agent-inspect 6.26.0 → 6.28.0

package/packages/core/dist/checks.d.cts

@@ -1,12 +1,12 @@
-import { L as LogicalTraceEvent, a as LogicalProjectionDiagnostic, T as TraceCheckInput, b as TraceCheckDiagnostic, S as SessionWorkflowMetadata, c as TraceCheckResult } from './index-CR4CCRqP.cjs';
-export { B as BaselineRegressionRuleOptions, D as DecisionRuleOptions, G as GuardrailRuleOptions, d as LlmUsageRuleOptions, M as MaxStepDurationRuleOptions, O as ObservedOutcomeRuleOptions, R as RetrievalRuleOptions, e as RunDepthRuleOptions, f as RunDurationRuleOptions, g as RunEventCountRuleOptions, h as RunStatusRuleOptions, i as RunTraceChecksOptions, j as SafetyFindingCategory, k as SafetyFindingConfidence, l as SafetyOversizedAttributeRuleOptions, m as SafetyRawContentRuleOptions, n as SafetyRedactionRuleOptions, o as SafetySecretPattern, p as SafetySecretPatternRuleOptions, q as StallDetectionRuleOptions, r as StructureIncompleteRuleOptions, s as StructureOrphanRuleOptions, t as StructureParallelWidthRuleOptions, u as StructureRelationshipRuleOptions, v as ToolFailureRuleOptions, w as ToolOrderingRuleOptions, x as ToolUsageRuleOptions, y as TraceCheckContext, z as TraceCheckDiagnosticCode, A as TraceCheckEvidence, C as TraceCheckFacts, E as TraceCheckFinding, F as TraceCheckFindingStatus, H as TraceCheckRule, I as TraceCheckRuleCategory, J as TraceCheckRuleExecution, K as TraceCheckRuleExecutionStatus, N as TraceCheckSeverity, P as TraceCheckStatus, Q as TraceCheckSummary, U as TraceSignalRuleOptions, V as createBaselineRegressionRule, W as createDecisionRule, X as createGuardrailRule, Y as createLlmUsageRule, Z as createMaxStepDurationRule, _ as createObservedOutcomeRule, $ as createRequireCompletedRule, a0 as createRetrievalRule, a1 as createRunDepthRule, a2 as createRunDurationRule, a3 as createRunEventCountRule, a4 as createRunStatusRule, a5 as createSafetyOversizedAttributeRule, a6 as createSafetyRawContentRule, a7 as createSafetyRedactionRule, a8 as createSafetySecretPatternRule, a9 as createStallDetectionRule, aa as createStructureCycleRule, ab as createStructureIncompleteRule, ac as createStructureOrphanRule, ad as createStructureParallelWidthRule, ae as createStructureRelationshipRule, af as createToolFailureRule, ag as createToolOrderingRule, ah as createToolUsageRule, ai as projectLogicalEvents, aj as resolveCanonicalToolName, ak as runTraceChecks } from './index-CR4CCRqP.cjs';
+import { L as LogicalTraceEvent, a as LogicalProjectionDiagnostic } from './index-DVetZwGG.cjs';
+export { B as BaselineRegressionRuleOptions, C as ControlStage, D as DecisionRuleOptions, G as GuardrailRuleOptions, b as LlmUsageRuleOptions, M as MaxStepDurationRuleOptions, O as ObservedOutcomeRuleOptions, R as RecoverySameArgumentsMode, c as RecoverySideEffectClass, d as RetrievalRuleOptions, e as RunDepthRuleOptions, f as RunDurationRuleOptions, g as RunEventCountRuleOptions, h as RunStatusRuleOptions, i as RunTraceChecksOptions, S as SafetyFindingCategory, j as SafetyFindingConfidence, k as SafetyOversizedAttributeRuleOptions, l as SafetyRawContentRuleOptions, m as SafetyRedactionRuleOptions, n as SafetySecretPattern, o as SafetySecretPatternRuleOptions, p as StallDetectionRuleOptions, q as StructureIncompleteRuleOptions, r as StructureOrphanRuleOptions, s