agent-inspect 6.26.0 → 6.28.0

package/packages/core/dist/advanced.d.cts

@@ -1,17 +1,17 @@
-export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-DOOT9GZ-.cjs';
-import { R as RedactionRule } from './log-config-CFlIJHTf.cjs';
-import { R as RedactionProfile, i as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, T as TraceMetadataStatus, f as StepType, h as TraceCorrelationMetadata } from './types-VzKihKQo.cjs';
-export { A as ActiveStepContext, j as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, g as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-VzKihKQo.cjs';
-import { a as InspectRunTree } from './inspect-event-DRthdZlf.cjs';
-export { A as AttributionConfidence, E as EventSource, c as InspectEvent, I as InspectKind, b as InspectNode } from './inspect-event-DRthdZlf.cjs';
-import { P as PersistedInspectEvent } from './persisted-inspect-event-CVZWZldL.cjs';
+export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-DGMqxFpz.cjs';
+import { R as RedactionRule } from './log-config-DcjV8ZjF.cjs';
+import { R as RedactionProfile, h as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, j as TraceMetadataStatus, f as StepType, g as TraceCorrelationMetadata } from './types-wXuxMUop.cjs';
+export { A as ActiveStepContext, i as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, T as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-wXuxMUop.cjs';
+import { a as InspectRunTree } from './inspect-event-CDqjcrG_.cjs';
+export { A as AttributionConfidence, E as EventSource, b as InspectEvent, I as InspectKind, c as InspectNode } from './inspect-event-CDqjcrG_.cjs';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-DiJ0I_vi.cjs';
 import { Stats } from 'node:fs';
-import { S as SessionWorkflowMetadata, al as SessionRunRecord, am as EnrichSessionSummaryOptions, an as SessionStatus, ao as SessionSummary, ap as SessionIndex, aq as BuildActivitySummaryOptions, ar as ActivitySummary, as as SessionWarning, at as BuildSessionIndexOptions, c as TraceCheckResult, P as TraceCheckStatus } from './index-CR4CCRqP.cjs';
-export { au as ActivityEntry, av as CriticalPathStep, aw as HandoffEdge, ax as RetryLink, ay as SESSION_WORKFLOW_KEYS, az as SessionCheckSummary, aA as SessionConfidence, aB as SessionEdgeSource, aC as SessionGroup, aD as SessionLastError, aE as SessionWorkflowKey } from './index-CR4CCRqP.cjs';
-import { b as ObservedOutcome } from './types-B562HgN_.cjs';
-export { O as ObservedOutcomeStatus } from './types-B562HgN_.cjs';
+import { aR as SessionWorkflowMetadata, aS as SessionRunRecord, aT as EnrichSessionSummaryOptions, aU as SessionStatus, aV as SessionSummary, aW as SessionIndex, aX as BuildActivitySummaryOptions, aY as ActivitySummary, aZ as SessionWarning, a_ as BuildSessionIndexOptions, N as TraceCheckResult, X as TraceCheckStatus, a2 as TraceContractInput, Z as TraceContract } from './index-DVetZwGG.cjs';
+export { a$ as ActivityEntry, b0 as CriticalPathStep, b1 as HandoffEdge, b2 as RetryLink, b3 as SESSION_WORKFLOW_KEYS, b4 as SessionCheckSummary, b5 as SessionConfidence, b6 as SessionEdgeSource, b7 as SessionGroup, b8 as SessionLastError, b9 as SessionWorkflowKey } from './index-DVetZwGG.cjs';
+import { b as ObservedOutcome } from './types-BA_IOdg4.cjs';
+export { a as ObservedOutcomeStatus } from './types-BA_IOdg4.cjs';
 import './writers.cjs';
-import './index-DLLz9sce.cjs';
+import './index-C6bCIbFO.cjs';
 
 interface ResolvedRedactionProfile {
     profile: RedactionProfile;
@@ -743,7 +743,48 @@ type EvidenceFormatVersion = "1.0";
 type EvidenceSafeStatus = "SAFE" | "SAFE WITH WARNINGS" | "UNSAFE" | "UNKNOWN";
 type EvidenceRedactionProfile = "local" | "share" | "strict";
 type EvidenceVerificationPolicy = "development" | "local" | "share" | "strict";
-type EvidenceFileRole = "report" | "redacted-trace" | "checks" | "redaction-report" | "summary" | "other";
+type EvidenceFileRole = "report" | "redacted-trace" | "checks" | "contract" | "redaction-report" | "summary" | "other";
+/** How a packaged contract/preset was supplied (6.28+). */
+type EvidenceContractBindingSource = "file" | "inline" | "preset" | "cli-shorthand" | "programmatic";
+/** Reproducibility honesty for contract binding (6.28+). */
+type EvidenceContractBindingStatus = "complete" | "partial" | "unavailable";
+/**
+ * Optional Evidence v2 contract binding (6.28+).
+ * Additive; older readers ignore unknown fields. Not a signature or trusted-time claim.
+ */
+interface EvidenceContractBinding {
+    status: EvidenceContractBindingStatus;
+    source: EvidenceContractBindingSource;
+    contractId?: string;
+    contractVersion?: string;
+    canonicalizationVersion: "1";
+    engineVersion: string;
+    /** Relative packaged path (typically `contract.resolved.json`). */
+    path?: string;
+    /** SHA-256 of the packaged resolved-contract bytes. */
+    sha256?: string;
+    ruleIds: string[];
+    unsupportedRuleIds?: string[];
+    note?: string;
+}
+/**
+ * Optional fields embedded in `check-results.json` to bind results to a contract digest.
+ */
+interface EvidenceCheckContractBinding {
+    contractDigest?: string;
+    canonicalizationVersion?: "1";
+    engineVersion?: string;
+    evaluatedRuleIds?: string[];
+    bindingStatus?: EvidenceContractBindingStatus;
+    unsupportedRuleIds?: string[];
+    origin?: {
+        source: EvidenceContractBindingSource;
+        preset?: string;
+        path?: string;
+    };
+    selectedScope?: Record<string, unknown>;
+    selectedAlternativeBranch?: string;
+}
 interface EvidenceSourceHash {
     runId: string;
     algorithm: "sha256";
@@ -780,6 +821,11 @@ interface EvidenceManifest {
      * Additive; older readers ignore unknown fields.
      */
     semantics?: EvidenceSemantics;
+    /**
+     * Optional resolved-contract binding (6.28+).
+     * Additive; older readers ignore unknown fields.
+     */
+    contract?: EvidenceContractBinding;
     files: EvidenceFileEntry[];
 }
 /**
@@ -818,6 +864,8 @@ interface EvidencePackagedFile {
 declare const EVIDENCE_FORMAT_VERSION: EvidenceFormatVersion;
 declare const EVIDENCE_ASSESSMENT_NOTE = "Best-effort local safety verification only; not a compliance certification.";
 declare const EVIDENCE_MANIFEST_FILENAME = "evidence.json";
+/** Packaged resolved TraceContract / check-preset snapshot (6.28+). */
+declare const EVIDENCE_RESOLVED_CONTRACT_FILENAME = "contract.resolved.json";
 
 /**
  * SHA-256 hex digest of exact bytes (UTF-8 when `data` is a string).
@@ -859,6 +907,7 @@ declare function buildEvidenceManifest(parts: {
     createdAt?: string;
     note?: string;
     semantics?: EvidenceManifest["semantics"];
+    contract?: EvidenceManifest["contract"];
 }): EvidenceManifest;
 /**
  * Minimal structural validation for a parsed evidence manifest object.
@@ -871,6 +920,105 @@ declare function parseEvidenceManifestJson(text: string): EvidenceManifest;
  */
 declare function collectTraceSchemaVersions(jsonl: string): string[];
 
