFinite(min) || !Number.isFinite(max) || min > REDACTION_POLICY_LIMITS.maxTypedQuantifier || max > REDACTION_POLICY_LIMITS.maxTypedQuantifier) {
+      throw new Error(
+        `${label} quantifiers must be <= ${REDACTION_POLICY_LIMITS.maxTypedQuantifier}.`
+      );
+    }
+  }
+}
+function compilePatternDetector(input3, index) {
+  const label = `patterns[${index}]`;
+  if (!isRecord6(input3)) throw new Error(`${label} must be an object.`);
+  const idRaw = input3.id;
+  if (typeof idRaw !== "string" || idRaw.trim() === "") {
+    throw new Error(`${label}.id must be a non-empty string.`);
+  }
+  const id = idRaw.trim();
+  if (id.length > REDACTION_POLICY_LIMITS.maxPatternIdLength) {
+    throw new Error(
+      `${label}.id exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternIdLength}.`
+    );
+  }
+  if (!/^[A-Za-z][A-Za-z0-9._-]*$/.test(id)) {
+    throw new Error(`${label}.id must be an identifier-like detector id.`);
+  }
+  const type = input3.type;
+  if (type !== "literal" && type !== "prefix" && type !== "typed") {
+    throw new Error(`${label}.type must be literal, prefix, or typed.`);
+  }
+  const severity = parseSeverity(input3.severity, label);
+  let source;
+  if (type === "typed") {
+    if (typeof input3.pattern !== "string") {
+      throw new Error(`${label}.pattern must be a string for typed patterns.`);
+    }
+    assertBoundedTypedPattern(input3.pattern, `${label}.pattern`);
+    source = input3.pattern;
+  } else {
+    if (typeof input3.value !== "string") {
+      throw new Error(`${label}.value must be a string for ${type} patterns.`);
+    }
+    if (input3.value.length === 0) {
+      throw new Error(`${label}.value must be non-empty.`);
+    }
+    if (input3.value.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
+      throw new Error(
+        `${label}.value exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
+      );
+    }
+    const escaped = escapeRegExp(input3.value);
+    source = type === "prefix" ? `^${escaped}` : escaped;
+  }
+  let regex;
+  try {
+    regex = new RegExp(source);
+  } catch (error) {
+    throw new Error(
+      `${label} failed to compile: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  return {
+    id: `policy.${id}`,
+    severity,
+    matchKind: "custom",
+    detect({ value }) {
+      if (typeof value !== "string") return [];
+      regex.lastIndex = 0;
+      return regex.test(value) ? [{ action: "replace", severity, matchKind: "custom" }] : [];
+    }
+  };
+}
+function compileRedactionPolicy(raw, policyPath) {
+  if (!isRecord6(raw)) {
+    throw new Error(`Redaction policy must be a JSON object (${policyPath}).`);
+  }
+  const diagnostics = [];
+  if (raw.version !== void 0 && raw.version !== 1) {
+    throw new Error(`Unsupported redaction policy version (supported: 1).`);
+  }
+  const extraKeysRaw = raw.extraKeys;
+  const extraKeys = [];
+  if (extraKeysRaw !== void 0) {
+    if (!Array.isArray(extraKeysRaw)) {
+      throw new Error(`extraKeys must be an array of strings.`);
+    }
+    if (extraKeysRaw.length > REDACTION_POLICY_LIMITS.maxExtraKeys) {
+      throw new Error(
+        `extraKeys exceeds max count ${REDACTION_POLICY_LIMITS.maxExtraKeys}.`
+      );
+    }
+    for (let i = 0; i < extraKeysRaw.length; i += 1) {
+      const key = extraKeysRaw[i];
+      if (typeof key !== "string") {
+        throw new Error(`extraKeys[${i}] must be a string.`);
+      }
+      extraKeys.push(validateExtraKey(key, i));
+    }
+  }
+  const patternsRaw = raw.patterns;
+  const detectors = [];
+  if (patternsRaw !== void 0) {
+    if (!Array.isArray(patternsRaw)) {
+      throw new Error(`patterns must be an array.`);
+    }
+    if (patternsRaw.length > REDACTION_POLICY_LIMITS.maxPatterns) {
+      throw new Error(
+        `patterns exceeds max count ${REDACTION_POLICY_LIMITS.maxPatterns}.`
+      );
+    }
+    const seenIds = /* @__PURE__ */ new Set();
+    for (let i = 0; i < patternsRaw.length; i += 1) {
+      const detector = compilePatternDetector(
+        patternsRaw[i],
+        i
+      );
+      if (seenIds.has(detector.id)) {
+        throw new Error(`Duplicate pattern id "${detector.id}".`);
+      }
+      seenIds.add(detector.id);
+      detectors.push(detector);
+    }
+  }
+  if (extraKeys.length === 0 && detectors.length === 0) {
+    diagnostics.push({
+      code: "AI_POLICY_EMPTY",
+      message: "Redaction policy contained no extraKeys or patterns."
+    });
+  }
+  return {
+    path: policyPath,
+    extraKeys,
+    detectors,
+    diagnostics
+  };
+}
+async function loadRedactionPolicy(policyPath) {
+  rejectRemotePolicyPath(policyPath);
+  const resolved = path19.resolve(policyPath);
+  let text;
+  try {
+    text = await readFile(resolved, "utf-8");
+  } catch (error) {
+    throw new Error(
+      `Failed to read --policy file "${resolved}": ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error) {
+    throw new Error(
+      `Invalid JSON in --policy file "${resolved}": ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  return compileRedactionPolicy(parsed, resolved);
+}
 async function readStdin(stdin) {
   stdin.setEncoding("utf8");
   let content = "";
@@ -4375,12 +4642,19 @@ async function inputFromTarget(target, options, stdin) {
   return { type: "file", path: runPath };
 }
 
-// packages/cli/src/redact.ts
-function parseRedactionProfile3(value) {
-  if (value === void 0 || value === "local" || value === "share" || value === "strict") {
-    return value ?? "share";
+// packages/cli/src/safety.ts
+var BEST_EFFORT_NOTE = "Best-effort local safety verification only; not a compliance, privacy, security, or regulatory certification.";
+var DEFAULT_MAX_STRING_LENGTH = 16384;
+var DEFAULT_MAX_ARRAY_LENGTH = 1e3;
+var DEFAULT_MAX_OBJECT_KEYS = 200;
+var DEFAULT_MAX_SERIALIZED_BYTES = 128 * 1024;
+function parseLimit3(value, label) {
+  if (value === void 0) return void 0;
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed) || parsed < 0) {
+    throw new Error(`${label} must be a non-negative number.`);
   }
-  throw new Error(`Unsupported --profile "${value}". Use local, share, or strict.`);
+  return parsed;
 }
 function stable(value) {
   if (Array.isArray(value)) return value.map(stable);
@@ -4390,103 +4664,585 @@ function stable(value) {
     Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable(record[key])])
   );
 }
-function isMissingFileError3(error) {
-  return error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT";
+function safetyDiagnostic(code, message, severity = "error") {
+  return { code, message, severity };
 }
-async function contentFromTarget(target, options, stdin) {
-  if (target === "-") {
-    return { content: await readStdin(stdin), source: "stdin" };
-  }
-  try {
-    const stats2 = await stat(target);
-    if (stats2.isDirectory()) {
-      throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
-    }
-    return { content: await readFile(target, "utf-8"), source: target };
-  } catch (error) {
-    if (!isMissingFileError3(error)) throw error;
-  }
-  const runPath = getTraceFilePath(target, resolveTraceDir({ dir: options.dir }));
-  const stats = await stat(runPath);
-  if (stats.isDirectory()) {
-    throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
-  }
-  return { content: await readFile(runPath, "utf-8"), source: runPath };
+function warningDiagnostics(warnings, unsupportedFields) {
+  return [
+    ...warnings.map(
+      (warning) => safetyDiagnostic(
+        warning.code,
+        warning.message,
+        warning.severity === "error" ? "error" : "warning"
+      )
+    ),
+    ...unsupportedFields.map(
+      (field) => safetyDiagnostic(
+        "unsupported_field",
+        `Reader reported unsupported field: ${field}`,
+        "warning"
+      )
+    )
+  ];
 }
-function redactJsonText(content, profile) {
-  const parsed = JSON.parse(content);
-  const result = redact(parsed, { profile });
+function diagnosticFromCheck(item) {
+  return safetyDiagnostic(item.code, item.message, item.severity);
+}
+function statusFrom(findings, diagnostics) {
+  if (diagnostics.some((item) => item.severity === "error")) return "UNKNOWN";
+  if (findings.some((item) => item.severity === "error")) return "UNSAFE";
+  if (diagnostics.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
+  if (findings.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
+  return "SAFE";
+}
+function resultFromParts(parts) {
+  const findings = [...parts.findings ?? []];
+  const diagnostics = [...parts.diagnostics ?? []];
+  const warnings = [...parts.warnings ?? []];
+  const unsupportedFields = [...parts.unsupportedFields ?? []];
+  const status = parts.status ?? statusFrom(findings, diagnostics);
   return {
-    content: `${JSON.stringify(result.value, null, 2)}
-`,
-    findings: result.findings
+    ok: status === "SAFE" || status === "SAFE WITH WARNINGS",
+    command: parts.command,
+    status,
+    format: parts.format,
+    ...parts.runId !== void 0 ? { runId: parts.runId } : {},
+    summary: {
+      findings: findings.length,
+      warnings: diagnostics.filter((item) => item.severity === "warning").length + findings.filter((item) => item.severity === "warning").length,
+      errors: diagnostics.filter((item) => item.severity === "error").length + findings.filter((item) => item.severity === "error").length
+    },
+    findings,
+    diagnostics,
+    warnings,
+    unsupportedFields,
+    note: BEST_EFFORT_NOTE,
+    ...parts.sourceAssessment !== void 0 ? { sourceAssessment: parts.sourceAssessment } : {},
+    ...parts.artifactAssessment !== void 0 ? { artifactAssessment: parts.artifactAssessment } : {},
+    ...parts.redactionSummary !== void 0 ? { redactionSummary: parts.redactionSummary } : {}
   };
 }
-function redactJsonlText(content, profile) {
-  const lines = content.split(/\r?\n/);
-  const out = [];
-  const findings = [];
-  for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index] ?? "";
-    if (line.trim() === "") continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch {
-      throw new Error(`Input is not valid JSON or JSONL at line ${index + 1}.`);
-    }
-    const result = redact(parsed, { profile });
-    out.push(JSON.stringify(result.value));
-    findings.push(
-      ...result.findings.map((finding) => ({
-        ...finding,
-        path: `line:${index + 1}:${finding.path}`
-      }))
-    );
-  }
+function layerFromResult(result) {
   return {
-    content: out.length === 0 ? "" : `${out.join("\n")}
-`,
-    findings
+    status: result.status,
+    summary: result.summary,
+    findings: result.findings
   };
 }
-function redactDocument(content, profile) {
-  const trimmed = content.trim();
-  if (trimmed.startsWith("{")) {
-    try {
-      const parsed = JSON.parse(trimmed);
-      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed)) {
-        return redactJsonlText(content, profile);
-      }
-    } catch {
-    }
-  }
-  try {
-    return redactJsonText(content, profile);
-  } catch {
-    return redactJsonlText(content, profile);
+function readErrorResult(command, error) {
+  if (error instanceof TraceReadError) {
+    const code = error.code === "unsupported_format" ? "AI_SAFETY_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_SAFETY_AMBIGUOUS_FORMAT" : "AI_SAFETY_TRACE_UNREADABLE";
+    return resultFromParts({
+      command,
+      format: "unknown",
+      diagnostics: [safetyDiagnostic(code, error.message)],
+      warnings: error.warnings
+    });
   }
-}
-function redactTraceContent(content, profile) {
-  return redactDocument(content, profile);
-}
-async function redactCommand(target, options = {}, stdin = process.stdin) {
-  const profile = parseRedactionProfile3(resolveRedactionProfileOption(options));
-  const source = await contentFromTarget(target, options, stdin);
-  const redacted = redactDocument(source.content, profile);
-  const outputPath = resolveOutputOption(options);
+  return resultFromParts({
+    command,
+    format: "unknown",
+    diagnostics: [
+      safetyDiagnostic(
+        "AI_SAFETY_TRACE_UNREADABLE",
+        error instanceof Error ? error.message : String(error)
+      )
+    ]
+  });
+}
+function invalidArgumentResult(command, error) {
+  return resultFromParts({
+    command,
+    format: "unknown",
+    diagnostics: [
+      safetyDiagnostic(
+        "AI_SAFETY_INVALID_ARGUMENTS",
+        error instanceof Error ? error.message : String(error)
+      )
+    ]
+  });
+}
+function buildSafetyRules(options) {
+  const maxStringLength2 = parseLimit3(options.maxStringLength, "--max-string-length") ?? DEFAULT_MAX_STRING_LENGTH;
+  const maxArrayLength = parseLimit3(options.maxArrayLength, "--max-array-length") ?? DEFAULT_MAX_ARRAY_LENGTH;
+  const maxObjectKeys = parseLimit3(options.maxObjectKeys, "--max-object-keys") ?? DEFAULT_MAX_OBJECT_KEYS;
+  const maxSerializedBytes = parseLimit3(options.maxSerializedBytes, "--max-serialized-bytes") ?? DEFAULT_MAX_SERIALIZED_BYTES;
+  return [
+    createSafetyRawContentRule(),
+    createSafetyRedactionRule(),
+    createSafetySecretPatternRule(),
+    createSafetyOversizedAttributeRule({
+      maxStringLength: maxStringLength2,
+      maxArrayLength,
+      maxObjectKeys,
+      maxSerializedBytes
+    })
+  ];
+}
+function flattenNodes(nodes) {
+  return nodes.flatMap((node) => [
+    node,
+    ...flattenNodes(
+      node.children
+    )
+  ]);
+}
+function detectorSeverity(finding) {
+  return finding.severity;
+}
+function classifyRedactionDetector(detector) {
+  if (detector === "value.creditCard" || detector === "value.email" || detector === "value.phone") {
+    return { category: "personal-data", confidence: "high" };
+  }
+  if (detector === "value.ipv4" || detector === "value.ipv6") {
+    return { category: "identifier", confidence: "medium" };
+  }
+  if (detector.startsWith("value.") && (detector.includes("Token") || detector.includes("Key") || detector.includes("jwt") || detector.includes("authorization") || detector.includes("bearer") || detector.includes("cookie") || detector.includes("privateKey") || detector.includes("github") || detector.includes("aws") || detector.includes("provider"))) {
+    return { category: "credential", confidence: "high" };
+  }
+  if (detector.startsWith("key.")) {
+    return { category: "credential", confidence: "medium" };
+  }
+  return { category: "credential", confidence: "medium" };
+}
+function redactionOptionsFromPolicy(policy) {
+  if (policy === void 0) return {};
+  return {
+    ...policy.extraKeys.length > 0 ? { extraKeys: [...policy.extraKeys] } : {},
+    ...policy.detectors.length > 0 ? { detectors: [...policy.detectors] } : {}