as StructureParallelWidthRuleOptions, t as StructureRelationshipRuleOptions, T as ToolArgumentCheck, u as ToolArgumentOccurrence, v as ToolArgumentOperator, w as ToolFailureRuleOptions, x as ToolOrderingRuleOptions, y as ToolUsageRuleOptions, z as TraceCheckContext, A as TraceCheckDiagnostic, E as TraceCheckDiagnosticCode, F as TraceCheckEvidence, H as TraceCheckFacts, I as TraceCheckFinding, J as TraceCheckFindingStatus, K as TraceCheckInput, N as TraceCheckResult, P as TraceCheckRule, Q as TraceCheckRuleCategory, U as TraceCheckRuleExecution, V as TraceCheckRuleExecutionStatus, W as TraceCheckSeverity, X as TraceCheckStatus, Y as TraceCheckSummary, Z as TraceContract, _ as TraceContractAlternativeBranch, $ as TraceContractAlternatives, a0 as TraceContractBody, a1 as TraceContractControlRules, a2 as TraceContractInput, a3 as TraceContractLintDiagnostic, a4 as TraceContractLlmRules, a5 as TraceContractObservationProvenance, a6 as TraceContractObservationRules, a7 as TraceContractRecoveryOperation, a8 as TraceContractRecoveryRetryableErrors, a9 as TraceContractRecoverySuccessfulResultDependency, aa as TraceContractRetryRules, ab as TraceContractRunRules, ac as TraceContractScope, ad as TraceContractToolRules, ae as TraceSignalRuleOptions, af as createBaselineRegressionRule, ag as createDecisionRule, ah as createGuardrailRule, ai as createLlmUsageRule, aj as createMaxStepDurationRule, ak as createObservedOutcomeRule, al as createRequireCompletedRule, am as createRetrievalRule, an as createRunDepthRule, ao as createRunDurationRule, ap as createRunEventCountRule, aq as createRunStatusRule, ar as createSafetyOversizedAttributeRule, as as createSafetyRawContentRule, at as createSafetyRedactionRule, au as createSafetySecretPatternRule, av as createStallDetectionRule, aw as createStructureCycleRule, ax as createStructureIncompleteRule, ay as createStructureOrphanRule, az as createStructureParallelWidthRule, aA as createStructureRelationshipRule, aB as createToolFailureRule, aC as createToolOrderingRule, aD as createToolUsageRule, aE as defineTraceContract, aF as evaluateToolArgumentValue, aG as evaluateTraceContract, aH as evaluateTraceContractRead, aI as explainTraceContract, aJ as extractToolArgumentPayload, aK as lintTraceContract, aL as projectLogicalEvents, aM as resolveCanonicalToolName, aN as resolveJsonPointer, aO as resolveTraceContractScope, aP as runTraceChecks, aQ as workflowMetadataForRun } from './index-DVetZwGG.cjs';
 export { P as PROGRAMMATIC_DIAGNOSTIC_SPECS, a as ProgrammaticDiagnosticCode, b as ProgrammaticDiagnosticSpec, f as formatProgrammaticDiagnostic } from './programmatic-gZTWLObB.cjs';
-import { g as TraceReadResult } from './index-DLLz9sce.cjs';
-import { P as PersistedInspectEvent } from './persisted-inspect-event-CVZWZldL.cjs';
-import './types-VzKihKQo.cjs';
-import './log-config-CFlIJHTf.cjs';
-import './inspect-event-DRthdZlf.cjs';
-import './types-B562HgN_.cjs';
+import { g as TraceReadResult } from './index-C6bCIbFO.cjs';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-DiJ0I_vi.cjs';
+import './inspect-event-CDqjcrG_.cjs';
+import './types-BA_IOdg4.cjs';
+import './types-wXuxMUop.cjs';
+import './log-config-DcjV8ZjF.cjs';
 
 /**
  * Read-time derived failure roles for TraceFacts (6.19).