+/**
+ * Evidence v2 contract binding (6.28) — package a resolved serializable
+ * TraceContract / check-preset snapshot and bind its digest to check results.
+ *
+ * Does not claim producer identity, trusted time, or semantic proof.
+ */
+
+declare const EVIDENCE_CONTRACT_CANONICALIZATION_VERSION: "1";
+declare const EVIDENCE_CONTRACT_PARTIAL_NOTE = "Custom or programmatic rules are not serializable; Evidence records rule IDs only and does not claim complete reviewer replay.";
+declare const EVIDENCE_CONTRACT_UNAVAILABLE_NOTE = "No resolved TraceContract or check preset was packaged with this Evidence artifact.";
+declare const EVIDENCE_CONTRACT_ASSURANCE_NOTE = "Contract binding verifies packaged digest integrity only; it does not prove producer identity, trusted time, source completeness, semantic truth, or external acceptance.";
+/** Deterministic JSON (sorted keys) with trailing newline. */
+declare function serializeCanonicalJson(value: unknown): string;
+/**
+ * Normalize TraceContract aliases and make common evaluator defaults explicit
+ * for canonicalization version `"1"`.
+ */
+declare function resolveSerializableTraceContract(input: TraceContractInput | TraceContract): TraceContract;
+/**
+ * Static rule-id inventory implied by a resolved TraceContract (no evaluation).
+ */
+declare function collectResolvedContractRuleIds(contract: TraceContract): string[];
+interface ResolvedContractDocument {
+    canonicalizationVersion: typeof EVIDENCE_CONTRACT_CANONICALIZATION_VERSION;
+    kind: "trace-contract" | "check-preset";
+    resolved: Record<string, unknown>;
+    origin: {
+        source: EvidenceContractBindingSource;
+        preset?: string;
+        path?: string;
+    };
+}
+interface BuildEvidenceContractPackageInput {
+    engineVersion: string;
+    source: EvidenceContractBindingSource;
+    /** Serializable TraceContract (preferred for `complete`). */
+    contract?: TraceContractInput | TraceContract;
+    /**
+     * Pre-resolved check preset / CLI shorthand snapshot (caller expands).
+     * Used when `contract` is omitted or as origin metadata beside a contract.
+     */
+    preset?: {
+        name: string;
+        resolved: Record<string, unknown>;
+    };
+    /** Original config path (omit or redact when sensitive). */
+    path?: string;
+    contractId?: string;
+    contractVersion?: string;
+    /**
+     * Stable IDs for programmatic / custom rules that cannot be serialized.
+     * Presence forces `status: "partial"`.
+     */
+    unsupportedRuleIds?: readonly string[];
+    /** Override rule ID list (defaults to static inventory from the contract / preset select). */
+    ruleIds?: readonly string[];
+    note?: string;
+}
+interface EvidenceContractPackage {
+    /** Packaged `contract.resolved.json` when a serializable snapshot exists. */
+    file?: EvidencePackagedFile;
+    binding: EvidenceContractBinding;
+    /** Fields to merge into `check-results.json`. */
+    checkBinding: EvidenceCheckContractBinding;
+    /** Canonical document bytes when packaged (same as `file.content`). */
+    resolvedJson?: string;
+}
+/**
+ * Build a resolved contract artifact + Evidence binding for packaging.
+ *
+ * Pass no `contract` and no `preset` to record an honest `unavailable` binding
+ * (missing-contract case). Pass `unsupportedRuleIds` to force `partial`.
+ */
+declare function buildEvidenceContractPackage(input: BuildEvidenceContractPackageInput): EvidenceContractPackage;
+/**
+ * Merge contract-binding fields into a check-results JSON object (additive).
+ */
+declare function bindCheckResultsToContract(checkResults: Record<string, unknown>, checkBinding: EvidenceCheckContractBinding): Record<string, unknown>;
+declare function serializeCheckResultsJson(value: unknown): string;
+/**
+ * Parse the optional `contract` object from check-results.json when present.
+ */
+declare function readCheckResultsContractBinding(checkResultsJson: string): EvidenceCheckContractBinding | undefined;
+interface EvidenceContractVerifyIssue {
+    code: "contract_file_missing" | "contract_hash_mismatch" | "contract_digest_mismatch" | "contract_binding_invalid";
+    severity: "error" | "warning";
+    message: string;
+    path?: string;
+}
+/**
+ * Verify digest binding between manifest.contract, contract.resolved.json, and
+ * check-results.json. Older Evidence without `manifest.contract` is a no-op.
+ */
+declare function verifyEvidenceContractBinding(parts: {
+    binding?: EvidenceContractBinding;
+    resolvedContractBytes?: string | Uint8Array;
+    checkResultsJson?: string;
+}): EvidenceContractVerifyIssue[];
+
 declare const EVIDENCE_HTML_FILENAME = "evidence.html";
 /** View ids reserved for later 6.10 chunks; shell renders stubs except summary. */
 declare const EVIDENCE_VIEW_IDS: readonly ["summary", "tree", "timeline", "causal", "tools-llm", "outcomes", "contracts", "circuit", "diff", "safety", "provenance"];
@@ -1048,7 +1196,7 @@ declare function buildZipArchive(entries: readonly ZipEntry[]): Buffer;
 
 type EvidenceVerifyStatus = "pass" | "fail";
 interface EvidenceVerifyIssue {
-    code: "manifest_missing" | "manifest_invalid" | "file_missing" | "file_unexpected" | "hash_mismatch" | "assessment_missing" | "provenance_missing" | "path_unsafe" | "io_error";
+    code: "manifest_missing" | "manifest_invalid" | "file_missing" | "file_unexpected" | "hash_mismatch" | "assessment_missing" | "provenance_missing" | "path_unsafe" | "io_error" | "contract_file_missing" | "contract_hash_mismatch" | "contract_digest_mismatch" | "contract_binding_invalid";
     severity: "error" | "warning";
     message: string;
     path?: string;
@@ -1086,16 +1234,24 @@ interface EvidenceCiPackageInput {
     summaryText?: string;
     /** Optional TraceFacts/parity summary embedded in evidence.json (6.14+). */
     semantics?: EvidenceManifest["semantics"];
+    /**
+     * Optional TraceContract / preset binding (6.28+).
+     * When omitted, no contract section is written (older Evidence shape).
+     * Pass `{ engineVersion, source }` with neither contract nor preset to record `unavailable`.
+     */
+    contractPackage?: BuildEvidenceContractPackageInput;
 }
 interface EvidenceCiPackageFiles {
     "evidence.html": string;
     "evidence.json": string;
     "check-results.json": string;
     "trace.jsonl": string;
+    "contract.resolved.json"?: string;
     manifest: EvidenceManifest;
 }
 /**
- * Build the four standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Build the standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Optionally packages `contract.resolved.json` and binds digests (6.28+).
  */
 declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;
 
@@ -1427,4 +1583,4 @@ declare function createOmittedPayloadCommitment(payload: string | Uint8Array, op
     capturePolicy?: OmittedPayloadCommitment["capturePolicy"];
 }): OmittedPayloadCommitment;
 