+  };
+}
+function redactionDetectorFindings(read, runId, policy) {
+  const runs = runId === void 0 ? read.runs : read.runs.filter((run) => run.runId === runId);
+  const out = [];
+  const policyOptions = redactionOptionsFromPolicy(policy);
+  for (const run of runs) {
+    for (const node of flattenNodes(run.children)) {
+      const attrs = node.event.attributes;
+      if (attrs === void 0) continue;
+      const result = createRedactor({
+        profile: "share",
+        ...policyOptions
+      }).redact(attrs);
+      for (const finding of result.findings) {
+        if (finding.action === "keep") continue;
+        const taxonomy = classifyRedactionDetector(finding.detector);
+        out.push({
+          ruleId: "safety.redactDetector",
+          severity: detectorSeverity(finding),
+          status: finding.severity === "error" ? "fail" : "warning",
+          message: `Redaction detector ${finding.detector} matched ${finding.matchKind} at ${finding.path}.`,
+          expected: "redacted trace content",
+          actual: finding.detector,
+          evidence: [
+            {
+              runId: node.event.runId,
+              eventId: node.event.eventId,
+              ...node.event.parentId !== void 0 ? { parentId: node.event.parentId } : {},
+              kind: node.event.kind,
+              name: node.event.name,
+              ...node.event.status !== void 0 ? { status: node.event.status } : {},
+              path: `attributes.${finding.path.replace(/^\$\.?/, "")}`
+            }
+          ],
+          category: taxonomy.category,
+          confidence: taxonomy.confidence,
+          detector: finding.detector,
+          action: finding.action
+        });
+      }
+    }
+  }
+  return out.sort((a, b) => {
+    const aEvidence = a.evidence[0];
+    const bEvidence = b.evidence[0];
+    return (aEvidence?.runId ?? "").localeCompare(bEvidence?.runId ?? "") || (aEvidence?.eventId ?? "").localeCompare(bEvidence?.eventId ?? "") || (aEvidence?.path ?? "").localeCompare(bEvidence?.path ?? "") || a.message.localeCompare(b.message);
+  });
+}
+function exitCodeFor(result) {
+  if (result.status === "SAFE" || result.status === "SAFE WITH WARNINGS") return 0;
+  if (result.status === "UNSAFE") return 1;
+  return 2;
+}
+function toResidualStatus(status) {
+  if (status === "SAFE WITH WARNINGS") return "SAFE_WITH_WARNINGS";
+  return status;
+}
+function toResidualSafetyAssessment(result) {
+  const codes = [
+    .../* @__PURE__ */ new Set([
+      ...result.diagnostics.map((item) => item.code),
+      ...result.findings.map((item) => item.ruleId)
+    ])
+  ].sort((a, b) => a.localeCompare(b));
+  return {
+    status: toResidualStatus(result.status),
+    findings: result.summary.findings,
+    warnings: result.summary.warnings,
+    errors: result.summary.errors,
+    codes,
+    note: BEST_EFFORT_NOTE
+  };
+}
+async function assessResidualFromContent(content, options = {}) {
+  try {
+    const policy = options.compiledPolicy ?? (options.policy !== void 0 ? await loadRedactionPolicy(options.policy) : void 0);
+    const read = await openTrace(
+      { type: "string", content },
+      { format: options.format ?? "agent-inspect-jsonl" }
+    );
+    const result = assessOpenedTrace(read, {
+      ...options,
+      ...policy !== void 0 ? { compiledPolicy: policy } : {}
+    });
+    return toResidualSafetyAssessment(result);
+  } catch (error) {
+    if (error instanceof TraceReadError) {
+      return toResidualSafetyAssessment(readErrorResult("verify-safe", error));
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    return {
+      status: "UNKNOWN",
+      findings: 0,
+      warnings: 0,
+      errors: 1,
+      codes: ["AI_SAFETY_TRACE_UNREADABLE"],
+      note: `${BEST_EFFORT_NOTE} Residual assessment requires a supported AgentInspect trace; ${message}`
+    };
+  }
+}
+function explainFinding(finding, blocksBundle) {
+  const path30 = finding.evidence[0]?.path ?? "(unknown path)";
+  const category = finding.category ?? "structure";
+  const confidence = finding.confidence ?? "medium";
+  const detector = finding.detector ?? finding.ruleId;
+  const action = finding.action ?? "review";
+  const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
+  return [
+    `  Matched: detector=${detector}; path=${path30}; category=${category}`,
+    `  Why: ${finding.message}`,
+    `  Confidence: ${confidence}`,
+    `  Redaction: ${redactionHint}`,
+    `  Override: configure a custom redaction/detector rule locally (see docs/SAFETY-POLICY.md); do not weaken defaults globally.`,
+    `  Bundle gate: ${blocksBundle ? "blocks share-safe bundle unless --allow-unsafe" : "does not block by itself (warning/info)"}`
+  ];
+}
+function findingExplanation(finding) {
+  const blocks = finding.severity === "error" || finding.status === "fail";
+  return {
+    ruleId: finding.ruleId,
+    detector: finding.detector ?? finding.ruleId,
+    path: finding.evidence[0]?.path,
+    category: finding.category,
+    confidence: finding.confidence,
+    action: finding.action,
+    blocksBundle: blocks,
+    // Never include matched secret/PII values.
+    message: finding.message
+  };
+}
+function printHuman(result, explain = false) {
+  console.log(`Safety status: ${result.status}`);
+  console.log(`Format: ${result.format}`);
+  if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
+  if (result.sourceAssessment !== void 0 && result.artifactAssessment !== void 0) {
+    console.log(`Source assessment: ${result.sourceAssessment.status}`);
+    console.log(`Artifact assessment: ${result.artifactAssessment.status}`);
+    if (result.redactionSummary !== void 0) {
+      console.log(
+        `Redaction: profile=${result.redactionSummary.profile}, findings=${result.redactionSummary.findings}`
+      );
+    }
+  }
+  console.log(
+    `Summary: ${result.summary.findings} finding(s), ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
+  );
+  for (const diagnostic3 of result.diagnostics) {
+    console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
+  }
+  for (const finding of result.findings) {
+    const path30 = finding.evidence[0]?.path;
+    const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
+    console.log(`- ${finding.ruleId}: ${finding.message}${path30 ? ` (${path30})` : ""}${taxonomy}`);
+    if (explain) {
+      const blocks = finding.severity === "error" || finding.status === "fail";
+      for (const line of explainFinding(finding, blocks)) {
+        console.log(line);
+      }
+    }
+  }
+  console.log(`Note: ${result.note}`);
+}
+function printJson(result, explain = false) {
+  const payload = explain === true ? { ...result, explanations: result.findings.map(findingExplanation) } : result;
+  console.log(JSON.stringify(stable(payload), null, 2));
+}
+async function safetyCommand(command, target, options, stdin) {
+  let result;
+  try {
+    const policy = options.compiledPolicy ?? (options.policy !== void 0 ? await loadRedactionPolicy(options.policy) : void 0);
+    const optionsWithPolicy = {
+      ...options,
+      ...policy !== void 0 ? { compiledPolicy: policy } : {}
+    };
+    const input3 = await inputFromTarget(target, optionsWithPolicy, stdin);
+    const read = await openTrace(input3, {
+      ...options.format !== void 0 ? { format: options.format } : {}
+    });
+    const source = assessOpenedTrace(read, {
+      ...optionsWithPolicy,
+      ...options.run !== void 0 ? { runId: options.run } : {}
+    });
+    if (command === "scan") {
+      result = { ...source, command: "scan" };
+    } else {
+      const profile = options.redactionProfile ?? "share";
+      const rawContent = input3.type === "string" ? input3.content : input3.type === "file" ? await readFile(input3.path, "utf-8") : void 0;
+      if (rawContent === void 0) {
+        result = {
+          ...source,
+          command: "verify-safe",
+          sourceAssessment: layerFromResult(source)
+        };
+      } else {
+        const redacted = redactTraceContent(rawContent, profile, policy);
+        const artifactRead = await openTrace(
+          { type: "string", content: redacted.content },
+          { format: options.format ?? "agent-inspect-jsonl" }
+        );
+        const artifact = assessOpenedTrace(artifactRead, {
+          ...optionsWithPolicy,
+          ...options.run !== void 0 ? { runId: options.run } : {}
+        });
+        const detectors = [
+          ...new Set(redacted.findings.map((finding) => finding.detector))
+        ].sort((a, b) => a.localeCompare(b));
+        result = resultFromParts({
+          command: "verify-safe",
+          format: artifact.format,
+          runId: artifact.runId ?? source.runId,
+          findings: artifact.findings,
+          diagnostics: artifact.diagnostics,
+          warnings: artifact.warnings,
+          unsupportedFields: artifact.unsupportedFields,
+          status: artifact.status,
+          sourceAssessment: layerFromResult(source),
+          artifactAssessment: layerFromResult(artifact),
+          redactionSummary: {
+            profile,
+            findings: redacted.findings.length,
+            detectors
+          }
+        });
+      }
+    }
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    result = message.startsWith("--") || message.includes("--policy") ? invalidArgumentResult(command, error) : readErrorResult(command, error);
+  }
+  process.exitCode = exitCodeFor(result);
+  if (options.json) printJson(result, options.explain === true);
+  else printHuman(result, options.explain === true);
+}
+function scanCommand(target, options = {}, stdin = process.stdin) {
+  return safetyCommand("scan", target, options, stdin);
+}
+function verifySafeCommand(target, options = {}, stdin = process.stdin) {
+  return safetyCommand("verify-safe", target, options, stdin);
+}
+function assessOpenedTrace(read, options = {}) {
+  try {
+    const rules = buildSafetyRules(options);
+    const checkResult = runTraceChecks(
+      { read },
+      {
+        rules,
+        ...options.runId !== void 0 ? { runId: options.runId } : {},
+        ...options.run !== void 0 ? { runId: options.run } : {}
+      }
+    );
+    const detectorFindings = checkResult.diagnostics.length === 0 ? redactionDetectorFindings(read, checkResult.runId, options.compiledPolicy) : [];
+    return resultFromParts({
+      command: "verify-safe",
+      format: checkResult.format,
+      runId: checkResult.runId,
+      findings: [...checkResult.findings, ...detectorFindings],
+      diagnostics: [
+        ...checkResult.diagnostics.map(diagnosticFromCheck),
+        ...warningDiagnostics(read.warnings, read.unsupportedFields)
+      ],
+      warnings: read.warnings,
+      unsupportedFields: read.unsupportedFields
+    });
+  } catch (error) {
+    return messageStartsWithDash(error) ? invalidArgumentResult("verify-safe", error) : readErrorResult("verify-safe", error);
+  }
+}
+function messageStartsWithDash(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.startsWith("--");
+}
+
+// packages/cli/src/redact.ts
+function parseRedactionProfile3(value) {
+  if (value === void 0 || value === "local" || value === "share" || value === "strict") {
+    return value ?? "share";
+  }
+  throw new Error(`Unsupported --profile "${value}". Use local, share, or strict.`);
+}
+function stable2(value) {
+  if (Array.isArray(value)) return value.map(stable2);
+  if (value === null || typeof value !== "object") return value;
+  const record = value;
+  return Object.fromEntries(
+    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable2(record[key])])
+  );
+}
+function isMissingFileError3(error) {
+  return error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT";
+}
+async function contentFromTarget(target, options, stdin) {
+  if (target === "-") {
+    return { content: await readStdin(stdin), source: "stdin" };
+  }
+  try {
+    const stats2 = await stat(target);
+    if (stats2.isDirectory()) {
+      throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
+    }
+    return { content: await readFile(target, "utf-8"), source: target };
+  } catch (error) {
+    if (!isMissingFileError3(error)) throw error;
+  }
+  const runPath = getTraceFilePath(target, resolveTraceDir({ dir: options.dir }));
+  const stats = await stat(runPath);
+  if (stats.isDirectory()) {
+    throw new Error("redact requires a trace file, JSON file, stdin, or run id.");
+  }
+  return { content: await readFile(runPath, "utf-8"), source: runPath };
+}
+function applyRedact(value, profile, policy) {
+  const result = createRedactor({
+    profile,
+    ...policy?.extraKeys.length ? { extraKeys: [...policy.extraKeys] } : {},
+    ...policy?.detectors.length ? { detectors: [...policy.detectors] } : {}
+  }).redact(value);
+  return { value: result.value, findings: result.findings };
+}
+function redactJsonText(content, profile, policy) {
+  const parsed = JSON.parse(content);
+  const result = applyRedact(parsed, profile, policy);
+  return {
+    content: `${JSON.stringify(result.value, null, 2)}
+`,
+    findings: result.findings
+  };
+}
+function redactJsonlText(content, profile, policy) {
+  const lines = content.split(/\r?\n/);
+  const out = [];
+  const findings = [];
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index] ?? "";
+    if (line.trim() === "") continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(line);
+    } catch {
+      throw new Error(`Input is not valid JSON or JSONL at line ${index + 1}.`);
+    }
+    const result = applyRedact(parsed, profile, policy);
+    out.push(JSON.stringify(result.value));
+    findings.push(
+      ...result.findings.map((finding) => ({
+        ...finding,
+        path: `line:${index + 1}:${finding.path}`
+      }))
+    );
+  }
+  return {
+    content: out.length === 0 ? "" : `${out.join("\n")}
+`,
+    findings
+  };
+}
+function redactDocument(content, profile, policy) {
+  const trimmed = content.trim();
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed)) {
+        return redactJsonlText(content, profile, policy);
+      }
+    } catch {
+    }
+  }
+  try {
+    return redactJsonText(content, profile, policy);
+  } catch {
+    return redactJsonlText(content, profile, policy);
+  }
+}
+function redactTraceContent(content, profile, policy) {
+  return redactDocument(content, profile, policy);
+}
+function looksLikeAgentInspectTrace(content) {
+  const trimmed = content.trim();
+  if (!trimmed.startsWith("{")) return false;
+  try {
+    const firstLine = trimmed.split(/\r?\n/).find((line) => line.trim() !== "") ?? trimmed;
+    const parsed = JSON.parse(firstLine);