@@ -185,409 +185,4 @@ interface TraceFacts {
 declare function buildTraceFacts(input: TraceReadResult): TraceFacts;
 declare function buildTraceFacts(input: readonly PersistedInspectEvent[]): TraceFacts;
 
-/**
- * Explicit actor/run projection for TraceContract evaluation (#320).
- *
- * Selectors use only declared metadata (or explicit event ids). Zero matches
- * and singular-actor ambiguity fail closed. No timestamp or display-name
- * inference.
- *
- * @experimental
- */
-interface TraceContractScope {
-    runId?: string;
-    subAgentId?: string;
-    groupId?: string;
-    workflowStep?: string;
-    /** Explicit root event id; evaluation projects to that event and descendants. */
-    rootEventId?: string;
-}
-interface ResolvedContractScope {
-    runId: string;
-    rootEventId?: string;
-    matchedSelectors: Record<string, string>;
-    evidenceEventCount: number;
-    input: TraceCheckInput;
-}
-/**
- * Collect explicit session/workflow metadata for a run from persisted events.
- * Prefers RUN-kind attributes; never invents identity from timestamps.
- */
-declare function workflowMetadataForRun(events: readonly PersistedInspectEvent[], runId: string): SessionWorkflowMetadata;
-/**
- * Resolve TraceContract `scope` against a check input.
- * Returns diagnostics on zero/ambiguous matches or missing root events.
- */
-declare function resolveTraceContractScope(input: TraceCheckInput, scope: TraceContractScope | undefined): {
-    resolved?: ResolvedContractScope;
-    diagnostics: TraceCheckDiagnostic[];
-};
-
-/**
- * Declared-versus-enforced control checks for TraceContract (6.23).
- *
- * A stored declaration is not proof of enforcement.
- *
- * @experimental
- */
-
-type ControlStage = "declared" | "presented" | "validated" | "enforced" | "observed" | "accepted";
-interface TraceContractControlRules {
-    /**
-     * Tools declared/presented to the agent (inline). Distinct from `enforcedTools`.
-     */
-    declaredTools?: string[];
-    /**
-     * Tools the harness claims to enforce (inline allowlist).
-     */
-    enforcedTools?: string[];
-    /**
-     * RUN/event attribute holding a string[] of declared tool names.
-     * Used when `declaredTools` is omitted.
-     */
-    declaredToolsAttribute?: string;
-    /**
-     * RUN/event attribute holding a string[] of enforced tool names.
-     */
-    enforcedToolsAttribute?: string;
-    /**
-     * Fail when both declared and enforced sets resolve and differ.
-     */
-    requireDeclaredMatchesEnforced?: boolean;
-    /**
-     * Fail when any observed finished tool is outside the enforced set.
-     */
-    requireObservedWithinEnforced?: boolean;
-    /**
-     * Fail when any observed finished tool is outside the declared set.
-     */
-    requireObservedWithinDeclared?: boolean;
-    /**
-     * Require observation names for control stages (default `control.<stage>`).
-     */
-    requiredStages?: Array<{
-        stage: ControlStage;
-        /** Observation name; defaults to `control.<stage>`. */
-        observation?: string;
-    }>;
-}
-
-/**
- * Retry / side-effect safety checks for TraceContract (6.23+; corrected in 6.25.1).
- *
- * Uses explicit attempt identity from session workflow metadata.
- * AgentInspect evaluates; it does not perform retries.
- *
- * @experimental
- */
-
-interface TraceContractRetryRules {
-    /**
-     * Maximum attempts per `operationId` (or `attemptOf` grouping).
-     * Prefers distinct `attemptId` values, else validated contiguous `attemptNumber`s,
-     * else finished tool/LLM events in the operation.
-     */
-    maxAttempts?: number;
-    /**
-     * When true, every operation with attempts must include a non-running terminal event.
-     */
-    requireTerminalResult?: boolean;
-    /**
-     * Fail when `fallbackOf` is set without an earlier failure for the referenced operation
-     * that chronologically precedes the fallback event.