-export { ADAPTER_CAPTURE_DIAGNOSTIC_CODES, ActivitySummary, type AdapterCaptureDiagnostic, type AdapterCaptureDiagnosticCode, type AdapterCaptureDiagnostics, type AdapterCaptureMode, type AdapterDiagnosticListener, type AdapterPreviewCapture, type AdapterPreviewCaptureOptions, type AnalyzeCohortOptions, BuildActivitySummaryOptions, BuildSessionIndexOptions, type BundleCheckResults, type BundleCheckRunResult, type BundleMetadata, type BundlePlaceholderArtifact, type BundleRedactionProfile, type BundleRedactionReport, type BundleRedactionReportRun, type BundleResolveOptions, type BundleResolveResult, type BundleSafeStatus, type BundleSafeStatusMetadata, COHORT_METRIC_IDS, type CausalContractFindingInput, type CausalFailureKind, type CohortAggregateMetrics, type CohortAnalysisResult, type CohortMetricComparison, type CohortMetricId, type CohortRunMetrics, DEFAULT_ADAPTER_MAX_PREVIEW_CHARS, DEFAULT_SUITE_ARTIFACTS_DIR, DEFAULT_SUITE_CONFIG_NAMES, DEFAULT_TRACE_DIR_NAME, type DurationStats, EVIDENCE_ASSESSMENT_NOTE, EVIDENCE_FORMAT_VERSION, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, EVIDENCE_VIEW_CSS, EVIDENCE_VIEW_IDS, EnrichSessionSummaryOptions, ErrorInfo, type EvidenceCheckFindingSummary, type EvidenceCiPackageFiles, type EvidenceCiPackageInput, type EvidenceContractsViewInput, type EvidenceFileEntry, type EvidenceFileRole, type EvidenceFormatVersion, type EvidenceHtmlShellInput, type EvidenceManifest, type EvidencePackagedFile, type EvidenceProvenanceViewInput, type EvidenceRedactionProfile, type EvidenceSafeStatus, type EvidenceSafetyViewInput, type EvidenceSourceHash, type EvidenceVerificationPolicy, type EvidenceVerifyIssue, type EvidenceVerifyOptions, type EvidenceVerifyResult, type EvidenceVerifyStatus, type EvidenceViewId, type ExplainFact, type ExplainInference, type ExplainMode, type ExplainOptions, type ExplainResult, FALLBACK_TRACE_DIR, type FindFirstCausalFailureOptions, type FirstCausalFailure, type GateCheckId, type GateCheckResult, type GateExitCode, type GateResult, type GroupSessionCohortsOptions, InspectRunTree, type LoadSuiteConfigOptions, MAX_NAME_LENGTH, MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, OMITTED_PAYLOAD_MAX_DIGEST_INPUT_BYTES, ObservedOutcome, type OmittedPayloadAlgorithm, type OmittedPayloadCommitment, type ParseTraceJsonlOptions, type ParseTraceJsonlResult, type ParsedDurationFilter, RUNS_DIR_NAME, RedactionProfile, type RenderCohortReportOptions, type RenderGateReportOptions, type RenderSuiteReportOptions, type RenderTimelineOptions, type RenderWhatOptions, type ResolvedRedactionProfile, type ResolvedSuiteCase, type RunGateOptions, RunStatus, type RunSuiteOptions, RunSummary, type RunTimeline, type RunWhatSummary, SUITE_TEMPLATE_IDS, type SessionCohort, type SessionCohortKind, SessionIndex, SessionRunRecord, type SessionScopeOptions, type SessionScopeResult, SessionStatus, SessionSummary, SessionWarning, SessionWorkflowMetadata, StepStatus, StepType, type SuiteArtifactsConfig, type SuiteCaseConfig, type SuiteCaseResult, type SuiteCaseStatus, type SuiteChecksConfig, type SuiteConfig, type SuiteDiagnostic, type SuiteDiagnosticCode, type SuiteEvalConfig, type SuiteRunResult, type SuiteRunSummary, type SuiteTemplateId, TERMINAL_INDENT, type TimelineEntry, type TimelineFocus, type TimelineOptions, TraceCorrelationMetadata, TraceDirectory, type TraceDirectoryOptions, TraceEvent, type TraceFilterOptions, type TraceJsonlFormat, TraceMetadata, TraceMetadataStatus, type TraceSearchOptions, type TraceSearchResult, type TraceSessionCheckResult, type TraceStats, type TraceStatsOptions, type TraceStatsRankedRun, type TraceStatsRankedStep, type ValidateSuiteConfigResult, type ZipEntry, aggregateBundleSafeStatus, aggregateSessionCheckResults, analyzeCohort, assertBundlePathContained, assertEvidenceRelativePath, buildActivitySummary, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceCausalFailureViewHtml, buildEvidenceCiPackage, buildEvidenceCircuitViewHtml, buildEvidenceContractsViewHtml, buildEvidenceDiffViewHtml, buildEvidenceFileEntries, buildEvidenceHtmlShell, buildEvidenceHtmlShellFromManifest, buildEvidenceManifest, buildEvidenceOutcomesViewHtml, buildEvidenceProvenanceViewHtml, buildEvidenceSafetyViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceTreeViewHtml, buildLocalExplanation, buildPlaceholderArtifact, buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildSessionIndex, buildTraceStats, buildZipArchive, bundleFailsOnSafety, bundleRunAssetRelativePath, collectTraceSchemaVersions, compareCohortAggregates, createAdapterPreviewCapture, createOmittedPayloadCommitment, createRunId, createStepId, defaultBundleOutputPath, defaultSuiteConfigTemplate, deriveSessionStatus, encodeEmbeddedEvidenceJson, enrichSessionRunRecord, enrichSessionSummary, ensureTraceDir, extractMetadata, extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents, extractSessionWorkflowMetadata, filterMetasBySessionScope, filterTraces, findFirstCausalFailure, formatDuration, formatError, formatStepLabel, formatTerminalName, formatTimestamp, gateHasThresholds, getDefaultTraceDir, getIndent, getRunIdFromTraceFileName, getSuiteTemplate, getTraceFilePath, groupSessionCohorts, inferEvidenceFileRole, initializeTraceFile, isAgentInspectTrace, isSha256Hex, listSuiteTemplates, listTraceFiles, loadSessionRunRecords, loadSuiteConfig, loadTraceMetadataList, normalizeBundleOutputPath, normalizeSuiteConfig, omittedPayloadByteLength, parseCohortMetricList, parseDuration, parseDurationFilter, parseEvidenceManifestJson, parseGateList, parseGateNumber, parseGroupBySpec, parseTraceJsonl, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, readTraceEvents, readTraceFile, renderActivitySummaryHuman, renderCohortReport, renderCohortSummaryMarkdown, renderErrorLine, renderGateGithubAnnotations, renderGateGithubStepSummary, renderGateJUnit, renderGateReport, renderGateSummaryMarkdown, renderRunSummary, renderRunWhat, renderStepLine, renderSuiteReport, renderSuiteReportMarkdown, renderTimeline, renderTraceStats, resolveAdapterMaxPreviewChars, resolveBundleRunIds, resolveRedactionProfile, resolveSuiteCaseTrace, resolveSuiteConfigPath, resolveSuiteTemplate, resolveTraceDir, runGate, runSuite, sanitizeBundleRunId, searchTraces, serializeAdapterPreview, serializeEvent, serializeEvidenceManifest, sessionKeyForRun, sha256Equals, sha256Hex, toMetadataSafeStatus, traceMetasToSessionRunRecords, truncateName, unknownTraceFormatMessage, validateEvent, validateEvidenceManifest, validateSuiteConfig, verifyEvidenceDirectory, warn, writeTraceEvent };