+    return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed);
+  } catch {
+    return false;
+  }
+}
+function printResidualWarning(assessment, sourceLooksLikeTrace) {
+  if (assessment.status === "SAFE") return;
+  if (assessment.status === "UNKNOWN" && !sourceLooksLikeTrace) return;
+  const codes = assessment.codes.length > 0 ? ` codes=${assessment.codes.join(",")}` : "";
+  console.error(
+    `Residual safety: ${assessment.status} (findings=${assessment.findings}, warnings=${assessment.warnings}, errors=${assessment.errors})${codes}. Redact does not certify safe sharing; run verify-safe before publishing.`
+  );
+}
+function residualExitCode(assessment) {
+  if (assessment.status === "UNSAFE") return 1;
+  if (assessment.status === "UNKNOWN") return 2;
+  return 0;
+}
+async function redactCommand(target, options = {}, stdin = process.stdin) {
+  const profile = parseRedactionProfile3(resolveRedactionProfileOption(options));
+  const policy = options.policy !== void 0 ? await loadRedactionPolicy(options.policy) : void 0;
+  const source = await contentFromTarget(target, options, stdin);
+  const redacted = redactDocument(source.content, profile, policy);
+  const outputPath = resolveOutputOption(options);
+  const residualAssessment = await assessResidualFromContent(redacted.content, {
+    compiledPolicy: policy
+  });
   if (outputPath !== void 0) {
     await writeFile(outputPath, redacted.content, "utf-8");
   }
+  if (options.failOnResidual === true) {
+    process.exitCode = residualExitCode(residualAssessment);
+  }
   if (options.json) {
     console.log(
       JSON.stringify(
-        stable({
+        stable2({
           ok: true,
           profile,
           source: source.source,
           output: outputPath,
           findings: redacted.findings,
+          residualAssessment,
+          ...policy !== void 0 ? {
+            policy: {
+              path: policy.path,
+              extraKeys: policy.extraKeys.length,
+              patterns: policy.detectors.length,
+              diagnostics: policy.diagnostics
+            }
+          } : {},
           content: outputPath === void 0 ? redacted.content : void 0
         }),
         null,
@@ -4495,6 +5251,7 @@ async function redactCommand(target, options = {}, stdin = process.stdin) {
     );
     return;
   }
+  printResidualWarning(residualAssessment, looksLikeAgentInspectTrace(redacted.content));
   if (outputPath === void 0) {
     process.stdout.write(redacted.content);
   }
@@ -4770,7 +5527,7 @@ async function openCommand(input3, options = {}, stdin = process.stdin) {
     }
   }
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseTarget(value) {
@@ -4779,7 +5536,7 @@ function parseTarget(value) {
   throw new Error('Unsupported migration target. Use "--to 1.0".');
 }
 function formatOf(value) {
-  if (!isRecord6(value)) return "unknown";
+  if (!isRecord7(value)) return "unknown";
   if (value.schemaVersion === "0.1") return "0.1";
   if (value.schemaVersion === "0.2") return "0.2";
   if (value.schemaVersion === "1.0") return "1.0";
@@ -4792,14 +5549,14 @@ function uniqueSorted(values) {
   return [...new Set(values)].sort();
 }
 function isWithinDirectory(child, parent) {
-  const relative = path18.relative(parent, child);
-  return relative === "" || !relative.startsWith("..") && !path18.isAbsolute(relative);
+  const relative = path19.relative(parent, child);
+  return relative === "" || !relative.startsWith("..") && !path19.isAbsolute(relative);
 }
 async function resolveOutputPath(inputPath, output2, force) {
   if (output2 === void 0 || output2.trim() === "") return void 0;
-  const inputAbs = path18.resolve(inputPath);
-  const outputAbs = path18.resolve(output2.trim());
-  const inputDir = path18.dirname(inputAbs);
+  const inputAbs = path19.resolve(inputPath);
+  const outputAbs = path19.resolve(output2.trim());
+  const inputDir = path19.dirname(inputAbs);
   if (!isWithinDirectory(outputAbs, inputDir)) {
     throw new Error("Refusing to write migrated output outside the input directory.");
   }
@@ -4920,7 +5677,7 @@ async function migrateCommand(input3, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const inputPath = path18.resolve(input3.trim());
+  const inputPath = path19.resolve(input3.trim());
   const dryRun = options.dryRun === true;
   if (!dryRun && (options.output === void 0 || options.output.trim() === "")) {
     console.error("migrate requires --dry-run or --output <path>.");
@@ -4939,7 +5696,7 @@ async function migrateCommand(input3, options = {}) {
     );
     const result = await buildMigration(inputPath, outputPath);
     if (!dryRun && outputPath !== void 0) {
-      await mkdir(path18.dirname(outputPath), { recursive: true });
+      await mkdir(path19.dirname(outputPath), { recursive: true });
       await writeFile(outputPath, result.content, "utf-8");
     }
     printSummary2(result, dryRun);
@@ -4950,7 +5707,7 @@ async function migrateCommand(input3, options = {}) {
   }
 }
 function validateReporterArtifactPath(options) {
-  const outputDir = path18.resolve(options.outputDir);
+  const outputDir = path19.resolve(options.outputDir);
   const diagnostics = [];
   const rawPath = options.relativePath;
   if (rawPath.length === 0) {
@@ -4970,7 +5727,7 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  if (path18.isAbsolute(rawPath) || path18.win32.isAbsolute(rawPath)) {
+  if (path19.isAbsolute(rawPath) || path19.win32.isAbsolute(rawPath)) {
     diagnostics.push({
       code: "artifact_path_absolute",
       severity: "error",
@@ -4979,7 +5736,7 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  const normalized = path18.posix.normalize(rawPath.replace(/\\/g, "/"));
+  const normalized = path19.posix.normalize(rawPath.replace(/\\/g, "/"));
   const segments = normalized.split("/");
   if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
     diagnostics.push({
@@ -4990,9 +5747,9 @@ function validateReporterArtifactPath(options) {
     });
     return { ok: false, outputDir, diagnostics };
   }
-  const absolutePath = path18.resolve(outputDir, normalized);
-  const relFromOutput = path18.relative(outputDir, absolutePath);
-  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path18.isAbsolute(relFromOutput)) {
+  const absolutePath = path19.resolve(outputDir, normalized);
+  const relFromOutput = path19.relative(outputDir, absolutePath);
+  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path19.isAbsolute(relFromOutput)) {
     diagnostics.push({
       code: "artifact_path_escape",
       severity: "error",
@@ -5018,7 +5775,7 @@ var EVIDENCE_CI_ARTIFACT_FILES = [
 function createEvidenceCiArtifacts(options) {
   const profile = options.redactionProfile ?? "share";
   const prefix = options.relativeDir !== void 0 && options.relativeDir.trim() !== "" ? options.relativeDir.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "") : "";
-  const join = (name) => prefix === "" ? name : path18.posix.join(prefix, name);
+  const join = (name) => prefix === "" ? name : path19.posix.join(prefix, name);
   const formatFor = (name) => {
     if (name.endsWith(".html")) return "html";
     if (name.endsWith(".jsonl")) return "jsonl";
@@ -5067,9 +5824,9 @@ function stableJson2(value) {
 async function writeLocalEvidence(input3) {
   const profile = input3.redactionProfile ?? "share";
   const format = input3.format ?? "directory";
-  const baseDir = path18.resolve(input3.outputDir);
+  const baseDir = path19.resolve(input3.outputDir);
   await mkdir(
-    format === "zip" && baseDir.toLowerCase().endsWith(".zip") ? path18.dirname(baseDir) : baseDir,
+    format === "zip" && baseDir.toLowerCase().endsWith(".zip") ? path19.dirname(baseDir) : baseDir,
     { recursive: true }
   );
   const sourceContents = /* @__PURE__ */ new Map();
@@ -5125,7 +5882,7 @@ async function writeLocalEvidence(input3) {
   }
   if (format === "zip") {
     const zipPath = baseDir.toLowerCase().endsWith(".zip") ? baseDir : `${baseDir}.zip`;
-    await mkdir(path18.dirname(zipPath), { recursive: true });
+    await mkdir(path19.dirname(zipPath), { recursive: true });
     const archive = buildZipArchive(
       files.map(([relativePath, content]) => ({
         path: relativePath,
@@ -5140,16 +5897,16 @@ async function writeLocalEvidence(input3) {
     let sidecarDir = baseDir;
     if (baseDir.toLowerCase().endsWith(".html")) {
       htmlPath = baseDir;
-      sidecarDir = path18.dirname(baseDir);
+      sidecarDir = path19.dirname(baseDir);
     } else {
       await mkdir(baseDir, { recursive: true });
-      htmlPath = path18.join(baseDir, "evidence.html");
+      htmlPath = path19.join(baseDir, "evidence.html");
       sidecarDir = baseDir;
     }
     await mkdir(sidecarDir, { recursive: true });
     await writeFile(htmlPath, evidencePackage["evidence.html"], "utf-8");
     await writeFile(
-      path18.join(sidecarDir, "evidence.json"),
+      path19.join(sidecarDir, "evidence.json"),
       evidencePackage["evidence.json"],
       "utf-8"
     );
@@ -5157,7 +5914,7 @@ async function writeLocalEvidence(input3) {
   }
   await mkdir(baseDir, { recursive: true });
   for (const [name, content] of files) {
-    await writeFile(path18.join(baseDir, name), content, "utf-8");
+    await writeFile(path19.join(baseDir, name), content, "utf-8");
   }
   return baseDir;
 }
@@ -5181,11 +5938,11 @@ function checkResultToEvidenceJson(result, runIds) {
 }
 function defaultEvidenceDir(label) {
   const safe = label.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 80) || "evidence";
-  return path18.join(".agent-inspect", "evidence", safe);
+  return path19.join(".agent-inspect", "evidence", safe);
 }
 function resolveEvidenceOutputDir(evidenceDir, label) {
   if (evidenceDir !== void 0 && evidenceDir.trim() !== "") {
-    return path18.resolve(evidenceDir.trim());
+    return path19.resolve(evidenceDir.trim());
   }
   return defaultEvidenceDir(label);
 }
@@ -5509,23 +6266,23 @@ function evaluatePromptInjection(text, options = {}) {
   }
   return fail(ruleId, `Matched ${evidence.length} injection pattern(s).`, evidence, "warning");
 }
-function validateSchemaField(value, field, path29, evidence) {
+function validateSchemaField(value, field, path30, evidence) {
   const ruleId = "guardrail.structured-output";
   if (field.type) {
     const actual = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
     if (actual !== field.type) {
-      evidence.push({ ruleId, path: path29, preview: `expected ${field.type}, got ${actual}` });
+      evidence.push({ ruleId, path: path30, preview: `expected ${field.type}, got ${actual}` });
       return;
     }
   }
   if (field.enum && !field.enum.some((item) => Object.is(item, value))) {
-    evidence.push({ ruleId, path: path29, preview: "value not in enum" });
+    evidence.push({ ruleId, path: path30, preview: "value not in enum" });
   }
   if (field.type === "object" && field.required && value && typeof value === "object" && !Array.isArray(value)) {
     const record = value;
     for (const key of field.required) {
       if (!(key in record)) {
-        evidence.push({ ruleId, path: `${path29}.${key}`, preview: "missing required key" });
+        evidence.push({ ruleId, path: `${path30}.${key}`, preview: "missing required key" });
       }
     }
   }
@@ -6254,7 +7011,7 @@ function parseCheckConfig(value) {
 }
 async function loadConfig(configPath) {
   if (configPath === void 0) return {};
-  const extension = path18.extname(configPath);
+  const extension = path19.extname(configPath);
   if (TS_CONFIG_EXTENSIONS.has(extension)) {
     throw new CheckConfigError(
       "AI_CHECK_CONFIG_LOAD_FAILED",
@@ -6267,7 +7024,7 @@ async function loadConfig(configPath) {
       "Unsupported check config extension. Use .json, .js, .mjs, or .cjs."
     );
   }
-  const absolute = path18.resolve(configPath);
+  const absolute = path19.resolve(configPath);
   try {
     if (extension === ".json") {
       const raw = await readFile(absolute, "utf-8");
@@ -6461,7 +7218,7 @@ function buildRules(config, options, presetSelect = []) {
     diagnostics
   };
 }
-function exitCodeFor(result) {
+function exitCodeFor2(result) {
   if (result.status === "pass") return 0;
   if (result.status === "fail") return 1;
   const codes = result.diagnostics.map((item) => item.code);
@@ -6482,16 +7239,16 @@ function exitCodeFor(result) {
   }
   return 1;
 }
-function stable2(value) {
-  if (Array.isArray(value)) return value.map(stable2);
+function stable3(value) {
+  if (Array.isArray(value)) return value.map(stable3);
   if (value === null || typeof value !== "object") return value;
   const record = value;
   return Object.fromEntries(
-    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable2(record[key])])
+    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable3(record[key])])
   );
 }
-function printJson(result) {
-  console.log(JSON.stringify(stable2(result), null, 2));
+function printJson2(result) {
+  console.log(JSON.stringify(stable3(result), null, 2));
 }
 function isSafetyFinding(ruleId) {
   return ruleId.startsWith("safety.") || ruleId.startsWith("guardrail.") || ruleId.includes("pii") || ruleId.includes("secret");
@@ -6528,7 +7285,7 @@ function printPresetClassSummary(result, preset) {
     `Share safety: ${hasSafetyFindings || result.status === "fail" ? "FAIL" : result.status === "pass" ? "PASS" : "FAIL"}`
   );
 }
-function printHuman(result, options = {}) {
+function printHuman2(result, options = {}) {
   const scoped = result;
   if (scoped.scopeLabel) {
     console.log(`Scope: ${scoped.scopeKind} ${scoped.scopeLabel}`);
@@ -6548,13 +7305,13 @@ function printHuman(result, options = {}) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path29 = finding.evidence[0]?.path;
+    const path30 = finding.evidence[0]?.path;
     const run = finding.evidence[0]?.runId;
     const runPrefix = run ? `[${run}] ` : "";
-    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}`);
+    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path30 ? ` (${path30})` : ""}`);
   }
 }
-function readErrorResult(error) {
+function readErrorResult2(error) {
   if (error instanceof TraceReadError) {
     const code = error.code === "unsupported_format" ? "AI_CHECK_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_CHECK_AMBIGUOUS_FORMAT" : "AI_CHECK_TRACE_UNREADABLE";
     return errorResult(code, error.message);
@@ -6581,9 +7338,9 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
         "AI_CHECK_CONFIG_NO_EFFECTIVE_RULES",
         "Explicit --config has no effective check rules. Configure checks.select, checks.run, checks.tool, checks.llm, checks.structure, or checks.safety."