-     */
-    fallbackOnlyAfterFailure?: boolean;
-    /**
-     * Tool names treated as non-idempotent. A later attempt after an `ok` occurrence fails
-     * unless idempotency / no-side-effect evidence is present on the retry.
-     */
-    nonIdempotentTools?: string[];
-    /**
-     * When true, genuine retries (including error→success) require `idempotencyKey`
-     * or `attributes.noSideEffect === true` / `sideEffect === false`.
-     * A client key alone is not proof of exactly-once mutation.
-     */
-    requireIdempotencyEvidenceForRetry?: boolean;
-    /**
-     * When true, recovered success paths must retain an earlier error attempt in the
-     * same operation/retry chain (not merely coexistence of ok+error).
-     */
-    requireRecoveredFailureVisible?: boolean;
-}
-
-/**
- * Resolve an RFC 6901 JSON Pointer against a JSON-like value.
- * Returns `{ found: false }` when the path does not exist.
- */
-declare function resolveJsonPointer(document: unknown, pointer: string): {
-    found: true;
-    value: unknown;
-} | {
-    found: false;
-};
-type ToolArgumentOperator = "exists" | "type" | "equals" | "oneOf";
-type ToolArgumentOccurrence = "first" | "last" | "any" | "all";
-interface ToolArgumentCheck {
-    tool: string;
-    path: string;
-    operator: ToolArgumentOperator;
-    occurrence?: ToolArgumentOccurrence;
-    /** Required for `equals`. */
-    expected?: unknown;
-    /** Required for `oneOf`. */
-    oneOf?: readonly unknown[];
-    /** Required for `type` (`string` | `number` | `boolean` | `object` | `array` | `null`). */
-    type?: "string" | "number" | "boolean" | "object" | "array" | "null";
-}
-type ToolArgumentEval = {
-    status: "pass";
-} | {
-    status: "fail";
-    message: string;
-    code: string;
-} | {
-    status: "unavailable";
-    message: string;
-    code: "AI_CHECK_TOOL_ARGUMENT_EVIDENCE_UNAVAILABLE";
-};
-/**
- * Extract structured tool-argument evidence from a tool event.
- * Preview-only strings and digests do not count as structured evidence.
- */
-declare function extractToolArgumentPayload(event: {
-    attributes?: Record<string, unknown>;
-    inputSummary?: unknown;
-}): {
-    present: boolean;
-    value: unknown;
-};
-declare function evaluateToolArgumentValue(value: unknown, check: ToolArgumentCheck, evidencePresent: boolean): ToolArgumentEval;
-
-/**
- * @experimental Typed trace contract input. Evolves during v6.5.x.
- */
-interface TraceContractRunRules {
-    requireCompleted?: boolean;
-    allowedStatuses?: string[];
-    maxDurationMs?: number;
-}
-interface TraceContractToolRules {
-    /**
-     * Unconditional tool presence invariant. Every named tool must appear at least
-     * once. Do not use for cache-hit or alternate-path shortcuts — prefer
-     * `alternatives.anyOf` or `observations.required` when a legitimate path may
-     * skip the tool.
-     *
-     * @see docs/TRACE-CONTRACTS.md
-     */
-    required?: string[];
-    /** Alias of `required` (TraceContract v2 normalization). */
-    requiredTools?: string[];
-    forbidden?: string[];
-    /** Alias of `forbidden`. */
-    forbiddenTools?: string[];
-    allowed?: string[];
-    maxCalls?: number;
-    /**
-     * Required tool order expanded into adjacent pairs.
-     *
-     * `[A, B, C]` expands to “A before B” and “B before C”, each comparing the
-     * selected `requiredOrderMode` to every pair. Unlisted intermediate tools
-     * are allowed.
-     *
-     * TraceContract `requiredOrder` **implies presence**: every listed name is
-     * added to the effective required-tool set. Low-level `createToolOrderingRule`
-     * alone may still pass vacuously when an endpoint is missing.
-     *
-     * The default `first-occurrence` mode preserves first-occurrence encounter
-     * ordering; overlapping intervals emit a non-failing warning. `happens-before`
-     * requires the first before event to finish before the first after event starts.