+export { ADAPTER_CAPTURE_DIAGNOSTIC_CODES, ActivitySummary, type AdapterCaptureDiagnostic, type AdapterCaptureDiagnosticCode, type AdapterCaptureDiagnostics, type AdapterCaptureMode, type AdapterDiagnosticListener, type AdapterPreviewCapture, type AdapterPreviewCaptureOptions, type AnalyzeCohortOptions, BuildActivitySummaryOptions, type BuildEvidenceContractPackageInput, BuildSessionIndexOptions, type BundleCheckResults, type BundleCheckRunResult, type BundleMetadata, type BundlePlaceholderArtifact, type BundleRedactionProfile, type BundleRedactionReport, type BundleRedactionReportRun, type BundleResolveOptions, type BundleResolveResult, type BundleSafeStatus, type BundleSafeStatusMetadata, COHORT_METRIC_IDS, type CausalContractFindingInput, type CausalFailureKind, type CohortAggregateMetrics, type CohortAnalysisResult, type CohortMetricComparison, type CohortMetricId, type CohortRunMetrics, DEFAULT_ADAPTER_MAX_PREVIEW_CHARS, DEFAULT_SUITE_ARTIFACTS_DIR, DEFAULT_SUITE_CONFIG_NAMES, DEFAULT_TRACE_DIR_NAME, type DurationStats, EVIDENCE_ASSESSMENT_NOTE, EVIDENCE_CONTRACT_ASSURANCE_NOTE, EVIDENCE_CONTRACT_CANONICALIZATION_VERSION, EVIDENCE_CONTRACT_PARTIAL_NOTE, EVIDENCE_CONTRACT_UNAVAILABLE_NOTE, EVIDENCE_FORMAT_VERSION, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, EVIDENCE_RESOLVED_CONTRACT_FILENAME, EVIDENCE_VIEW_CSS, EVIDENCE_VIEW_IDS, EnrichSessionSummaryOptions, ErrorInfo, type EvidenceCheckContractBinding, type EvidenceCheckFindingSummary, type EvidenceCiPackageFiles, type EvidenceCiPackageInput, type EvidenceContractBinding, type EvidenceContractBindingSource, type EvidenceContractBindingStatus, type EvidenceContractPackage, type EvidenceContractVerifyIssue, type EvidenceContractsViewInput, type EvidenceFileEntry, type EvidenceFileRole, type EvidenceFormatVersion, type EvidenceHtmlShellInput, type EvidenceManifest, type EvidencePackagedFile, type EvidenceProvenanceViewInput, type EvidenceRedactionProfile, type EvidenceSafeStatus, type EvidenceSafetyViewInput, type EvidenceSourceHash, type EvidenceVerificationPolicy, type EvidenceVerifyIssue, type EvidenceVerifyOptions, type EvidenceVerifyResult, type EvidenceVerifyStatus, type EvidenceViewId, type ExplainFact, type ExplainInference, type ExplainMode, type ExplainOptions, type ExplainResult, FALLBACK_TRACE_DIR, type FindFirstCausalFailureOptions, type FirstCausalFailure, type GateCheckId, type GateCheckResult, type GateExitCode, type GateResult, type GroupSessionCohortsOptions, InspectRunTree, type LoadSuiteConfigOptions, MAX_NAME_LENGTH, MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, OMITTED_PAYLOAD_MAX_DIGEST_INPUT_BYTES, ObservedOutcome, type OmittedPayloadAlgorithm, type OmittedPayloadCommitment, type ParseTraceJsonlOptions, type ParseTraceJsonlResult, type ParsedDurationFilter, RUNS_DIR_NAME, RedactionProfile, type RenderCohortReportOptions, type RenderGateReportOptions, type RenderSuiteReportOptions, type RenderTimelineOptions, type RenderWhatOptions, type ResolvedContractDocument, type ResolvedRedactionProfile, type ResolvedSuiteCase, type RunGateOptions, RunStatus, type RunSuiteOptions, RunSummary, type RunTimeline, type RunWhatSummary, SUITE_TEMPLATE_IDS, type SessionCohort, type SessionCohortKind, SessionIndex, SessionRunRecord, type SessionScopeOptions, type SessionScopeResult, SessionStatus, SessionSummary, SessionWarning, SessionWorkflowMetadata, StepStatus, StepType, type SuiteArtifactsConfig, type SuiteCaseConfig, type SuiteCaseResult, type SuiteCaseStatus, type SuiteChecksConfig, type SuiteConfig, type SuiteDiagnostic, type SuiteDiagnosticCode, type SuiteEvalConfig, type SuiteRunResult, type SuiteRunSummary, type SuiteTemplateId, TERMINAL_INDENT, type TimelineEntry, type TimelineFocus, type TimelineOptions, TraceCorrelationMetadata, TraceDirectory, type TraceDirectoryOptions, TraceEvent, type TraceFilterOptions, type TraceJsonlFormat, TraceMetadata, TraceMetadataStatus, type TraceSearchOptions, type TraceSearchResult, type TraceSessionCheckResult, type TraceStats, type TraceStatsOptions, type TraceStatsRankedRun, type TraceStatsRankedStep, type ValidateSuiteConfigResult, type ZipEntry, aggregateBundleSafeStatus, aggregateSessionCheckResults, analyzeCohort, assertBundlePathContained, assertEvidenceRelativePath, bindCheckResultsToContract, buildActivitySummary, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceCausalFailureViewHtml, buildEvidenceCiPackage, buildEvidenceCircuitViewHtml, buildEvidenceContractPackage, buildEvidenceContractsViewHtml, buildEvidenceDiffViewHtml, buildEvidenceFileEntries, buildEvidenceHtmlShell, buildEvidenceHtmlShellFromManifest, buildEvidenceManifest, buildEvidenceOutcomesViewHtml, buildEvidenceProvenanceViewHtml, buildEvidenceSafetyViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceTreeViewHtml, buildLocalExplanation, buildPlaceholderArtifact, buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildSessionIndex, buildTraceStats, buildZipArchive, bundleFailsOnSafety, bundleRunAssetRelativePath, collectResolvedContractRuleIds, collectTraceSchemaVersions, compareCohortAggregates, createAdapterPreviewCapture, createOmittedPayloadCommitment, createRunId, createStepId, defaultBundleOutputPath, defaultSuiteConfigTemplate, deriveSessionStatus, encodeEmbeddedEvidenceJson, enrichSessionRunRecord, enrichSessionSummary, ensureTraceDir, extractMetadata, extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents, extractSessionWorkflowMetadata, filterMetasBySessionScope, filterTraces, findFirstCausalFailure, formatDuration, formatError, formatStepLabel, formatTerminalName, formatTimestamp, gateHasThresholds, getDefaultTraceDir, getIndent, getRunIdFromTraceFileName, getSuiteTemplate, getTraceFilePath, groupSessionCohorts, inferEvidenceFileRole, initializeTraceFile, isAgentInspectTrace, isSha256Hex, listSuiteTemplates, listTraceFiles, loadSessionRunRecords, loadSuiteConfig, loadTraceMetadataList, normalizeBundleOutputPath, normalizeSuiteConfig, omittedPayloadByteLength, parseCohortMetricList, parseDuration, parseDurationFilter, parseEvidenceManifestJson, parseGateList, parseGateNumber, parseGroupBySpec, parseTraceJsonl, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, readCheckResultsContractBinding, readTraceEvents, readTraceFile, renderActivitySummaryHuman, renderCohortReport, renderCohortSummaryMarkdown, renderErrorLine, renderGateGithubAnnotations, renderGateGithubStepSummary, renderGateJUnit, renderGateReport, renderGateSummaryMarkdown, renderRunSummary, renderRunWhat, renderStepLine, renderSuiteReport, renderSuiteReportMarkdown, renderTimeline, renderTraceStats, resolveAdapterMaxPreviewChars, resolveBundleRunIds, resolveRedactionProfile, resolveSerializableTraceContract, resolveSuiteCaseTrace, resolveSuiteConfigPath, resolveSuiteTemplate, resolveTraceDir, runGate, runSuite, sanitizeBundleRunId, searchTraces, serializeAdapterPreview, serializeCanonicalJson, serializeCheckResultsJson, serializeEvent, serializeEvidenceManifest, sessionKeyForRun, sha256Equals, sha256Hex, toMetadataSafeStatus, traceMetasToSessionRunRecords, truncateName, unknownTraceFormatMessage, validateEvent, validateEvidenceManifest, validateSuiteConfig, verifyEvidenceContractBinding, verifyEvidenceDirectory, warn, writeTraceEvent };