       );
-      if (options.json) printJson(result);
-      else printHuman(result, options);
-      process.exitCode = exitCodeFor(result);
+      if (options.json) printJson2(result);
+      else printHuman2(result, options);
+      process.exitCode = exitCodeFor2(result);
       return;
     }
     let effectiveOptions = options;
@@ -6713,10 +7470,10 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
         result = errorResult(code, message);
       }
     } else {
-      result = readErrorResult(error);
+      result = readErrorResult2(error);
     }
   }
-  process.exitCode = exitCodeFor(result);
+  process.exitCode = exitCodeFor2(result);
   const failed = result.status !== "pass";
   if (shouldEmitEvidence(options.evidenceOn, failed)) {
     try {
@@ -6756,8 +7513,8 @@ async function checkCommand(target, options = {}, stdin = process.stdin) {
       );
     }
   }
-  if (options.json) printJson(result);
-  else printHuman(result, options);
+  if (options.json) printJson2(result);
+  else printHuman2(result, options);
 }
 
 // packages/viewer/src/html.ts
@@ -6908,7 +7665,7 @@ async function loadSuiteViewerData(options) {
   for (const suiteCase of result.cases) {
     cases.push(await enrichCase(suiteCase, baselinePath));
   }
-  const artifactsDir = path18.join(path18.dirname(result.configPath), ".agent-inspect/suite-runs");
+  const artifactsDir = path19.join(path19.dirname(result.configPath), ".agent-inspect/suite-runs");
   return {
     suiteName: result.suiteName,
     configPath: result.configPath,
@@ -7101,19 +7858,19 @@ function serializeWorkspaceManifest(manifest) {
 }
 var INDEX_DIR_NAME = "index";
 function resolveWorkspaceLocation(cwd = process.cwd()) {
-  const projectRoot = path18.resolve(cwd);
-  const workspaceDir = path18.join(projectRoot, WORKSPACE_DIR_NAME);
+  const projectRoot = path19.resolve(cwd);
+  const workspaceDir = path19.join(projectRoot, WORKSPACE_DIR_NAME);
   return {
     projectRoot,
     workspaceDir,
-    manifestPath: path18.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
+    manifestPath: path19.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
   };
 }
 function resolveInsideWorkspace(workspaceDir, relative) {
-  const base = path18.resolve(workspaceDir);
-  const resolved = path18.resolve(base, relative);
-  const rel = path18.relative(base, resolved);
-  if (rel === "" || rel === "." || !rel.startsWith("..") && !path18.isAbsolute(rel)) {
+  const base = path19.resolve(workspaceDir);
+  const resolved = path19.resolve(base, relative);
+  const rel = path19.relative(base, resolved);
+  if (rel === "" || rel === "." || !rel.startsWith("..") && !path19.isAbsolute(rel)) {
     return resolved;
   }
   throw new Error(
@@ -7182,7 +7939,7 @@ async function createWorkspace(options = {}) {
     created = false;
     adopted = true;
   } else {
-    const project = options.project?.trim() || path18.basename(location.projectRoot) || "workspace";
+    const project = options.project?.trim() || path19.basename(location.projectRoot) || "workspace";
     const traceDirs = detectedExistingTraces ? ["runs", "."] : ["runs"];
     manifest = createDefaultWorkspaceManifest({
       project,
@@ -7321,7 +8078,7 @@ async function doctorWorkspace(location) {
     const abs = resolveInsideWorkspace(location.workspaceDir, rel);
     for (const file of await listJsonl(abs)) {
       try {
-        const s = await stat(path18.join(abs, file));
+        const s = await stat(path19.join(abs, file));
         newestTraceMtime = Math.max(newestTraceMtime, s.mtimeMs);
       } catch {
         checks2.push({ id: "trace-readability", status: "warn", message: `cannot stat ${rel}/${file}` });
@@ -7369,7 +8126,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
       const relPath = `${rel}/${entry}`;
       removed.push(relPath);
       if (!dryRun) {
-        await rm(path18.join(abs, entry), { recursive: true, force: true });
+        await rm(path19.join(abs, entry), { recursive: true, force: true });
       }
     }
   }
@@ -7378,7 +8135,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
 
 // packages/viewer/src/workspace-data.ts
 async function loadWorkspaceViewerData(options) {
-  const cwd = path18.resolve(options.cwd ?? process.cwd());
+  const cwd = path19.resolve(options.cwd ?? process.cwd());
   const location = resolveWorkspaceLocation(cwd);
   const manifestRead = await readWorkspaceManifestFile(location);
   if (!manifestRead.ok || manifestRead.manifest === void 0) {
@@ -7391,7 +8148,7 @@ async function loadWorkspaceViewerData(options) {
   const runs = [];
   for (const rel of manifestRead.manifest.traceDirs) {
     const traceDir = resolveTraceDir({
-      dir: path18.join(location.workspaceDir, rel)
+      dir: path19.join(location.workspaceDir, rel)
     });
     const td = new TraceDirectory({ dir: traceDir });
     const files = await td.list();
@@ -7405,7 +8162,7 @@ async function loadWorkspaceViewerData(options) {
         runId: meta.runId,
         ...meta.name !== void 0 ? { name: meta.name } : {},
         status: meta.status,
-        file: path18.basename(meta.filePath)
+        file: path19.basename(meta.filePath)
       });
     }
   }
@@ -7416,8 +8173,8 @@ async function loadWorkspaceViewerData(options) {
     doctor,
     runs,
     bundleDirs: [
-      path18.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
-      path18.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
+      path19.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
+      path19.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
     ]
   };
 }
@@ -7480,7 +8237,7 @@ function createViewerServer(options = {}) {
           ok: true,
           readOnly: true,
           mode,
-          traceDir: path18.resolve(traceDir)
+          traceDir: path19.resolve(traceDir)
         });
       }
       if (pathname === "/api/suite" && mode === "suite") {
@@ -7509,7 +8266,7 @@ function createViewerServer(options = {}) {
             runId: meta.runId,
             name: meta.name,
             status: meta.status,
-            file: path18.basename(meta.filePath),
+            file: path19.basename(meta.filePath),
             startedAt: meta.startedAt,
             durationMs: meta.durationMs
           }))
@@ -7626,7 +8383,7 @@ function startViewerServer(options = {}) {
       resolve({
         host,
         port: resolvedPort,
-        traceDir: path18.resolve(traceDir),
+        traceDir: path19.resolve(traceDir),
         url: `http://${host}:${resolvedPort}/${modeQuery}`,
         mode
       });
@@ -8037,10 +8794,10 @@ async function evalRun(input3, options = {}) {
     diagnostics: []
   };
 }
-function evidenceForRun(run, path29) {
-  return [{ runId: run.runId, ...path29 !== void 0 ? { path: path29 } : {} }];
+function evidenceForRun(run, path30) {
+  return [{ runId: run.runId, ...path30 !== void 0 ? { path: path30 } : {} }];
 }
-function evidenceForEvent(event, path29) {
+function evidenceForEvent(event, path30) {
   return [
     {
       runId: event.runId,
@@ -8048,7 +8805,7 @@ function evidenceForEvent(event, path29) {
       ...event.parentId !== void 0 ? { parentId: event.parentId } : {},
       kind: event.kind,
       name: event.name,
-      ...path29 !== void 0 ? { path: path29 } : {}
+      ...path30 !== void 0 ? { path: path30 } : {}
     }
   ];
 }
@@ -8206,9 +8963,9 @@ function collectTextFields(nodes, keys, preferredKinds = []) {
 function tokenize(text) {
   return [...text.toLowerCase().matchAll(/[a-z0-9][a-z0-9'-]{2,}/g)].map((match) => match[0].replace(/^['-]+|['-]+$/g, "")).filter((token) => token.length > 2 && !STOP_WORDS.has(token));
 }
-function firstEvidence(fields, run, path29) {
+function firstEvidence(fields, run, path30) {
   const first = fields[0];
-  return first === void 0 ? evidenceForRun(run, path29) : evidenceForEvent(first.node.event, first.path);
+  return first === void 0 ? evidenceForRun(run, path30) : evidenceForEvent(first.node.event, first.path);
 }
 function collectSourceIds(nodes, keys) {
   const wanted = keySet(keys);
@@ -8561,273 +9318,55 @@ var checks = {
           "Answer contained banned unsupported-answer phrasing.",
           firstEvidence(answers, context.run, "attributes.answer"),
           { bannedPhraseCount: banned.length },
-          { matchedPhraseCount: matches.length }
-        )
-      ] : [];
-    });
-  }
-};
-function renderEvalMarkdown(result) {
-  const lines = [
-    `# AgentInspect Eval`,
-    "",
-    `Status: ${result.status}`,
-    `Format: ${result.format}`,
-    ...result.runId !== void 0 ? [`Run: ${result.runId}`] : [],
-    `Summary: ${result.summary.passed} passed, ${result.summary.failed} failed, ${result.summary.warnings} warnings, ${result.summary.errors} errors`
-  ];
-  if (result.diagnostics.length > 0) {
-    lines.push("", "## Diagnostics");
-    for (const diagnostic3 of result.diagnostics) {
-      lines.push(`- ${diagnostic3.code}: ${diagnostic3.message}`);
-    }
-  }
-  if (result.findings.length > 0) {
-    lines.push("", "## Findings");
-    for (const finding of result.findings) {
-      const path29 = finding.evidence[0]?.path;
-      lines.push(`- ${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}`);
-    }
-  }
-  return `${lines.join("\n")}
-`;
-}
-
-// packages/cli/src/eval.ts
-var CONFIG_EXTENSIONS2 = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
-var TS_CONFIG_EXTENSIONS2 = /* @__PURE__ */ new Set([".ts", ".mts", ".cts"]);
-function diagnostic2(code, message, severity = "error") {
-  return { code, message, severity };
-}
-function errorResult3(code, message, format = "unknown") {
-  return {
-    ok: false,
-    status: "error",
-    format,
-    summary: { passed: 0, failed: 0, warnings: 0, errors: 1 },
-    findings: [],
-    diagnostics: [diagnostic2(code, message)]
-  };
-}
-function parseNumber2(value, label) {
-  if (value === void 0) return void 0;
-  const parsed = Number(value);
-  if (!Number.isFinite(parsed) || parsed < 0) {
-    throw new Error(`${label} must be a non-negative number.`);
-  }
-  return parsed;
-}
-function asStringArray2(value, label) {
-  if (value === void 0) return void 0;
-  if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
-    throw new Error(`${label} must be an array of strings.`);
-  }
-  return value;
-}
-function asConfig(value) {
-  if (value === void 0 || value === null) return {};
-  if (typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("Config must export an object.");
-  }
-  return value;
-}
-async function loadConfig2(configPath) {
-  if (configPath === void 0) return {};
-  const extension = path18.extname(configPath);
-  if (TS_CONFIG_EXTENSIONS2.has(extension)) {
-    throw new Error(
-      "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
-    );
-  }
-  if (!CONFIG_EXTENSIONS2.has(extension)) {
-    throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
-  }
-  const absolute = path18.resolve(configPath);
-  if (extension === ".json") {
-    const raw = await readFile(absolute, "utf-8");
-    return asConfig(JSON.parse(raw));
-  }
-  const mod = await import(pathToFileURL(absolute).href);
-  return asConfig("default" in mod ? mod.default : mod);
-}
-function normalizeConfig2(config) {
-  if (config.eval === void 0) return {};
-  if (typeof config.eval !== "object" || Array.isArray(config.eval)) {
-    throw new Error("eval config must be an object.");
-  }
-  return config.eval;
-}
-function maybeAdd(rules, value, makeRule) {
-  if (value !== void 0) rules.push(makeRule(value));
-}
-function optionObject(value) {
-  if (value === void 0 || value === false) return void 0;
-  if (value === true) return {};
-  if (typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("Eval heuristic config must be a boolean or object.");
-  }
-  return value;
-}
-function sourceIdsFromConfig(value) {
-  if (value === void 0) return void 0;
-  if (Array.isArray(value)) return { ids: asStringArray2(value, "eval.requiredSourceIds") ?? [] };
-  if (typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("eval.requiredSourceIds must be an array or object.");
-  }
-  const ids = asStringArray2(value.ids, "eval.requiredSourceIds.ids") ?? [];
-  return { ids, options: { sourceIdKeys: value.sourceIdKeys } };