-     * `all-occurrences` applies that causal boundary to every occurrence.
-     *
-     * @see docs/TRACE-CONTRACTS.md
-     * @beta Available through `agent-inspect/checks`. Additive changes may ship
-     * in minor releases; breaking changes require a future major.
-     */
-    requiredOrder?: string[];
-    /**
-     * Ordering semantics applied to every adjacent pair in `requiredOrder`.
-     * Causal modes fail closed when a required interval boundary is unavailable.
-     *
-     * @defaultValue `"first-occurrence"`
-     * @beta Available through `agent-inspect/checks`.
-     */
-    requiredOrderMode?: "first-occurrence" | "happens-before" | "all-occurrences";
-    /**
-     * Bounded structured tool-argument checks (JSON Pointer + limited operators).
-     *
-     * Missing structured evidence fails closed as unevaluable (not pass).
-     * Findings never embed full actual inputs.
-     *
-     * @experimental Additive in 6.23.
-     */
-    arguments?: ToolArgumentCheck[];
-    /**
-     * Default occurrence mode for `orderRules` when a rule omits `occurrenceMode`.
-     *
-     * @experimental Additive in 6.23.
-     */
-    defaultOccurrenceMode?: "first-occurrence" | "happens-before" | "all-occurrences";
-    /**
-     * Mixed per-pair ordering rules (additive alongside `requiredOrder`).
-     *
-     * @experimental Additive in 6.23.
-     */
-    orderRules?: Array<{
-        before: string;
-        after: string;
-        occurrenceMode?: "first-occurrence" | "happens-before" | "all-occurrences";
-        requireEndpoints?: boolean;
-    }>;
-}
-interface TraceContractLlmRules {
-    maxCalls?: number;
-    maxTotalTokens?: number;
-    allowedModels?: string[];
-}
-/**
- * Structural provenance requirements for named observed outcomes (#321).
- *
- * These checks prove method/evidence linkage was recorded. They do **not**
- * prove the claim is semantically true, authorized, complete, or externally
- * trusted.
- *
- * @experimental
- */
-interface TraceContractObservationProvenance {
-    /** Require a non-empty method from the bounded ObservedOutcomeMethod vocabulary. */
-    method?: boolean;
-    /**
-     * Require bounded evidence references. Supported shapes:
-     * `string` event id, `{ eventId }`, or `{ eventIds: string[] }` (max 16 ids).
-     */
-    evidence?: boolean;
-    /** When true with evidence, each referenced event id must exist in the same run. */
-    sameRunEventReference?: boolean;
-}
-interface TraceContractObservationRules {
-    required?: string[];
-    failOn?: Array<"failed" | "unknown" | "skipped">;
-    /**
-     * Structural provenance gates for `required` observation names.
-     *
-     * @experimental
-     */
-    requireProvenance?: TraceContractObservationProvenance;
-}
-/**
- * One deterministic alternate path. Branch contracts are one level only —
- * nested `alternatives` are rejected.
- *
- * @experimental
- */
-interface TraceContractAlternativeBranch {
-    /** Unique branch id within `alternatives.anyOf`. */
-    id: string;
-    description?: string;
-    /** Branch body: run/tools/llm/observations only (no nested alternatives). */
-    contract: TraceContractBody;
-}
-/**
- * Bounded alternative valid paths for legitimate shortcuts (GitHub #309).
- *
- * @experimental
- */
-interface TraceContractAlternatives {
-    /**
-     * One level of named branches. The overall contract passes when the base
-     * rules pass and **at least one** complete branch passes.
-     */
-    anyOf: TraceContractAlternativeBranch[];
-}
-/** Contract body without alternatives (base or branch). */
-type TraceContractBody = {
-    run?: TraceContractRunRules;
-    tools?: TraceContractToolRules;
-    llm?: TraceContractLlmRules;
-    observations?: TraceContractObservationRules;
-    /**
-     * Declared-versus-enforced control invariants.
-     *
-     * @experimental Additive in 6.23.