package/packages/core/dist/advanced.d.ts

@@ -1,17 +1,17 @@
-export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-DOX2-RjH.js';
-import { R as RedactionRule } from './log-config-OZRfpHED.js';
-import { R as RedactionProfile, i as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, T as TraceMetadataStatus, f as StepType, h as TraceCorrelationMetadata } from './types-Bx3mEZ04.js';
-export { A as ActiveStepContext, j as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, g as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-Bx3mEZ04.js';
-import { a as InspectRunTree } from './inspect-event-DRthdZlf.js';
-export { A as AttributionConfidence, E as EventSource, c as InspectEvent, I as InspectKind, b as InspectNode } from './inspect-event-DRthdZlf.js';
-import { P as PersistedInspectEvent } from './persisted-inspect-event-BVucFVrP.js';
+export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-DgcvkJ9t.js';
+import { R as RedactionRule } from './log-config-N_c5AE09.js';
+import { R as RedactionProfile, h as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, j as TraceMetadataStatus, f as StepType, g as TraceCorrelationMetadata } from './types-xv9bSgOK.js';
+export { A as ActiveStepContext, i as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, T as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-xv9bSgOK.js';
+import { a as InspectRunTree } from './inspect-event-CDqjcrG_.js';
+export { A as AttributionConfidence, E as EventSource, b as InspectEvent, I as InspectKind, c as InspectNode } from './inspect-event-CDqjcrG_.js';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-CbaRYpbw.js';
 import { Stats } from 'node:fs';
-import { S as SessionWorkflowMetadata, al as SessionRunRecord, am as EnrichSessionSummaryOptions, an as SessionStatus, ao as SessionSummary, ap as SessionIndex, aq as BuildActivitySummaryOptions, ar as ActivitySummary, as as SessionWarning, at as BuildSessionIndexOptions, c as TraceCheckResult, P as TraceCheckStatus } from './index-CtK_p-ps.js';
-export { au as ActivityEntry, av as CriticalPathStep, aw as HandoffEdge, ax as RetryLink, ay as SESSION_WORKFLOW_KEYS, az as SessionCheckSummary, aA as SessionConfidence, aB as SessionEdgeSource, aC as SessionGroup, aD as SessionLastError, aE as SessionWorkflowKey } from './index-CtK_p-ps.js';
-import { b as ObservedOutcome } from './types-B562HgN_.js';
-export { O as ObservedOutcomeStatus } from './types-B562HgN_.js';
+import { aR as SessionWorkflowMetadata, aS as SessionRunRecord, aT as EnrichSessionSummaryOptions, aU as SessionStatus, aV as SessionSummary, aW as SessionIndex, aX as BuildActivitySummaryOptions, aY as ActivitySummary, aZ as SessionWarning, a_ as BuildSessionIndexOptions, N as TraceCheckResult, X as TraceCheckStatus, a2 as TraceContractInput, Z as TraceContract } from './index-BOA1AeEU.js';
+export { a$ as ActivityEntry, b0 as CriticalPathStep, b1 as HandoffEdge, b2 as RetryLink, b3 as SESSION_WORKFLOW_KEYS, b4 as SessionCheckSummary, b5 as SessionConfidence, b6 as SessionEdgeSource, b7 as SessionGroup, b8 as SessionLastError, b9 as SessionWorkflowKey } from './index-BOA1AeEU.js';
+import { b as ObservedOutcome } from './types-BA_IOdg4.js';
+export { a as ObservedOutcomeStatus } from './types-BA_IOdg4.js';
 import './writers.js';
-import './index-D72DPqAF.js';
+import './index-BzyNPfLm.js';
 
 interface ResolvedRedactionProfile {
     profile: RedactionProfile;
@@ -743,7 +743,48 @@ type EvidenceFormatVersion = "1.0";
 type EvidenceSafeStatus = "SAFE" | "SAFE WITH WARNINGS" | "UNSAFE" | "UNKNOWN";
 type EvidenceRedactionProfile = "local" | "share" | "strict";
 type EvidenceVerificationPolicy = "development" | "local" | "share" | "strict";
-type EvidenceFileRole = "report" | "redacted-trace" | "checks" | "redaction-report" | "summary" | "other";
+type EvidenceFileRole = "report" | "redacted-trace" | "checks" | "contract" | "redaction-report" | "summary" | "other";
+/** How a packaged contract/preset was supplied (6.28+). */
+type EvidenceContractBindingSource = "file" | "inline" | "preset" | "cli-shorthand" | "programmatic";
+/** Reproducibility honesty for contract binding (6.28+). */
+type EvidenceContractBindingStatus = "complete" | "partial" | "unavailable";
+/**
+ * Optional Evidence v2 contract binding (6.28+).
+ * Additive; older readers ignore unknown fields. Not a signature or trusted-time claim.
+ */
+interface EvidenceContractBinding {
+    status: EvidenceContractBindingStatus;
+    source: EvidenceContractBindingSource;
+    contractId?: string;
+    contractVersion?: string;
+    canonicalizationVersion: "1";
+    engineVersion: string;
+    /** Relative packaged path (typically `contract.resolved.json`). */
+    path?: string;
+    /** SHA-256 of the packaged resolved-contract bytes. */
+    sha256?: string;
+    ruleIds: string[];
+    unsupportedRuleIds?: string[];
+    note?: string;
+}
+/**
+ * Optional fields embedded in `check-results.json` to bind results to a contract digest.
+ */
+interface EvidenceCheckContractBinding {
+    contractDigest?: string;
+    canonicalizationVersion?: "1";
+    engineVersion?: string;
+    evaluatedRuleIds?: string[];
+    bindingStatus?: EvidenceContractBindingStatus;
+    unsupportedRuleIds?: string[];
+    origin?: {
+        source: EvidenceContractBindingSource;
+        preset?: string;
+        path?: string;
+    };
+    selectedScope?: Record<string, unknown>;
+    selectedAlternativeBranch?: string;
+}
 interface EvidenceSourceHash {
     runId: string;
     algorithm: "sha256";
@@ -780,6 +821,11 @@ interface EvidenceManifest {
      * Additive; older readers ignore unknown fields.
      */
     semantics?: EvidenceSemantics;
+    /**
+     * Optional resolved-contract binding (6.28+).
+     * Additive; older readers ignore unknown fields.
+     */
+    contract?: EvidenceContractBinding;
     files: EvidenceFileEntry[];
 }
 /**
@@ -818,6 +864,8 @@ interface EvidencePackagedFile {
 declare const EVIDENCE_FORMAT_VERSION: EvidenceFormatVersion;
 declare const EVIDENCE_ASSESSMENT_NOTE = "Best-effort local safety verification only; not a compliance certification.";
 declare const EVIDENCE_MANIFEST_FILENAME = "evidence.json";
+/** Packaged resolved TraceContract / check-preset snapshot (6.28+). */
+declare const EVIDENCE_RESOLVED_CONTRACT_FILENAME = "contract.resolved.json";
 
 /**
  * SHA-256 hex digest of exact bytes (UTF-8 when `data` is a string).
@@ -859,6 +907,7 @@ declare function buildEvidenceManifest(parts: {
     createdAt?: string;
     note?: string;
     semantics?: EvidenceManifest["semantics"];
+    contract?: EvidenceManifest["contract"];
 }): EvidenceManifest;
 /**
  * Minimal structural validation for a parsed evidence manifest object.
@@ -871,6 +920,105 @@ declare function parseEvidenceManifestJson(text: string): EvidenceManifest;
  */
 declare function collectTraceSchemaVersions(jsonl: string): string[];
 