-}
-function buildRules2(config, options) {
-  const evalConfig = normalizeConfig2(config);
-  const rules = [];
-  if (evalConfig.requireSuccess || options.requireSuccess) rules.push(checks.requireSuccess());
-  const requiredTools = [
-    ...asStringArray2(evalConfig.requiredTools, "eval.requiredTools") ?? [],
-    ...options.requiredTool ?? []
-  ];
-  if (requiredTools.length > 0) rules.push(checks.requiredTools(requiredTools));
-  const forbiddenTools = [
-    ...asStringArray2(evalConfig.forbiddenTools, "eval.forbiddenTools") ?? [],
-    ...options.forbidTool ?? [],
-    ...options.forbiddenTool ?? []
-  ];
-  if (forbiddenTools.length > 0) rules.push(checks.forbiddenTools(forbiddenTools));
-  const maxDurationMs = parseNumber2(options.maxDurationMs, "--max-duration-ms") ?? evalConfig.maxDurationMs;
-  maybeAdd(rules, maxDurationMs, checks.maxDurationMs);
-  const maxDepth = parseNumber2(options.maxDepth, "--max-depth") ?? evalConfig.maxDepth;
-  maybeAdd(rules, maxDepth, checks.maxDepth);
-  const maxRetries = parseNumber2(options.maxRetries, "--max-retries") ?? evalConfig.maxRetries;
-  maybeAdd(rules, maxRetries, checks.maxRetries);
-  const maxTotalTokens = parseNumber2(options.maxTotalTokens, "--max-total-tokens") ?? evalConfig.maxTotalTokens;
-  maybeAdd(rules, maxTotalTokens, checks.maxTotalTokens);
-  if (evalConfig.requiredRetrievalBeforeGeneration || options.requireRetrievalBeforeGeneration) {
-    rules.push(checks.requiredRetrievalBeforeGeneration());
-  }
-  const requiredDecisionMetadata = [
-    ...asStringArray2(
-      evalConfig.requiredDecisionMetadata,
-      "eval.requiredDecisionMetadata"
-    ) ?? [],
-    ...options.requiredDecisionMetadata ?? []
-  ];
-  if (requiredDecisionMetadata.length > 0) {
-    rules.push(checks.requiredDecisionMetadata(requiredDecisionMetadata));
-  }
-  const contextOverlap = optionObject(evalConfig.contextOverlap);
-  const minOverlap = parseNumber2(options.minContextOverlap, "--min-context-overlap");
-  const minSharedTerms = parseNumber2(options.minSharedTerms, "--min-shared-terms");
-  if (contextOverlap !== void 0 || options.contextOverlap || minOverlap !== void 0 || minSharedTerms !== void 0) {
-    rules.push(checks.contextOverlap({ ...contextOverlap, minOverlap, minSharedTerms }));
-  }
-  const quoteOverlap = optionObject(evalConfig.quoteOverlap);
-  if (quoteOverlap !== void 0 || options.quoteOverlap) {
-    rules.push(checks.quoteOverlap(quoteOverlap));
-  }
-  const citationPresence = optionObject(evalConfig.citationPresence);
-  if (citationPresence !== void 0 || options.citationPresence) {
-    rules.push(checks.citationPresence(citationPresence));
-  }
-  const sourceIds = sourceIdsFromConfig(evalConfig.requiredSourceIds);
-  const requiredSourceIds = [...sourceIds?.ids ?? [], ...options.requiredSourceId ?? []];
-  if (requiredSourceIds.length > 0) {
-    rules.push(checks.requiredSourceIds(requiredSourceIds, sourceIds?.options));
-  }
-  const cliAnswerLength = {
-    minCharacters: parseNumber2(options.minAnswerCharacters, "--min-answer-characters"),
-    maxCharacters: parseNumber2(options.maxAnswerCharacters, "--max-answer-characters"),
-    minWords: parseNumber2(options.minAnswerWords, "--min-answer-words"),
-    maxWords: parseNumber2(options.maxAnswerWords, "--max-answer-words")
-  };
-  const hasCliAnswerLength = Object.values(cliAnswerLength).some((value) => value !== void 0);
-  if (evalConfig.answerLengthBounds !== void 0 || hasCliAnswerLength) {
-    rules.push(checks.answerLengthBounds({ ...evalConfig.answerLengthBounds, ...cliAnswerLength }));
-  }
-  const bannedPhrases = [
-    ...asStringArray2(
-      evalConfig.bannedUnsupportedPhrases,
-      "eval.bannedUnsupportedPhrases"
-    ) ?? [],
-    ...options.bannedPhrase ?? []
-  ];
-  if (bannedPhrases.length > 0) rules.push(checks.bannedUnsupportedPhrases(bannedPhrases));
-  return rules.length > 0 ? rules : void 0;
-}
-function exitCodeFor2(result) {
-  if (result.status === "pass") return 0;
-  if (result.status === "fail") return 1;
-  return 2;
-}
-function stable3(value) {
-  if (Array.isArray(value)) return value.map(stable3);
-  if (value === null || typeof value !== "object") return value;
-  const record = value;
-  return Object.fromEntries(
-    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable3(record[key])])
-  );
-}
-function printJson2(result) {
-  console.log(JSON.stringify(stable3(result), null, 2));
-}
-function printHuman2(result) {
-  console.log(`Eval status: ${result.status}`);
-  console.log(`Format: ${result.format}`);
-  if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
-  console.log(
-    `Summary: ${result.summary.failed} failed, ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
-  );
-  for (const diagnostic3 of result.diagnostics) {
-    console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
-  }
-  for (const finding of result.findings) {
-    const path29 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}`);
-  }
-}
-function readErrorResult2(error) {
-  if (error instanceof TraceReadError) {
-    const code = error.code === "unsupported_format" ? "AI_EVAL_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_EVAL_AMBIGUOUS_FORMAT" : "AI_EVAL_TRACE_UNREADABLE";
-    return errorResult3(code, error.message);
-  }
-  return errorResult3(
-    "AI_EVAL_TRACE_UNREADABLE",
-    error instanceof Error ? error.message : String(error)
-  );
-}
-async function evalCommand(target, options = {}, stdin = process.stdin) {
-  let result;
-  let phase = "config";
-  try {
-    const config = await loadConfig2(options.config);
-    const rules = buildRules2(config, options);
-    phase = "read";
-    const input3 = await inputFromTarget(target, options, stdin);
-    const read = await openTrace(input3, {
-      ...options.format !== void 0 ? { format: options.format } : {}
-    });
-    result = await evalRun(read, {
-      ...rules !== void 0 ? { checks: rules } : {},
-      ...options.run !== void 0 ? { runId: options.run } : {}
+          { matchedPhraseCount: matches.length }
+        )
+      ] : [];
     });
-  } catch (error) {
-    if (phase === "config") {
-      const message = error instanceof Error ? error.message : String(error);
-      const code = message.startsWith("--") ? "AI_EVAL_INVALID_ARGUMENTS" : error instanceof SyntaxError || message.includes("Unsupported eval config extension") || message.includes("TypeScript eval configs") || message.includes("Config must") || message.includes("eval config") || message.includes("must be an array") ? "AI_EVAL_INVALID_CONFIG" : "AI_EVAL_CONFIG_LOAD_FAILED";
-      result = errorResult3(code, message);
-    } else {
-      result = readErrorResult2(error);
+  }
+};
+function renderEvalMarkdown(result) {
+  const lines = [
+    `# AgentInspect Eval`,
+    "",
+    `Status: ${result.status}`,
+    `Format: ${result.format}`,
+    ...result.runId !== void 0 ? [`Run: ${result.runId}`] : [],
+    `Summary: ${result.summary.passed} passed, ${result.summary.failed} failed, ${result.summary.warnings} warnings, ${result.summary.errors} errors`
+  ];
+  if (result.diagnostics.length > 0) {
+    lines.push("", "## Diagnostics");
+    for (const diagnostic3 of result.diagnostics) {
+      lines.push(`- ${diagnostic3.code}: ${diagnostic3.message}`);
     }
   }
-  process.exitCode = exitCodeFor2(result);
-  if (options.json) printJson2(result);
-  else if (options.markdown) console.log(renderEvalMarkdown(result).trimEnd());
-  else printHuman2(result);
+  if (result.findings.length > 0) {
+    lines.push("", "## Findings");
+    for (const finding of result.findings) {
+      const path30 = finding.evidence[0]?.path;
+      lines.push(`- ${finding.ruleId}: ${finding.message}${path30 ? ` (${path30})` : ""}`);
+    }
+  }
+  return `${lines.join("\n")}
+`;
 }
-var BEST_EFFORT_NOTE = "Best-effort local safety verification only; not a compliance, privacy, security, or regulatory certification.";
-var DEFAULT_MAX_STRING_LENGTH = 16384;
-var DEFAULT_MAX_ARRAY_LENGTH = 1e3;
-var DEFAULT_MAX_OBJECT_KEYS = 200;
-var DEFAULT_MAX_SERIALIZED_BYTES = 128 * 1024;
-function parseLimit3(value, label) {
+
+// packages/cli/src/eval.ts
+var CONFIG_EXTENSIONS2 = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
+var TS_CONFIG_EXTENSIONS2 = /* @__PURE__ */ new Set([".ts", ".mts", ".cts"]);
+function diagnostic2(code, message, severity = "error") {
+  return { code, message, severity };
+}
+function errorResult3(code, message, format = "unknown") {
+  return {
+    ok: false,
+    status: "error",
+    format,
+    summary: { passed: 0, failed: 0, warnings: 0, errors: 1 },
+    findings: [],
+    diagnostics: [diagnostic2(code, message)]
+  };
+}
+function parseNumber2(value, label) {
   if (value === void 0) return void 0;
   const parsed = Number(value);
   if (!Number.isFinite(parsed) || parsed < 0) {
@@ -8835,368 +9374,210 @@ function parseLimit3(value, label) {
   }
   return parsed;
 }
-function stable4(value) {
-  if (Array.isArray(value)) return value.map(stable4);
-  if (value === null || typeof value !== "object") return value;
-  const record = value;
-  return Object.fromEntries(
-    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable4(record[key])])
-  );
-}
-function safetyDiagnostic(code, message, severity = "error") {
-  return { code, message, severity };
-}
-function warningDiagnostics(warnings, unsupportedFields) {
-  return [
-    ...warnings.map(
-      (warning) => safetyDiagnostic(
-        warning.code,
-        warning.message,
-        warning.severity === "error" ? "error" : "warning"
-      )
-    ),
-    ...unsupportedFields.map(
-      (field) => safetyDiagnostic(
-        "unsupported_field",
-        `Reader reported unsupported field: ${field}`,
-        "warning"
-      )
-    )
-  ];
+function asStringArray2(value, label) {
+  if (value === void 0) return void 0;
+  if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
+    throw new Error(`${label} must be an array of strings.`);
+  }
+  return value;
 }
-function diagnosticFromCheck(item) {
-  return safetyDiagnostic(item.code, item.message, item.severity);
+function asConfig(value) {
+  if (value === void 0 || value === null) return {};
+  if (typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("Config must export an object.");
+  }
+  return value;
 }
-function statusFrom(findings, diagnostics) {
-  if (diagnostics.some((item) => item.severity === "error")) return "UNKNOWN";
-  if (findings.some((item) => item.severity === "error")) return "UNSAFE";
-  if (diagnostics.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
-  if (findings.some((item) => item.severity === "warning")) return "SAFE WITH WARNINGS";
-  return "SAFE";
+async function loadConfig2(configPath) {
+  if (configPath === void 0) return {};
+  const extension = path19.extname(configPath);
+  if (TS_CONFIG_EXTENSIONS2.has(extension)) {
+    throw new Error(
+      "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
+    );
+  }
+  if (!CONFIG_EXTENSIONS2.has(extension)) {
+    throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
+  }
+  const absolute = path19.resolve(configPath);
+  if (extension === ".json") {
+    const raw = await readFile(absolute, "utf-8");
+    return asConfig(JSON.parse(raw));
+  }
+  const mod = await import(pathToFileURL(absolute).href);
+  return asConfig("default" in mod ? mod.default : mod);
 }
-function resultFromParts(parts) {
-  const findings = [...parts.findings ?? []];
-  const diagnostics = [...parts.diagnostics ?? []];
-  const warnings = [...parts.warnings ?? []];
-  const unsupportedFields = [...parts.unsupportedFields ?? []];
-  const status = parts.status ?? statusFrom(findings, diagnostics);
-  return {
-    ok: status === "SAFE" || status === "SAFE WITH WARNINGS",
-    command: parts.command,
-    status,
-    format: parts.format,
-    ...parts.runId !== void 0 ? { runId: parts.runId } : {},
-    summary: {
-      findings: findings.length,
-      warnings: diagnostics.filter((item) => item.severity === "warning").length + findings.filter((item) => item.severity === "warning").length,
-      errors: diagnostics.filter((item) => item.severity === "error").length + findings.filter((item) => item.severity === "error").length