-     */
-    controls?: TraceContractControlRules;
-    /**
-     * Retry / side-effect safety using explicit attempt identity.
-     *
-     * @experimental Additive in 6.23.
-     */
-    retry?: TraceContractRetryRules;
-};
-interface TraceContractInput extends TraceContractBody {
-    /**
-     * Optional actor/run projection applied before evaluation (#320).
-     *
-     * @experimental
-     */
-    scope?: TraceContractScope;
-    alternatives?: TraceContractAlternatives;
-}
-interface TraceContract extends TraceContractBody {
-    /**
-     * Optional actor/run projection applied before evaluation (#320).
-     *
-     * @experimental
-     */
-    scope?: TraceContractScope;
-    alternatives?: TraceContractAlternatives;
-}
-/**
- * Lint diagnostic for brittle or invalid TraceContract shapes.
- *
- * @experimental
- */
-interface TraceContractLintDiagnostic {
-    code: string;
-    severity: "error" | "warning" | "info";
-    message: string;
-    path?: string;
-}
-/**
- * Define a normalized trace contract object.
- *
- * @experimental
- */
-declare function defineTraceContract(input: TraceContractInput): TraceContract;
-/**
- * Evaluate a trace contract against an opened trace read result.
- *
- * Base rules always apply. When `alternatives.anyOf` is present, at least one
- * complete branch must also pass.
- *
- * @experimental
- */
-declare function evaluateTraceContract(input: TraceCheckInput, contract: TraceContract, options?: {
-    runId?: string;
-}): TraceCheckResult;
-/**
- * Convenience: evaluate a contract against a TraceReadResult directly.
- *
- * @experimental Additive wrapper over `evaluateTraceContract({ read }, …)`.
- */
-declare function evaluateTraceContractRead(read: TraceReadResult, contract: TraceContract, options?: {
-    runId?: string;
-}): TraceCheckResult;
-/**
- * Lint a TraceContract for invalid or brittle shapes (does not evaluate a trace).
- *
- * @experimental
- */
-declare function lintTraceContract(contract: TraceContract): TraceContractLintDiagnostic[];
-/**
- * Explain a TraceContract as short human-readable lines (does not evaluate a trace).
- *
- * @experimental
- */
-declare function explainTraceContract(contract: TraceContract): string[];
-
-export { type ControlStage, type DerivedFailureConfidence, type DerivedFailureFact, type DerivedFailureRole, type FailureRoleCounts, LogicalProjectionDiagnostic, LogicalTraceEvent, type SemanticParitySummary, type ToolArgumentCheck, type ToolArgumentOccurrence, type ToolArgumentOperator, TraceCheckDiagnostic, TraceCheckInput, TraceCheckResult, type TraceContract, type TraceContractAlternativeBranch, type TraceContractAlternatives, type TraceContractBody, type TraceContractControlRules, type TraceContractInput, type TraceContractLintDiagnostic, type TraceContractLlmRules, type TraceContractObservationProvenance, type TraceContractObservationRules, type TraceContractRetryRules, type TraceContractRunRules, type TraceContractScope, type TraceContractToolRules, type TraceFacts, type TraceRelationship, type TraceRelationshipConfidence, type TraceRelationshipDiagnostic, type TraceRelationshipType, buildTraceFacts, defineTraceContract, deriveFailureFacts, deriveRelationshipFacts, evaluateToolArgumentValue, evaluateTraceContract, evaluateTraceContractRead, explainTraceContract, extractToolArgumentPayload, lintTraceContract, resolveJsonPointer, resolveTraceContractScope, summarizeSemanticParity, workflowMetadataForRun };
+export { type DerivedFailureConfidence, type DerivedFailureFact, type DerivedFailureRole, type FailureRoleCounts, LogicalProjectionDiagnostic, LogicalTraceEvent, type SemanticParitySummary, type TraceFacts, type TraceRelationship, type TraceRelationshipConfidence, type TraceRelationshipDiagnostic, type TraceRelationshipType, buildTraceFacts, deriveFailureFacts, deriveRelationshipFacts, summarizeSemanticParity };