+/**
+ * Evidence v2 contract binding (6.28) — package a resolved serializable
+ * TraceContract / check-preset snapshot and bind its digest to check results.
+ *
+ * Does not claim producer identity, trusted time, or semantic proof.
+ */
+
+declare const EVIDENCE_CONTRACT_CANONICALIZATION_VERSION: "1";
+declare const EVIDENCE_CONTRACT_PARTIAL_NOTE = "Custom or programmatic rules are not serializable; Evidence records rule IDs only and does not claim complete reviewer replay.";
+declare const EVIDENCE_CONTRACT_UNAVAILABLE_NOTE = "No resolved TraceContract or check preset was packaged with this Evidence artifact.";
+declare const EVIDENCE_CONTRACT_ASSURANCE_NOTE = "Contract binding verifies packaged digest integrity only; it does not prove producer identity, trusted time, source completeness, semantic truth, or external acceptance.";
+/** Deterministic JSON (sorted keys) with trailing newline. */
+declare function serializeCanonicalJson(value: unknown): string;
+/**
+ * Normalize TraceContract aliases and make common evaluator defaults explicit
+ * for canonicalization version `"1"`.
+ */
+declare function resolveSerializableTraceContract(input: TraceContractInput | TraceContract): TraceContract;
+/**
+ * Static rule-id inventory implied by a resolved TraceContract (no evaluation).
+ */
+declare function collectResolvedContractRuleIds(contract: TraceContract): string[];
+interface ResolvedContractDocument {
+    canonicalizationVersion: typeof EVIDENCE_CONTRACT_CANONICALIZATION_VERSION;
+    kind: "trace-contract" | "check-preset";
+    resolved: Record<string, unknown>;
+    origin: {
+        source: EvidenceContractBindingSource;
+        preset?: string;
+        path?: string;
+    };
+}
+interface BuildEvidenceContractPackageInput {
+    engineVersion: string;
+    source: EvidenceContractBindingSource;
+    /** Serializable TraceContract (preferred for `complete`). */
+    contract?: TraceContractInput | TraceContract;
+    /**
+     * Pre-resolved check preset / CLI shorthand snapshot (caller expands).
+     * Used when `contract` is omitted or as origin metadata beside a contract.
+     */
+    preset?: {
+        name: string;
+        resolved: Record<string, unknown>;
+    };
+    /** Original config path (omit or redact when sensitive). */
+    path?: string;
+    contractId?: string;
+    contractVersion?: string;
+    /**
+     * Stable IDs for programmatic / custom rules that cannot be serialized.
+     * Presence forces `status: "partial"`.
+     */
+    unsupportedRuleIds?: readonly string[];
+    /** Override rule ID list (defaults to static inventory from the contract / preset select). */
+    ruleIds?: readonly string[];
+    note?: string;
+}
+interface EvidenceContractPackage {
+    /** Packaged `contract.resolved.json` when a serializable snapshot exists. */
+    file?: EvidencePackagedFile;
+    binding: EvidenceContractBinding;
+    /** Fields to merge into `check-results.json`. */
+    checkBinding: EvidenceCheckContractBinding;
+    /** Canonical document bytes when packaged (same as `file.content`). */
+    resolvedJson?: string;
+}
+/**
+ * Build a resolved contract artifact + Evidence binding for packaging.
+ *
+ * Pass no `contract` and no `preset` to record an honest `unavailable` binding
+ * (missing-contract case). Pass `unsupportedRuleIds` to force `partial`.
+ */
+declare function buildEvidenceContractPackage(input: BuildEvidenceContractPackageInput): EvidenceContractPackage;
+/**
+ * Merge contract-binding fields into a check-results JSON object (additive).
+ */
+declare function bindCheckResultsToContract(checkResults: Record<string, unknown>, checkBinding: EvidenceCheckContractBinding): Record<string, unknown>;
+declare function serializeCheckResultsJson(value: unknown): string;
+/**
+ * Parse the optional `contract` object from check-results.json when present.
+ */
+declare function readCheckResultsContractBinding(checkResultsJson: string): EvidenceCheckContractBinding | undefined;
+interface EvidenceContractVerifyIssue {
+    code: "contract_file_missing" | "contract_hash_mismatch" | "contract_digest_mismatch" | "contract_binding_invalid";
+    severity: "error" | "warning";
+    message: string;
+    path?: string;
+}
+/**
+ * Verify digest binding between manifest.contract, contract.resolved.json, and
+ * check-results.json. Older Evidence without `manifest.contract` is a no-op.
+ */
+declare function verifyEvidenceContractBinding(parts: {
+    binding?: EvidenceContractBinding;
+    resolvedContractBytes?: string | Uint8Array;
+    checkResultsJson?: string;
+}): EvidenceContractVerifyIssue[];
+
 declare const EVIDENCE_HTML_FILENAME = "evidence.html";
 /** View ids reserved for later 6.10 chunks; shell renders stubs except summary. */
 declare const EVIDENCE_VIEW_IDS: readonly ["summary", "tree", "timeline", "causal", "tools-llm", "outcomes", "contracts", "circuit", "diff", "safety", "provenance"];
@@ -1048,7 +1196,7 @@ declare function buildZipArchive(entries: readonly ZipEntry[]): Buffer;
 
 type EvidenceVerifyStatus = "pass" | "fail";
 interface EvidenceVerifyIssue {
-    code: "manifest_missing" | "manifest_invalid" | "file_missing" | "file_unexpected" | "hash_mismatch" | "assessment_missing" | "provenance_missing" | "path_unsafe" | "io_error";
+    code: "manifest_missing" | "manifest_invalid" | "file_missing" | "file_unexpected" | "hash_mismatch" | "assessment_missing" | "provenance_missing" | "path_unsafe" | "io_error" | "contract_file_missing" | "contract_hash_mismatch" | "contract_digest_mismatch" | "contract_binding_invalid";
     severity: "error" | "warning";
     message: string;
     path?: string;
@@ -1086,16 +1234,24 @@ interface EvidenceCiPackageInput {
     summaryText?: string;
     /** Optional TraceFacts/parity summary embedded in evidence.json (6.14+). */
     semantics?: EvidenceManifest["semantics"];
+    /**
+     * Optional TraceContract / preset binding (6.28+).
+     * When omitted, no contract section is written (older Evidence shape).
+     * Pass `{ engineVersion, source }` with neither contract nor preset to record `unavailable`.
+     */
+    contractPackage?: BuildEvidenceContractPackageInput;
 }
 interface EvidenceCiPackageFiles {
     "evidence.html": string;
     "evidence.json": string;
     "check-results.json": string;
     "trace.jsonl": string;
+    "contract.resolved.json"?: string;
     manifest: EvidenceManifest;
 }
 /**
- * Build the four standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Build the standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Optionally packages `contract.resolved.json` and binds digests (6.28+).
  */
 declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;
 
@@ -1427,4 +1583,4 @@ declare function createOmittedPayloadCommitment(payload: string | Uint8Array, op
     capturePolicy?: OmittedPayloadCommitment["capturePolicy"];
 }): OmittedPayloadCommitment;
 