-    },
-    findings,
-    diagnostics,
-    warnings,
-    unsupportedFields,
-    note: BEST_EFFORT_NOTE,
-    ...parts.sourceAssessment !== void 0 ? { sourceAssessment: parts.sourceAssessment } : {},
-    ...parts.artifactAssessment !== void 0 ? { artifactAssessment: parts.artifactAssessment } : {},
-    ...parts.redactionSummary !== void 0 ? { redactionSummary: parts.redactionSummary } : {}
-  };
+function normalizeConfig2(config) {
+  if (config.eval === void 0) return {};
+  if (typeof config.eval !== "object" || Array.isArray(config.eval)) {
+    throw new Error("eval config must be an object.");
+  }
+  return config.eval;
 }
-function layerFromResult(result) {
-  return {
-    status: result.status,
-    summary: result.summary,
-    findings: result.findings
-  };
+function maybeAdd(rules, value, makeRule) {
+  if (value !== void 0) rules.push(makeRule(value));
 }
-function readErrorResult3(command, error) {
-  if (error instanceof TraceReadError) {
-    const code = error.code === "unsupported_format" ? "AI_SAFETY_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_SAFETY_AMBIGUOUS_FORMAT" : "AI_SAFETY_TRACE_UNREADABLE";
-    return resultFromParts({
-      command,
-      format: "unknown",
-      diagnostics: [safetyDiagnostic(code, error.message)],
-      warnings: error.warnings
-    });
+function optionObject(value) {
+  if (value === void 0 || value === false) return void 0;
+  if (value === true) return {};
+  if (typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("Eval heuristic config must be a boolean or object.");
   }
-  return resultFromParts({
-    command,
-    format: "unknown",
-    diagnostics: [
-      safetyDiagnostic(
-        "AI_SAFETY_TRACE_UNREADABLE",
-        error instanceof Error ? error.message : String(error)
-      )
-    ]
-  });
+  return value;
 }
-function invalidArgumentResult(command, error) {
-  return resultFromParts({
-    command,
-    format: "unknown",
-    diagnostics: [
-      safetyDiagnostic(
-        "AI_SAFETY_INVALID_ARGUMENTS",
-        error instanceof Error ? error.message : String(error)
-      )
-    ]
-  });
+function sourceIdsFromConfig(value) {
+  if (value === void 0) return void 0;
+  if (Array.isArray(value)) return { ids: asStringArray2(value, "eval.requiredSourceIds") ?? [] };
+  if (typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("eval.requiredSourceIds must be an array or object.");
+  }
+  const ids = asStringArray2(value.ids, "eval.requiredSourceIds.ids") ?? [];
+  return { ids, options: { sourceIdKeys: value.sourceIdKeys } };
 }
-function buildSafetyRules(options) {
-  const maxStringLength2 = parseLimit3(options.maxStringLength, "--max-string-length") ?? DEFAULT_MAX_STRING_LENGTH;
-  const maxArrayLength = parseLimit3(options.maxArrayLength, "--max-array-length") ?? DEFAULT_MAX_ARRAY_LENGTH;
-  const maxObjectKeys = parseLimit3(options.maxObjectKeys, "--max-object-keys") ?? DEFAULT_MAX_OBJECT_KEYS;
-  const maxSerializedBytes = parseLimit3(options.maxSerializedBytes, "--max-serialized-bytes") ?? DEFAULT_MAX_SERIALIZED_BYTES;
-  return [
-    createSafetyRawContentRule(),
-    createSafetyRedactionRule(),
-    createSafetySecretPatternRule(),
-    createSafetyOversizedAttributeRule({
-      maxStringLength: maxStringLength2,
-      maxArrayLength,
-      maxObjectKeys,
-      maxSerializedBytes
-    })
+function buildRules2(config, options) {
+  const evalConfig = normalizeConfig2(config);
+  const rules = [];
+  if (evalConfig.requireSuccess || options.requireSuccess) rules.push(checks.requireSuccess());
+  const requiredTools = [
+    ...asStringArray2(evalConfig.requiredTools, "eval.requiredTools") ?? [],
+    ...options.requiredTool ?? []
   ];
-}
-function flattenNodes(nodes) {
-  return nodes.flatMap((node) => [
-    node,
-    ...flattenNodes(
-      node.children
-    )
-  ]);
-}
-function detectorSeverity(finding) {
-  return finding.severity;
-}
-function classifyRedactionDetector(detector) {
-  if (detector === "value.creditCard" || detector === "value.email" || detector === "value.phone") {
-    return { category: "personal-data", confidence: "high" };
+  if (requiredTools.length > 0) rules.push(checks.requiredTools(requiredTools));
+  const forbiddenTools = [
+    ...asStringArray2(evalConfig.forbiddenTools, "eval.forbiddenTools") ?? [],
+    ...options.forbidTool ?? [],
+    ...options.forbiddenTool ?? []
+  ];
+  if (forbiddenTools.length > 0) rules.push(checks.forbiddenTools(forbiddenTools));
+  const maxDurationMs = parseNumber2(options.maxDurationMs, "--max-duration-ms") ?? evalConfig.maxDurationMs;
+  maybeAdd(rules, maxDurationMs, checks.maxDurationMs);
+  const maxDepth = parseNumber2(options.maxDepth, "--max-depth") ?? evalConfig.maxDepth;
+  maybeAdd(rules, maxDepth, checks.maxDepth);
+  const maxRetries = parseNumber2(options.maxRetries, "--max-retries") ?? evalConfig.maxRetries;
+  maybeAdd(rules, maxRetries, checks.maxRetries);
+  const maxTotalTokens = parseNumber2(options.maxTotalTokens, "--max-total-tokens") ?? evalConfig.maxTotalTokens;
+  maybeAdd(rules, maxTotalTokens, checks.maxTotalTokens);
+  if (evalConfig.requiredRetrievalBeforeGeneration || options.requireRetrievalBeforeGeneration) {
+    rules.push(checks.requiredRetrievalBeforeGeneration());
   }
-  if (detector === "value.ipv4" || detector === "value.ipv6") {
-    return { category: "identifier", confidence: "medium" };
+  const requiredDecisionMetadata = [
+    ...asStringArray2(
+      evalConfig.requiredDecisionMetadata,
+      "eval.requiredDecisionMetadata"
+    ) ?? [],
+    ...options.requiredDecisionMetadata ?? []
+  ];
+  if (requiredDecisionMetadata.length > 0) {
+    rules.push(checks.requiredDecisionMetadata(requiredDecisionMetadata));
   }
-  if (detector.startsWith("value.") && (detector.includes("Token") || detector.includes("Key") || detector.includes("jwt") || detector.includes("authorization") || detector.includes("bearer") || detector.includes("cookie") || detector.includes("privateKey") || detector.includes("github") || detector.includes("aws") || detector.includes("provider"))) {
-    return { category: "credential", confidence: "high" };
+  const contextOverlap = optionObject(evalConfig.contextOverlap);
+  const minOverlap = parseNumber2(options.minContextOverlap, "--min-context-overlap");
+  const minSharedTerms = parseNumber2(options.minSharedTerms, "--min-shared-terms");
+  if (contextOverlap !== void 0 || options.contextOverlap || minOverlap !== void 0 || minSharedTerms !== void 0) {
+    rules.push(checks.contextOverlap({ ...contextOverlap, minOverlap, minSharedTerms }));
   }
-  if (detector.startsWith("key.")) {
-    return { category: "credential", confidence: "medium" };
+  const quoteOverlap = optionObject(evalConfig.quoteOverlap);
+  if (quoteOverlap !== void 0 || options.quoteOverlap) {
+    rules.push(checks.quoteOverlap(quoteOverlap));
   }
-  return { category: "credential", confidence: "medium" };
-}
-function redactionDetectorFindings(read, runId) {
-  const runs = runId === void 0 ? read.runs : read.runs.filter((run) => run.runId === runId);
-  const out = [];
-  for (const run of runs) {
-    for (const node of flattenNodes(run.children)) {
-      const attrs = node.event.attributes;
-      if (attrs === void 0) continue;
-      const result = redact(attrs, { profile: "share" });
-      for (const finding of result.findings) {
-        if (finding.action === "keep") continue;
-        const taxonomy = classifyRedactionDetector(finding.detector);
-        out.push({
-          ruleId: "safety.redactDetector",
-          severity: detectorSeverity(finding),
-          status: finding.severity === "error" ? "fail" : "warning",
-          message: `Redaction detector ${finding.detector} matched ${finding.matchKind} at ${finding.path}.`,
-          expected: "redacted trace content",
-          actual: finding.detector,
-          evidence: [
-            {
-              runId: node.event.runId,
-              eventId: node.event.eventId,
-              ...node.event.parentId !== void 0 ? { parentId: node.event.parentId } : {},
-              kind: node.event.kind,
-              name: node.event.name,
-              ...node.event.status !== void 0 ? { status: node.event.status } : {},
-              path: `attributes.${finding.path.replace(/^\$\.?/, "")}`
-            }
-          ],
-          category: taxonomy.category,
-          confidence: taxonomy.confidence,
-          detector: finding.detector,
-          action: finding.action
-        });
-      }
-    }
+  const citationPresence = optionObject(evalConfig.citationPresence);
+  if (citationPresence !== void 0 || options.citationPresence) {
+    rules.push(checks.citationPresence(citationPresence));
   }
-  return out.sort((a, b) => {
-    const aEvidence = a.evidence[0];
-    const bEvidence = b.evidence[0];
-    return (aEvidence?.runId ?? "").localeCompare(bEvidence?.runId ?? "") || (aEvidence?.eventId ?? "").localeCompare(bEvidence?.eventId ?? "") || (aEvidence?.path ?? "").localeCompare(bEvidence?.path ?? "") || a.message.localeCompare(b.message);
-  });
+  const sourceIds = sourceIdsFromConfig(evalConfig.requiredSourceIds);
+  const requiredSourceIds = [...sourceIds?.ids ?? [], ...options.requiredSourceId ?? []];
+  if (requiredSourceIds.length > 0) {
+    rules.push(checks.requiredSourceIds(requiredSourceIds, sourceIds?.options));
+  }
+  const cliAnswerLength = {
+    minCharacters: parseNumber2(options.minAnswerCharacters, "--min-answer-characters"),
+    maxCharacters: parseNumber2(options.maxAnswerCharacters, "--max-answer-characters"),
+    minWords: parseNumber2(options.minAnswerWords, "--min-answer-words"),
+    maxWords: parseNumber2(options.maxAnswerWords, "--max-answer-words")
+  };
+  const hasCliAnswerLength = Object.values(cliAnswerLength).some((value) => value !== void 0);
+  if (evalConfig.answerLengthBounds !== void 0 || hasCliAnswerLength) {
+    rules.push(checks.answerLengthBounds({ ...evalConfig.answerLengthBounds, ...cliAnswerLength }));
+  }
+  const bannedPhrases = [
+    ...asStringArray2(
+      evalConfig.bannedUnsupportedPhrases,
+      "eval.bannedUnsupportedPhrases"
+    ) ?? [],
+    ...options.bannedPhrase ?? []
+  ];
+  if (bannedPhrases.length > 0) rules.push(checks.bannedUnsupportedPhrases(bannedPhrases));
+  return rules.length > 0 ? rules : void 0;
 }
 function exitCodeFor3(result) {
-  if (result.status === "SAFE" || result.status === "SAFE WITH WARNINGS") return 0;
-  if (result.status === "UNSAFE") return 1;
+  if (result.status === "pass") return 0;
+  if (result.status === "fail") return 1;
   return 2;
 }
-function explainFinding(finding, blocksBundle) {
-  const path29 = finding.evidence[0]?.path ?? "(unknown path)";
-  const category = finding.category ?? "structure";
-  const confidence = finding.confidence ?? "medium";
-  const detector = finding.detector ?? finding.ruleId;
-  const action = finding.action ?? "review";
-  const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
-  return [
-    `  Matched: detector=${detector}; path=${path29}; category=${category}`,
-    `  Why: ${finding.message}`,
-    `  Confidence: ${confidence}`,
-    `  Redaction: ${redactionHint}`,
-    `  Override: configure a custom redaction/detector rule locally (see docs/SAFETY-POLICY.md); do not weaken defaults globally.`,
-    `  Bundle gate: ${blocksBundle ? "blocks share-safe bundle unless --allow-unsafe" : "does not block by itself (warning/info)"}`
-  ];
+function stable4(value) {
+  if (Array.isArray(value)) return value.map(stable4);
+  if (value === null || typeof value !== "object") return value;
+  const record = value;
+  return Object.fromEntries(
+    Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable4(record[key])])
+  );
 }
-function findingExplanation(finding) {
-  const blocks = finding.severity === "error" || finding.status === "fail";
-  return {
-    ruleId: finding.ruleId,
-    detector: finding.detector ?? finding.ruleId,
-    path: finding.evidence[0]?.path,
-    category: finding.category,
-    confidence: finding.confidence,
-    action: finding.action,
-    blocksBundle: blocks,
-    // Never include matched secret/PII values.
-    message: finding.message
-  };
+function printJson3(result) {
+  console.log(JSON.stringify(stable4(result), null, 2));
 }
-function printHuman3(result, explain = false) {
-  console.log(`Safety status: ${result.status}`);
+function printHuman3(result) {
+  console.log(`Eval status: ${result.status}`);
   console.log(`Format: ${result.format}`);
   if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
-  if (result.sourceAssessment !== void 0 && result.artifactAssessment !== void 0) {
-    console.log(`Source assessment: ${result.sourceAssessment.status}`);
-    console.log(`Artifact assessment: ${result.artifactAssessment.status}`);
-    if (result.redactionSummary !== void 0) {
-      console.log(
-        `Redaction: profile=${result.redactionSummary.profile}, findings=${result.redactionSummary.findings}`
-      );
-    }
-  }
   console.log(
-    `Summary: ${result.summary.findings} finding(s), ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
+    `Summary: ${result.summary.failed} failed, ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
   );
   for (const diagnostic3 of result.diagnostics) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path29 = finding.evidence[0]?.path;
-    const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
-    console.log(`- ${finding.ruleId}: ${finding.message}${path29 ? ` (${path29})` : ""}${taxonomy}`);
-    if (explain) {
-      const blocks = finding.severity === "error" || finding.status === "fail";
-      for (const line of explainFinding(finding, blocks)) {
-        console.log(line);
-      }
-    }
+    const path30 = finding.evidence[0]?.path;
+    console.log(`- ${finding.ruleId}: ${finding.message}${path30 ? ` (${path30})` : ""}`);
   }
-  console.log(`Note: ${result.note}`);
 }
-function printJson3(result, explain = false) {
-  const payload = explain === true ? { ...result, explanations: result.findings.map(findingExplanation) } : result;
-  console.log(JSON.stringify(stable4(payload), null, 2));
+function readErrorResult3(error) {
+  if (error instanceof TraceReadError) {
+    const code = error.code === "unsupported_format" ? "AI_EVAL_UNSUPPORTED_FORMAT" : error.code === "ambiguous_format" ? "AI_EVAL_AMBIGUOUS_FORMAT" : "AI_EVAL_TRACE_UNREADABLE";
+    return errorResult3(code, error.message);
+  }
+  return errorResult3(
+    "AI_EVAL_TRACE_UNREADABLE",
+    error instanceof Error ? error.message : String(error)
+  );
 }
-async function safetyCommand(command, target, options, stdin) {
+async function evalCommand(target, options = {}, stdin = process.stdin) {
   let result;
+  let phase = "config";
   try {
+    const config = await loadConfig2(options.config);
+    const rules = buildRules2(config, options);
+    phase = "read";
     const input3 = await inputFromTarget(target, options, stdin);
     const read = await openTrace(input3, {
       ...options.format !== void 0 ? { format: options.format } : {}
     });
-    const source = assessOpenedTrace(read, {
-      ...options,
+    result = await evalRun(read, {
+      ...rules !== void 0 ? { checks: rules } : {},
       ...options.run !== void 0 ? { runId: options.run } : {}
     });
-    if (command === "scan") {
-      result = { ...source, command: "scan" };
+  } catch (error) {
+    if (phase === "config") {
+      const message = error instanceof Error ? error.message : String(error);
+      const code = message.startsWith("--") ? "AI_EVAL_INVALID_ARGUMENTS" : error instanceof SyntaxError || message.includes("Unsupported eval config extension") || message.includes("TypeScript eval configs") || message.includes("Config must") || message.includes("eval config") || message.includes("must be an array") ? "AI_EVAL_INVALID_CONFIG" : "AI_EVAL_CONFIG_LOAD_FAILED";
+      result = errorResult3(code, message);
     } else {
-      const profile = options.redactionProfile ?? "share";
-      const rawContent = input3.type === "string" ? input3.content : input3.type === "file" ? await readFile(input3.path, "utf-8") : void 0;
-      if (rawContent === void 0) {
-        result = {
-          ...source,
-          command: "verify-safe",
-          sourceAssessment: layerFromResult(source)
-        };
-      } else {
-        const redacted = redactTraceContent(rawContent, profile);
-        const artifactRead = await openTrace(
-          { type: "string", content: redacted.content },
-          { format: options.format ?? "agent-inspect-jsonl" }
-        );
-        const artifact = assessOpenedTrace(artifactRead, {
-          ...options,
-          ...options.run !== void 0 ? { runId: options.run } : {}
-        });
-        const detectors = [
-          ...new Set(redacted.findings.map((finding) => finding.detector))
-        ].sort((a, b) => a.localeCompare(b));
-        result = resultFromParts({
-          command: "verify-safe",
-          format: artifact.format,
-          runId: artifact.runId ?? source.runId,
-          findings: artifact.findings,
-          diagnostics: artifact.diagnostics,
-          warnings: artifact.warnings,
-          unsupportedFields: artifact.unsupportedFields,
-          status: artifact.status,
-          sourceAssessment: layerFromResult(source),
-          artifactAssessment: layerFromResult(artifact),
-          redactionSummary: {
-            profile,
-            findings: redacted.findings.length,
-            detectors
-          }
-        });
-      }
+      result = readErrorResult3(error);
     }
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    result = message.startsWith("--") ? invalidArgumentResult(command, error) : readErrorResult3(command, error);
   }
   process.exitCode = exitCodeFor3(result);
-  if (options.json) printJson3(result, options.explain === true);
-  else printHuman3(result, options.explain === true);
-}
-function scanCommand(target, options = {}, stdin = process.stdin) {
-  return safetyCommand("scan", target, options, stdin);
-}
-function verifySafeCommand(target, options = {}, stdin = process.stdin) {
-  return safetyCommand("verify-safe", target, options, stdin);
-}
-function assessOpenedTrace(read, options = {}) {
-  try {
-    const rules = buildSafetyRules(options);
-    const checkResult = runTraceChecks(
-      { read },
-      {
-        rules,
-        ...options.runId !== void 0 ? { runId: options.runId } : {},
-        ...options.run !== void 0 ? { runId: options.run } : {}
-      }
-    );
-    const detectorFindings = checkResult.diagnostics.length === 0 ? redactionDetectorFindings(read, checkResult.runId) : [];
-    return resultFromParts({
-      command: "verify-safe",
-      format: checkResult.format,
-      runId: checkResult.runId,
-      findings: [...checkResult.findings, ...detectorFindings],
-      diagnostics: [
-        ...checkResult.diagnostics.map(diagnosticFromCheck),
-        ...warningDiagnostics(read.warnings, read.unsupportedFields)
-      ],
-      warnings: read.warnings,
-      unsupportedFields: read.unsupportedFields
-    });
-  } catch (error) {
-    return messageStartsWithDash(error) ? invalidArgumentResult("verify-safe", error) : readErrorResult3("verify-safe", error);
-  }
-}
-function messageStartsWithDash(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  return message.startsWith("--");
+  if (options.json) printJson3(result);
+  else if (options.markdown) console.log(renderEvalMarkdown(result).trimEnd());
+  else printHuman3(result);
 }
 var NOTE = "Generated locally by AgentInspect. Artifacts are best-effort summaries, not compliance or security certification.";
 var SAFETY_RULES = [
@@ -9271,8 +9652,8 @@ function renderCheckSection(result) {
     `Diagnostics: ${result.diagnostics.length}`
   ];
   for (const finding of result.findings.slice(0, 10)) {
-    const path29 = finding.evidence[0]?.path ?? "(run)";
-    lines.push(`- ${finding.ruleId}: ${finding.message} (${path29})`);
+    const path30 = finding.evidence[0]?.path ?? "(run)";
+    lines.push(`- ${finding.ruleId}: ${finding.message} (${path30})`);
   }
   for (const diagnostic3 of result.diagnostics.slice(0, 10)) {
     lines.push(`- ${diagnostic3.code}: ${diagnostic3.message}`);
@@ -9350,8 +9731,8 @@ function renderHtml(trace, check, diff) {
 `;
 }
 async function writeArtifact(outputDir, relativePath, content, files) {
-  const outPath = path18.join(outputDir, relativePath);
-  await mkdir(path18.dirname(outPath), { recursive: true });
+  const outPath = path19.join(outputDir, relativePath);
+  await mkdir(path19.dirname(outPath), { recursive: true });
   await writeFile(outPath, content, "utf-8");
   files.push(relativePath);
 }
@@ -9380,7 +9761,7 @@ function shouldWriteEvidence(options, status) {
   return status === "unsafe" || status === "regression" || status === "unknown" || status === "warning";
 }
 async function artifactsCommand(target, options = {}, stdin = process.stdin) {
-  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path18.resolve(options.outputDir.trim()) : "";
+  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path19.resolve(options.outputDir.trim()) : "";
   if (outputDir === "") {
     console.error("--output-dir is required.");
     process.exitCode = 1;
@@ -9520,8 +9901,8 @@ async function artifactsCommand(target, options = {}, stdin = process.stdin) {
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    await mkdir(path18.dirname(path18.resolve(summaryTarget)), { recursive: true });
-    await appendFile(path18.resolve(summaryTarget), `
+    await mkdir(path19.dirname(path19.resolve(summaryTarget)), { recursive: true });
+    await appendFile(path19.resolve(summaryTarget), `
 ${renderMarkdown(trace, check, diff)}`, "utf-8");
   }
   const manifestFiles = [...files, "manifest.json"].sort((a, b) => a.localeCompare(b));
@@ -9540,10 +9921,10 @@ ${renderMarkdown(trace, check, diff)}`, "utf-8");
       findings: diff?.findings.length ?? 0,
       diagnostics: diff?.diagnostics.length ?? 0
     },
-    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path18.resolve(summaryTarget) } : {},
+    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path19.resolve(summaryTarget) } : {},
     note: NOTE
   };
-  await writeFile(path18.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
+  await writeFile(path19.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
   if (options.json === true) {
     console.log(writeJson3(manifest).trimEnd());
   } else {
@@ -9601,8 +9982,8 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const location = resolveWorkspaceLocation(cwd);
       const manifest = await readWorkspaceManifestFile(location);
       if (manifest.ok && manifest.manifest) {
-        const rel = path18.relative(location.workspaceDir, normalized);
-        if (!rel.startsWith("..") && !path18.isAbsolute(rel)) {
+        const rel = path19.relative(location.workspaceDir, normalized);
+        if (!rel.startsWith("..") && !path19.isAbsolute(rel)) {
           return resolveInsideWorkspace(location.workspaceDir, rel);
         }
       }
@@ -9618,7 +9999,7 @@ async function resolveOutputDir(options, runIds, cwd, format) {
       const label = runIds.length === 1 ? sanitizeBundleRunId(runIds[0]) : `multi-${runIds.length}`;
       const base2 = resolveInsideWorkspace(
         location.workspaceDir,
-        path18.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
+        path19.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
       );
       return format === "zip" ? `${base2}.zip` : base2;
     }
@@ -10023,19 +10404,19 @@ async function bundleCommand(runIdArg, options = {}) {
     let sidecarDir = outputDir;
     if (outputDir.toLowerCase().endsWith(".html")) {
       htmlPath = outputDir;
-      sidecarDir = path18.dirname(outputDir);
+      sidecarDir = path19.dirname(outputDir);
     } else {
       await mkdir(outputDir, { recursive: true });
-      htmlPath = path18.join(outputDir, EVIDENCE_HTML_FILENAME);
+      htmlPath = path19.join(outputDir, EVIDENCE_HTML_FILENAME);
       sidecarDir = outputDir;
     }
     await mkdir(sidecarDir, { recursive: true });
     await writeFile(htmlPath, htmlContent, "utf-8");
-    await writeFile(path18.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await writeFile(path19.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     outputPath = htmlPath;
   } else if (format === "zip") {
     const zipPath = outputDir.toLowerCase().endsWith(".zip") ? outputDir : `${outputDir}.zip`;
-    const zipParent = path18.dirname(zipPath);
+    const zipParent = path19.dirname(zipPath);
     await mkdir(zipParent, { recursive: true });
     const entries = [
       ...[...packaged.entries()].map(([relativePath, content]) => ({
@@ -10051,10 +10432,10 @@ async function bundleCommand(runIdArg, options = {}) {
     await mkdir(outputDir, { recursive: true });
     for (const [relativePath, content] of packaged.entries()) {
       const outPath = assertBundlePathContained(outputDir, relativePath);
-      await mkdir(path18.dirname(outPath), { recursive: true });
+      await mkdir(path19.dirname(outPath), { recursive: true });
       await writeFile(outPath, content, "utf-8");
     }
-    await writeFile(path18.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    await writeFile(path19.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
     if (!files.includes(EVIDENCE_MANIFEST_FILENAME)) {
       files.push(EVIDENCE_MANIFEST_FILENAME);
     }
@@ -10100,7 +10481,7 @@ function writeJson5(value) {
 `;
 }
 async function bundleVerifyCommand(targetPath, options = {}) {
-  const root = path18.resolve(targetPath.trim() || ".");
+  const root = path19.resolve(targetPath.trim() || ".");
   const result = await verifyEvidenceDirectory(root, {
     unexpectedFiles: options.unexpected ?? "fail"
   });
@@ -10139,7 +10520,7 @@ function writeJson6(value) {
 }
 async function resolveHtmlPath(root) {
   const candidates = [
-    path18.join(root, "evidence.html"),
+    path19.join(root, "evidence.html"),
     root.toLowerCase().endsWith(".html") ? root : ""
   ].filter(Boolean);
   for (const candidate of candidates) {
@@ -10154,7 +10535,7 @@ async function resolveHtmlPath(root) {
   );
 }
 async function bundleOpenCommand(targetPath, options = {}) {
-  const root = path18.resolve(targetPath.trim() || ".");
+  const root = path19.resolve(targetPath.trim() || ".");
   try {
     await access(root);
   } catch {
@@ -10171,7 +10552,7 @@ async function bundleOpenCommand(targetPath, options = {}) {
   try {
     const info = await stat(root);
     if (info.isFile() && root.toLowerCase().endsWith(".html")) {
-      verifyRoot = path18.dirname(root);
+      verifyRoot = path19.dirname(root);
     }
   } catch {
   }
@@ -10203,7 +10584,7 @@ async function bundleOpenCommand(targetPath, options = {}) {
   let htmlPath;
   try {
     htmlPath = await resolveHtmlPath(
-      root.toLowerCase().endsWith(".html") ? path18.dirname(root) : root
+      root.toLowerCase().endsWith(".html") ? path19.dirname(root) : root
     );
     if (root.toLowerCase().endsWith(".html")) {
       htmlPath = root;
@@ -10219,7 +10600,7 @@ async function bundleOpenCommand(targetPath, options = {}) {
     return;
   }
   try {
-    await readFile(path18.join(path18.dirname(htmlPath), "evidence.json"), "utf-8");
+    await readFile(path19.join(path19.dirname(htmlPath), "evidence.json"), "utf-8");
   } catch {
   }
   const fileUrl = pathToFileURL(htmlPath).href;
@@ -10305,24 +10686,24 @@ function resolveTargetPath(client, projectLocal) {
   if (projectLocal) {
     switch (client) {
       case "cursor":
-        return path18.join(".cursor", "mcp.json");
+        return path19.join(".cursor", "mcp.json");
       case "claude-code":
-        return path18.join(".mcp.json");
+        return path19.join(".mcp.json");
       case "codex":
-        return path18.join(".codex", "config.toml.json");
+        return path19.join(".codex", "config.toml.json");
       case "gemini":
-        return path18.join(".gemini", "settings.json");
+        return path19.join(".gemini", "settings.json");
     }
   }
   switch (client) {
     case "cursor":
-      return path18.join("~", ".cursor", "mcp.json");
+      return path19.join("~", ".cursor", "mcp.json");
     case "claude-code":
-      return path18.join("~", ".claude.json");
+      return path19.join("~", ".claude.json");
     case "codex":