-export { ADAPTER_CAPTURE_DIAGNOSTIC_CODES, ActivitySummary, type AdapterCaptureDiagnostic, type AdapterCaptureDiagnosticCode, type AdapterCaptureDiagnostics, type AdapterCaptureMode, type AdapterDiagnosticListener, type AdapterPreviewCapture, type AdapterPreviewCaptureOptions, type AnalyzeCohortOptions, BuildActivitySummaryOptions, BuildSessionIndexOptions, type BundleCheckResults, type BundleCheckRunResult, type BundleMetadata, type BundlePlaceholderArtifact, type BundleRedactionProfile, type BundleRedactionReport, type BundleRedactionReportRun, type BundleResolveOptions, type BundleResolveResult, type BundleSafeStatus, type BundleSafeStatusMetadata, COHORT_METRIC_IDS, type CausalContractFindingInput, type CausalFailureKind, type CohortAggregateMetrics, type CohortAnalysisResult, type CohortMetricComparison, type CohortMetricId, type CohortRunMetrics, DEFAULT_ADAPTER_MAX_PREVIEW_CHARS, DEFAULT_SUITE_ARTIFACTS_DIR, DEFAULT_SUITE_CONFIG_NAMES, DEFAULT_TRACE_DIR_NAME, type DurationStats, EVIDENCE_ASSESSMENT_NOTE, EVIDENCE_FORMAT_VERSION, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, EVIDENCE_VIEW_CSS, EVIDENCE_VIEW_IDS, EnrichSessionSummaryOptions, ErrorInfo, type EvidenceCheckFindingSummary, type EvidenceCiPackageFiles, type EvidenceCiPackageInput, type EvidenceContractsViewInput, type EvidenceFileEntry, type EvidenceFileRole, type EvidenceFormatVersion, type EvidenceHtmlShellInput, type EvidenceManifest, type EvidencePackagedFile, type EvidenceProvenanceViewInput, type EvidenceRedactionProfile, type EvidenceSafeStatus, type EvidenceSafetyViewInput, type EvidenceSourceHash, type EvidenceVerificationPolicy, type EvidenceVerifyIssue, type EvidenceVerifyOptions, type EvidenceVerifyResult, type EvidenceVerifyStatus, type EvidenceViewId, type ExplainFact, type ExplainInference, type ExplainMode, type ExplainOptions, type ExplainResult, FALLBACK_TRACE_DIR, type FindFirstCausalFailureOptions, type FirstCausalFailure, type GateCheckId, type GateCheckResult, type GateExitCode, type GateResult, type GroupSessionCohortsOptions, InspectRunTree, type LoadSuiteConfigOptions, MAX_NAME_LENGTH, MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, OMITTED_PAYLOAD_MAX_DIGEST_INPUT_BYTES, ObservedOutcome, type OmittedPayloadAlgorithm, type OmittedPayloadCommitment, type ParseTraceJsonlOptions, type ParseTraceJsonlResult, type ParsedDurationFilter, RUNS_DIR_NAME, RedactionProfile, type RenderCohortReportOptions, type RenderGateReportOptions, type RenderSuiteReportOptions, type RenderTimelineOptions, type RenderWhatOptions, type ResolvedRedactionProfile, type ResolvedSuiteCase, type RunGateOptions, RunStatus, type RunSuiteOptions, RunSummary, type RunTimeline, type RunWhatSummary, SUITE_TEMPLATE_IDS, type SessionCohort, type SessionCohortKind, SessionIndex, SessionRunRecord, type SessionScopeOptions, type SessionScopeResult, SessionStatus, SessionSummary, SessionWarning, SessionWorkflowMetadata, StepStatus, StepType, type SuiteArtifactsConfig, type SuiteCaseConfig, type SuiteCaseResult, type SuiteCaseStatus, type SuiteChecksConfig, type SuiteConfig, type SuiteDiagnostic, type SuiteDiagnosticCode, type SuiteEvalConfig, type SuiteRunResult, type SuiteRunSummary, type SuiteTemplateId, TERMINAL_INDENT, type TimelineEntry, type TimelineFocus, type TimelineOptions, TraceCorrelationMetadata, TraceDirectory, type TraceDirectoryOptions, TraceEvent, type TraceFilterOptions, type TraceJsonlFormat, TraceMetadata, TraceMetadataStatus, type TraceSearchOptions, type TraceSearchResult, type TraceSessionCheckResult, type TraceStats, type TraceStatsOptions, type TraceStatsRankedRun, type TraceStatsRankedStep, type ValidateSuiteConfigResult, type ZipEntry, aggregateBundleSafeStatus, aggregateSessionCheckResults, analyzeCohort, assertBundlePathContained, assertEvidenceRelativePath, buildActivitySummary, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceCausalFailureViewHtml, buildEvidenceCiPackage, buildEvidenceCircuitViewHtml, buildEvidenceContractsViewHtml, buildEvidenceDiffViewHtml, buildEvidenceFileEntries, buildEvidenceHtmlShell, buildEvidenceHtmlShellFromManifest, buildEvidenceManifest, buildEvidenceOutcomesViewHtml, buildEvidenceProvenanceViewHtml, buildEvidenceSafetyViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceTreeViewHtml, buildLocalExplanation, buildPlaceholderArtifact, buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildSessionIndex, buildTraceStats, buildZipArchive, bundleFailsOnSafety, bundleRunAssetRelativePath, collectTraceSchemaVersions, compareCohortAggregates, createAdapterPreviewCapture, createOmittedPayloadCommitment, createRunId, createStepId, defaultBundleOutputPath, defaultSuiteConfigTemplate, deriveSessionStatus, encodeEmbeddedEvidenceJson, enrichSessionRunRecord, enrichSessionSummary, ensureTraceDir, extractMetadata, extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents, extractSessionWorkflowMetadata, filterMetasBySessionScope, filterTraces, findFirstCausalFailure, formatDuration, formatError, formatStepLabel, formatTerminalName, formatTimestamp, gateHasThresholds, getDefaultTraceDir, getIndent, getRunIdFromTraceFileName, getSuiteTemplate, getTraceFilePath, groupSessionCohorts, inferEvidenceFileRole, initializeTraceFile, isAgentInspectTrace, isSha256Hex, listSuiteTemplates, listTraceFiles, loadSessionRunRecords, loadSuiteConfig, loadTraceMetadataList, normalizeBundleOutputPath, normalizeSuiteConfig, omittedPayloadByteLength, parseCohortMetricList, parseDuration, parseDurationFilter, parseEvidenceManifestJson, parseGateList, parseGateNumber, parseGroupBySpec, parseTraceJsonl, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, readTraceEvents, readTraceFile, renderActivitySummaryHuman, renderCohortReport, renderCohortSummaryMarkdown, renderErrorLine, renderGateGithubAnnotations, renderGateGithubStepSummary, renderGateJUnit, renderGateReport, renderGateSummaryMarkdown, renderRunSummary, renderRunWhat, renderStepLine, renderSuiteReport, renderSuiteReportMarkdown, renderTimeline, renderTraceStats, resolveAdapterMaxPreviewChars, resolveBundleRunIds, resolveRedactionProfile, resolveSuiteCaseTrace, resolveSuiteConfigPath, resolveSuiteTemplate, resolveTraceDir, runGate, runSuite, sanitizeBundleRunId, searchTraces, serializeAdapterPreview, serializeEvent, serializeEvidenceManifest, sessionKeyForRun, sha256Equals, sha256Hex, toMetadataSafeStatus, traceMetasToSessionRunRecords, truncateName, unknownTraceFormatMessage, validateEvent, validateEvidenceManifest, validateSuiteConfig, verifyEvidenceDirectory, warn, writeTraceEvent };