-      return path18.join("~", ".codex", "config.toml");
+      return path19.join("~", ".codex", "config.toml");
     case "gemini":
-      return path18.join("~", ".gemini", "settings.json");
+      return path19.join("~", ".gemini", "settings.json");
   }
 }
 async function mcpConfigureCommand(options) {
@@ -10346,8 +10727,8 @@ async function mcpConfigureCommand(options) {
   ];
   let wrote = false;
   if (!dryRun && projectLocal) {
-    const abs = path18.resolve(targetPath);
-    await mkdir(path18.dirname(abs), { recursive: true });
+    const abs = path19.resolve(targetPath);
+    await mkdir(path19.dirname(abs), { recursive: true });
     await writeFile(abs, `${JSON.stringify(config, null, 2)}
 `, "utf8");
     wrote = true;
@@ -10507,23 +10888,23 @@ function readManifestDocument(value) {
   };
 }
 function cwdRelative(filePath) {
-  const relative = path18.relative(process.cwd(), path18.resolve(filePath)).replace(/\\/g, "/");
-  if (relative === "" || relative.startsWith("../") || path18.isAbsolute(relative)) {
-    return path18.basename(filePath);
+  const relative = path19.relative(process.cwd(), path19.resolve(filePath)).replace(/\\/g, "/");
+  if (relative === "" || relative.startsWith("../") || path19.isAbsolute(relative)) {
+    return path19.basename(filePath);
   }
   return relative;
 }
 async function readReporterManifest(filePath) {
-  const absolute = path18.resolve(filePath);
+  const absolute = path19.resolve(filePath);
   const raw = await readFile(absolute, "utf-8");
   const document = readManifestDocument(JSON.parse(raw));
   const manifest = document.manifest;
   const results = manifest.results.map((result) => ({
     testId: safeText(result.testId),
     name: safeText(result.name),
-    ...result.file === void 0 ? {} : { file: safeText(path18.basename(result.file)) },
+    ...result.file === void 0 ? {} : { file: safeText(path19.basename(result.file)) },
     status: result.status,
-    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path18.basename(result.tracePath)) },
+    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path19.basename(result.tracePath)) },
     artifacts: result.artifacts,
     diagnostics: result.diagnostics
   }));
@@ -10662,15 +11043,15 @@ async function ciSummaryCommand(manifestPaths, options = {}) {
     return;
   }
   const markdown = renderMarkdown2(result);
-  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path18.resolve(options.output.trim()) : void 0;
+  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path19.resolve(options.output.trim()) : void 0;
   if (outputPath !== void 0) {
-    await mkdir(path18.dirname(outputPath), { recursive: true });
+    await mkdir(path19.dirname(outputPath), { recursive: true });
     await writeFile(outputPath, markdown, "utf-8");
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    const summaryPath = path18.resolve(summaryTarget);
-    await mkdir(path18.dirname(summaryPath), { recursive: true });
+    const summaryPath = path19.resolve(summaryTarget);
+    await mkdir(path19.dirname(summaryPath), { recursive: true });
     await appendFile(summaryPath, `
 ${markdown}`, "utf-8");
   }
@@ -10855,7 +11236,7 @@ jobs:
 }
 async function planInit(options = {}) {
   const framework = normalizeFramework(options.framework);
-  const cwd = path18.resolve(options.cwd ?? process.cwd());
+  const cwd = path19.resolve(options.cwd ?? process.cwd());
   const demoPath = framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${framework}-demo.mjs`;
   const candidates = [
     { rel: CONFIG_FILE, content: configTemplate(framework) },
@@ -10870,7 +11251,7 @@ async function planInit(options = {}) {
   }
   const files = [];
   for (const candidate of candidates) {
-    const abs = path18.join(cwd, candidate.rel);
+    const abs = path19.join(cwd, candidate.rel);
     try {
       await access(abs);
       files.push({
@@ -10891,12 +11272,12 @@ async function writePlannedFiles(plan, cwd, options) {
     if (entry.action === "skip") {
       continue;
     }
-    const abs = path18.join(cwd, entry.path);
+    const abs = path19.join(cwd, entry.path);
     if (options.dryRun) {
       written.push(entry.path);
       continue;
     }
-    await mkdir(path18.dirname(abs), { recursive: true });
+    await mkdir(path19.dirname(abs), { recursive: true });
     const demoPath = plan.framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${plan.framework}-demo.mjs`;
     const content = entry.path === CONFIG_FILE ? configTemplate(plan.framework) : entry.path === GITKEEP ? "" : entry.path.endsWith(".yml") ? githubWorkflowTemplate(demoPath) : demoTemplate(plan.framework);
     await writeFile(abs, content, "utf-8");
@@ -10905,7 +11286,7 @@ async function writePlannedFiles(plan, cwd, options) {
   return written;
 }
 async function initCommand(options = {}) {
-  const cwd = path18.resolve(options.cwd ?? process.cwd());
+  const cwd = path19.resolve(options.cwd ?? process.cwd());
   try {
     const plan = await planInit({ ...options, cwd });
     const toWrite = plan.files.filter((file) => file.action === "create").map((f) => f.path);
@@ -11000,7 +11381,7 @@ function envCheck(name, optional = true) {
   };
 }
 async function traceDirWritable(traceDir) {
-  const resolved = path18.resolve(traceDir);
+  const resolved = path19.resolve(traceDir);
   try {
     await mkdir(resolved, { recursive: true });
     await access(resolved, constants.W_OK);
@@ -11021,10 +11402,10 @@ async function traceDirWritable(traceDir) {
   }
 }
 function readPackageVersionNearEntry(entryPath, packageName) {
-  let dir = path18.dirname(path18.resolve(entryPath));
-  const { root } = path18.parse(dir);
+  let dir = path19.dirname(path19.resolve(entryPath));
+  const { root } = path19.parse(dir);
   while (true) {
-    const candidate = path18.join(dir, "package.json");
+    const candidate = path19.join(dir, "package.json");
     if (existsSync(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync(candidate, "utf8"));
@@ -11035,14 +11416,14 @@ function readPackageVersionNearEntry(entryPath, packageName) {
       }
     }
     if (dir === root) break;
-    const parent = path18.dirname(dir);
+    const parent = path19.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return void 0;
 }
 function resolveInstalledPackage(cwd, name) {
-  const require2 = createRequire(path18.join(cwd, "package.json"));
+  const require2 = createRequire(path19.join(cwd, "package.json"));
   try {
     const entry = require2.resolve(name);
     let version2;
@@ -11140,7 +11521,7 @@ function versionMismatchCheck(cwd) {
   };
 }
 async function runDoctorChecks(options = {}) {
-  const cwd = path18.resolve(options.cwd ?? process2.cwd());
+  const cwd = path19.resolve(options.cwd ?? process2.cwd());
   const traceDir = options.traceDir?.trim() || process2.env.AGENT_INSPECT_TRACE_DIR?.trim() || ".agent-inspect";
   const checks2 = [
     nodeVersionCheck(),
@@ -11380,7 +11761,7 @@ function parsePluginManifest(input3) {
   };
 }
 async function readPluginManifestFile(packageDir) {
-  const manifestPath = path18.join(packageDir, PLUGIN_MANIFEST_FILENAME);
+  const manifestPath = path19.join(packageDir, PLUGIN_MANIFEST_FILENAME);
   try {
     const raw = await readFile(manifestPath, "utf8");
     const parsed = parsePluginManifest(JSON.parse(raw));
@@ -11454,7 +11835,7 @@ function createTraceDirectoryIndexer() {
 // packages/cli/src/plugins.ts
 async function readPackageName(packageDir) {
   try {
-    const raw = await readFile(path18.join(packageDir, "package.json"), "utf8");
+    const raw = await readFile(path19.join(packageDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     return typeof parsed.name === "string" ? parsed.name : void 0;
   } catch {
@@ -11462,7 +11843,7 @@ async function readPackageName(packageDir) {
   }
 }
 async function discoverPlugins(cwd = process.cwd()) {
-  const nodeModules = path18.join(cwd, "node_modules");
+  const nodeModules = path19.join(cwd, "node_modules");
   const found = [];
   let entries;
   try {
@@ -11473,7 +11854,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   for (const entry of entries.sort()) {
     if (entry.startsWith("@")) continue;
     if (!isPluginPackageName(entry)) continue;
-    const packageDir = path18.join(nodeModules, entry);
+    const packageDir = path19.join(nodeModules, entry);
     const manifestRead = await readPluginManifestFile(packageDir);
     found.push({
       packageName: entry,
@@ -11486,7 +11867,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   return found;
 }
 async function validatePluginPackage(packageRef, cwd = process.cwd()) {
-  const packageDir = path18.isAbsolute(packageRef) ? packageRef : path18.join(cwd, "node_modules", packageRef);
+  const packageDir = path19.isAbsolute(packageRef) ? packageRef : path19.join(cwd, "node_modules", packageRef);
   const packageName = await readPackageName(packageDir) ?? packageRef;
   const errors = [];
   const warnings = [];
@@ -11562,7 +11943,7 @@ async function pluginsValidateCommand(packageRef, cwd) {
 }
 var INDEX_FILENAME = ".agent-inspect-index.json";
 function traceIndexPath(traceDir) {
-  return path18.join(traceDir, INDEX_FILENAME);
+  return path19.join(traceDir, INDEX_FILENAME);
 }
 function parseMaxEntries(raw) {
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -11675,7 +12056,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-2FS6BLR7.mjs');
+    return await import('./src-R6V5EZZH.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(
@@ -11705,7 +12086,7 @@ async function newestTraceMtimeMs2(traceDir) {
     for (const file of files) {
       if (!file.endsWith(".jsonl")) continue;
       try {
-        const s = await stat(path18.join(traceDir, file));
+        const s = await stat(path19.join(traceDir, file));
         if (s.mtimeMs > newest) newest = s.mtimeMs;
       } catch {
       }
@@ -11957,11 +12338,11 @@ function printJson5(value) {
   console.log(JSON.stringify(value, null, 2));
 }
 function resolveCwd(options) {
-  return path18.resolve(options.cwd ?? process.cwd());
+  return path19.resolve(options.cwd ?? process.cwd());
 }
 async function suiteInitCommand(options = {}) {
   const cwd = resolveCwd(options);
-  const configPath = path18.join(cwd, DEFAULT_CONFIG_FILENAME);
+  const configPath = path19.join(cwd, DEFAULT_CONFIG_FILENAME);
   const template = options.template?.trim();
   const suiteConfig = template !== void 0 && template !== "" ? resolveSuiteTemplate(template) : defaultSuiteConfigTemplate();
   if (options.dryRun) {
@@ -12080,13 +12461,13 @@ async function suiteListCommand(options = {}) {
 }
 async function writeSuiteArtifact(result, configOutputDir, options) {
   const cwd = resolveCwd(options);
-  const outputDir = path18.resolve(
+  const outputDir = path19.resolve(
     cwd,
     options.output ?? configOutputDir ?? DEFAULT_SUITE_ARTIFACTS_DIR
   );
   await mkdir(outputDir, { recursive: true });
   const stamp = result.startedAt.replace(/[:.]/g, "-");
-  const filePath = path18.join(outputDir, `${result.suiteName}-${stamp}.json`);
+  const filePath = path19.join(outputDir, `${result.suiteName}-${stamp}.json`);
   await writeFile(filePath, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
   return filePath;
@@ -12144,7 +12525,7 @@ async function loadSuiteResultFromInput(options) {
   if (options.input === void 0 || options.input.trim() === "") {
     throw new Error("Pass --input <suite-run.json> from a prior suite run.");
   }
-  const inputPath = path18.resolve(cwd, options.input.trim());
+  const inputPath = path19.resolve(cwd, options.input.trim());
   const raw = await readFile(inputPath, "utf-8");
   return JSON.parse(raw);
 }
@@ -12184,9 +12565,9 @@ function normalizeMetrics(raw) {
 }
 async function writeArtifacts(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
-  const jsonPath = path18.join(outputDir, "cohort-results.json");
-  const markdownPath = path18.join(outputDir, "cohort-summary.md");
-  const htmlPath = path18.join(outputDir, "cohort-report.html");
+  const jsonPath = path19.join(outputDir, "cohort-results.json");
+  const markdownPath = path19.join(outputDir, "cohort-summary.md");
+  const htmlPath = path19.join(outputDir, "cohort-report.html");
   await writeFile(jsonPath, `${renderCohortReport(result, { format: "json" })}
 `, "utf-8");
   await writeFile(
@@ -12215,7 +12596,7 @@ async function cohortCommand(options = {}) {
     const format = options.format ?? (options.json ? "json" : "markdown");
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts(result, path18.resolve(options.output.trim()));
+      artifacts = await writeArtifacts(result, path19.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(
@@ -12285,11 +12666,11 @@ function parseDuration2(value) {
 async function writeArtifacts2(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
   const paths = {
-    jsonPath: path18.join(outputDir, "gate-results.json"),
-    markdownPath: path18.join(outputDir, "gate-summary.md"),
-    htmlPath: path18.join(outputDir, "gate-report.html"),
-    junitPath: path18.join(outputDir, "junit.xml"),
-    githubPath: path18.join(outputDir, "github-step-summary.md")
+    jsonPath: path19.join(outputDir, "gate-results.json"),
+    markdownPath: path19.join(outputDir, "gate-summary.md"),
+    htmlPath: path19.join(outputDir, "gate-report.html"),
+    junitPath: path19.join(outputDir, "junit.xml"),
+    githubPath: path19.join(outputDir, "github-step-summary.md")
   };
   await writeFile(
     paths.jsonPath,
@@ -12357,7 +12738,7 @@ async function gateCommand(options = {}) {
     const result = await runGate(runs, gateOptions);
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts2(result, path18.resolve(options.output.trim()));
+      artifacts = await writeArtifacts2(result, path19.resolve(options.output.trim()));
     }
     const failed = !result.ok;
     if (shouldEmitEvidence(options.evidenceOn, failed)) {
@@ -12664,7 +13045,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").option("--policy <path>", "local JSON redaction policy (extraKeys + bounded patterns)").action((target, opts) => {
     runCommand(() => scanCommand(target, opts));
   });
   program.command("verify-safe").description("Best-effort local trace safety verification").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -12673,7 +13054,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").option("--policy <path>", "local JSON redaction policy (extraKeys + bounded patterns)").action((target, opts) => {
     runCommand(() => verifySafeCommand(target, opts));
   });
   program.command("artifacts").description("Create safe local CI trace artifacts").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").requiredOption("--output-dir <path>", "directory for generated artifacts").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -12833,7 +13214,10 @@ function createCliProgram() {
       "--redaction-profile <profile>",
       "alias for --profile (canonical spelling)"
     ).choices(["local", "share", "strict"])
-  ).option("-o, --output <path>", "write redacted content to a file").option("--out <path>", "alias for --output").option("--json", "print deterministic JSON wrapper with findings").action((target, opts) => {
+  ).option("-o, --output <path>", "write redacted content to a file").option("--out <path>", "alias for --output").option("--json", "print deterministic JSON wrapper with findings").option("--policy <path>", "local JSON redaction policy (extraKeys + bounded patterns)").option(
+    "--fail-on-residual",
+    "exit non-zero when residual safety is UNSAFE or UNKNOWN (opt-in)"
+  ).action((target, opts) => {
     runCommand(() => redactCommand(target, opts));
   });
   program.command("explain").description("Explain a local trace with deterministic facts (no provider calls)").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -13015,9 +13399,9 @@ function isPrimaryModule() {
   if (!entry) return false;
   const selfPath = fileURLToPath(import.meta.url);
   try {
-    return realpathSync(path18.resolve(entry)) === realpathSync(path18.resolve(selfPath));
+    return realpathSync(path19.resolve(entry)) === realpathSync(path19.resolve(selfPath));
   } catch {
-    return path18.resolve(entry) === path18.resolve(selfPath);
+    return path19.resolve(entry) === path19.resolve(selfPath);
   }
 }
 if (isPrimaryModule()) {