+export { ADAPTER_CAPTURE_DIAGNOSTIC_CODES, ActivitySummary, type AdapterCaptureDiagnostic, type AdapterCaptureDiagnosticCode, type AdapterCaptureDiagnostics, type AdapterCaptureMode, type AdapterDiagnosticListener, type AdapterPreviewCapture, type AdapterPreviewCaptureOptions, type AnalyzeCohortOptions, BuildActivitySummaryOptions, type BuildEvidenceContractPackageInput, BuildSessionIndexOptions, type BundleCheckResults, type BundleCheckRunResult, type BundleMetadata, type BundlePlaceholderArtifact, type BundleRedactionProfile, type BundleRedactionReport, type BundleRedactionReportRun, type BundleResolveOptions, type BundleResolveResult, type BundleSafeStatus, type BundleSafeStatusMetadata, COHORT_METRIC_IDS, type CausalContractFindingInput, type CausalFailureKind, type CohortAggregateMetrics, type CohortAnalysisResult, type CohortMetricComparison, type CohortMetricId, type CohortRunMetrics, DEFAULT_ADAPTER_MAX_PREVIEW_CHARS, DEFAULT_SUITE_ARTIFACTS_DIR, DEFAULT_SUITE_CONFIG_NAMES, DEFAULT_TRACE_DIR_NAME, type DurationStats, EVIDENCE_ASSESSMENT_NOTE, EVIDENCE_CONTRACT_ASSURANCE_NOTE, EVIDENCE_CONTRACT_CANONICALIZATION_VERSION, EVIDENCE_CONTRACT_PARTIAL_NOTE, EVIDENCE_CONTRACT_UNAVAILABLE_NOTE, EVIDENCE_FORMAT_VERSION, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, EVIDENCE_RESOLVED_CONTRACT_FILENAME, EVIDENCE_VIEW_CSS, EVIDENCE_VIEW_IDS, EnrichSessionSummaryOptions, ErrorInfo, type EvidenceCheckContractBinding, type EvidenceCheckFindingSummary, type EvidenceCiPackageFiles, type EvidenceCiPackageInput, type EvidenceContractBinding, type EvidenceContractBindingSource, type EvidenceContractBindingStatus, type EvidenceContractPackage, type EvidenceContractVerifyIssue, type EvidenceContractsViewInput, type EvidenceFileEntry, type EvidenceFileRole, type EvidenceFormatVersion, type EvidenceHtmlShellInput, type EvidenceManifest, type EvidencePackagedFile, type EvidenceProvenanceViewInput, type EvidenceRedactionProfile, type EvidenceSafeStatus, type EvidenceSafetyViewInput, type EvidenceSourceHash, type EvidenceVerificationPolicy, type EvidenceVerifyIssue, type EvidenceVerifyOptions, type EvidenceVerifyResult, type EvidenceVerifyStatus, type EvidenceViewId, type ExplainFact, type ExplainInference, type ExplainMode, type ExplainOptions, type ExplainResult, FALLBACK_TRACE_DIR, type FindFirstCausalFailureOptions, type FirstCausalFailure, type GateCheckId, type GateCheckResult, type GateExitCode, type GateResult, type GroupSessionCohortsOptions, InspectRunTree, type LoadSuiteConfigOptions, MAX_NAME_LENGTH, MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, OMITTED_PAYLOAD_MAX_DIGEST_INPUT_BYTES, ObservedOutcome, type OmittedPayloadAlgorithm, type OmittedPayloadCommitment, type ParseTraceJsonlOptions, type ParseTraceJsonlResult, type ParsedDurationFilter, RUNS_DIR_NAME, RedactionProfile, type RenderCohortReportOptions, type RenderGateReportOptions, type RenderSuiteReportOptions, type RenderTimelineOptions, type RenderWhatOptions, type ResolvedContractDocument, type ResolvedRedactionProfile, type ResolvedSuiteCase, type RunGateOptions, RunStatus, type RunSuiteOptions, RunSummary, type RunTimeline, type RunWhatSummary, SUITE_TEMPLATE_IDS, type SessionCohort, type SessionCohortKind, SessionIndex, SessionRunRecord, type SessionScopeOptions, type SessionScopeResult, SessionStatus, SessionSummary, SessionWarning, SessionWorkflowMetadata, StepStatus, StepType, type SuiteArtifactsConfig, type SuiteCaseConfig, type SuiteCaseResult, type SuiteCaseStatus, type SuiteChecksConfig, type SuiteConfig, type SuiteDiagnostic, type SuiteDiagnosticCode, type SuiteEvalConfig, type SuiteRunResult, type SuiteRunSummary, type SuiteTemplateId, TERMINAL_INDENT, type TimelineEntry, type TimelineFocus, type TimelineOptions, TraceCorrelationMetadata, TraceDirectory, type TraceDirectoryOptions, TraceEvent, type TraceFilterOptions, type TraceJsonlFormat, TraceMetadata, TraceMetadataStatus, type TraceSearchOptions, type TraceSearchResult, type TraceSessionCheckResult, type TraceStats, type TraceStatsOptions, type TraceStatsRankedRun, type TraceStatsRankedStep, type ValidateSuiteConfigResult, type ZipEntry, aggregateBundleSafeStatus, aggregateSessionCheckResults, analyzeCohort, assertBundlePathContained, assertEvidenceRelativePath, bindCheckResultsToContract, buildActivitySummary, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceCausalFailureViewHtml, buildEvidenceCiPackage, buildEvidenceCircuitViewHtml, buildEvidenceContractPackage, buildEvidenceContractsViewHtml, buildEvidenceDiffViewHtml, buildEvidenceFileEntries, buildEvidenceHtmlShell, buildEvidenceHtmlShellFromManifest, buildEvidenceManifest, buildEvidenceOutcomesViewHtml, buildEvidenceProvenanceViewHtml, buildEvidenceSafetyViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceTreeViewHtml, buildLocalExplanation, buildPlaceholderArtifact, buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildSessionIndex, buildTraceStats, buildZipArchive, bundleFailsOnSafety, bundleRunAssetRelativePath, collectResolvedContractRuleIds, collectTraceSchemaVersions, compareCohortAggregates, createAdapterPreviewCapture, createOmittedPayloadCommitment, createRunId, createStepId, defaultBundleOutputPath, defaultSuiteConfigTemplate, deriveSessionStatus, encodeEmbeddedEvidenceJson, enrichSessionRunRecord, enrichSessionSummary, ensureTraceDir, extractMetadata, extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents, extractSessionWorkflowMetadata, filterMetasBySessionScope, filterTraces, findFirstCausalFailure, formatDuration, formatError, formatStepLabel, formatTerminalName, formatTimestamp, gateHasThresholds, getDefaultTraceDir, getIndent, getRunIdFromTraceFileName, getSuiteTemplate, getTraceFilePath, groupSessionCohorts, inferEvidenceFileRole, initializeTraceFile, isAgentInspectTrace, isSha256Hex, listSuiteTemplates, listTraceFiles, loadSessionRunRecords, loadSuiteConfig, loadTraceMetadataList, normalizeBundleOutputPath, normalizeSuiteConfig, omittedPayloadByteLength, parseCohortMetricList, parseDuration, parseDurationFilter, parseEvidenceManifestJson, parseGateList, parseGateNumber, parseGroupBySpec, parseTraceJsonl, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, readCheckResultsContractBinding, readTraceEvents, readTraceFile, renderActivitySummaryHuman, renderCohortReport, renderCohortSummaryMarkdown, renderErrorLine, renderGateGithubAnnotations, renderGateGithubStepSummary, renderGateJUnit, renderGateReport, renderGateSummaryMarkdown, renderRunSummary, renderRunWhat, renderStepLine, renderSuiteReport, renderSuiteReportMarkdown, renderTimeline, renderTraceStats, resolveAdapterMaxPreviewChars, resolveBundleRunIds, resolveRedactionProfile, resolveSerializableTraceContract, resolveSuiteCaseTrace, resolveSuiteConfigPath, resolveSuiteTemplate, resolveTraceDir, runGate, runSuite, sanitizeBundleRunId, searchTraces, serializeAdapterPreview, serializeCanonicalJson, serializeCheckResultsJson, serializeEvent, serializeEvidenceManifest, sessionKeyForRun, sha256Equals, sha256Hex, toMetadataSafeStatus, traceMetasToSessionRunRecords, truncateName, unknownTraceFormatMessage, validateEvent, validateEvidenceManifest, validateSuiteConfig, verifyEvidenceContractBinding, verifyEvidenceDirectory, warn, writeTraceEvent };