agent-inspect 6.26.0 → 6.28.0

package/packages/core/dist/{index-CR4CCRqP.d.cts → index-DVetZwGG.d.cts}

@@ -1,8 +1,8 @@
-import { T as TraceMetadataStatus } from './types-VzKihKQo.cjs';
-import { h as TraceReadWarning, g as TraceReadResult } from './index-DLLz9sce.cjs';
-import { a as InspectRunTree, b as InspectNode, A as AttributionConfidence } from './inspect-event-DRthdZlf.cjs';
-import { P as PersistedInspectEvent } from './persisted-inspect-event-CVZWZldL.cjs';
-import { O as ObservedOutcomeStatus } from './types-B562HgN_.cjs';
+import { g as TraceReadResult, h as TraceReadWarning } from './index-C6bCIbFO.cjs';
+import { a as InspectRunTree, c as InspectNode, A as AttributionConfidence } from './inspect-event-CDqjcrG_.cjs';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-DiJ0I_vi.cjs';
+import { a as ObservedOutcomeStatus } from './types-BA_IOdg4.cjs';
+import { j as TraceMetadataStatus } from './types-wXuxMUop.cjs';
 
 /** Known session/workflow metadata keys (v2.4 RFC). */
 declare const SESSION_WORKFLOW_KEYS: readonly ["sessionId", "conversationId", "groupId", "parentGroupId", "attempt", "retryOf", "retryReason", "handoffFrom", "handoffTo", "subAgentId", "subAgentName", "jobId", "queueName", "workflowName", "workflowStep", "toolCallId", "mcpToolCallId", "linkedStepId", "operationId", "attemptId", "attemptNumber", "fallbackOf", "idempotencyKey", "correlationId", "requestId", "decisionId"];
@@ -216,6 +216,473 @@ declare function projectLogicalEvents(events: readonly PersistedInspectEvent[]):
  */
 declare function resolveCanonicalToolName(event: PersistedInspectEvent): string;
 
+/**
+ * Explicit actor/run projection for TraceContract evaluation (#320).
+ *
+ * Selectors use only declared metadata (or explicit event ids). Zero matches
+ * and singular-actor ambiguity fail closed. No timestamp or display-name
+ * inference.
+ *
+ * @experimental
+ */
+interface TraceContractScope {
+    runId?: string;
+    subAgentId?: string;
+    groupId?: string;
+    workflowStep?: string;
+    /** Explicit root event id; evaluation projects to that event and descendants. */
+    rootEventId?: string;
+}
+interface ResolvedContractScope {
+    runId: string;
+    rootEventId?: string;
+    matchedSelectors: Record<string, string>;
+    evidenceEventCount: number;
+    input: TraceCheckInput;
+}
+/**
+ * Collect explicit session/workflow metadata for a run from persisted events.
+ * Prefers RUN-kind attributes; never invents identity from timestamps.
+ */
+declare function workflowMetadataForRun(events: readonly PersistedInspectEvent[], runId: string): SessionWorkflowMetadata;
+/**
+ * Resolve TraceContract `scope` against a check input.
+ * Returns diagnostics on zero/ambiguous matches or missing root events.
+ */
+declare function resolveTraceContractScope(input: TraceCheckInput, scope: TraceContractScope | undefined): {
+    resolved?: ResolvedContractScope;
+    diagnostics: TraceCheckDiagnostic[];
+};
+
+/**
+ * Declared-versus-enforced control checks for TraceContract (6.23).
+ *
+ * A stored declaration is not proof of enforcement.
+ *
+ * @experimental
+ */
+
+type ControlStage = "declared" | "presented" | "validated" | "enforced" | "observed" | "accepted";
+interface TraceContractControlRules {
+    /**
+     * Tools declared/presented to the agent (inline). Distinct from `enforcedTools`.
+     */
+    declaredTools?: string[];
+    /**
+     * Tools the harness claims to enforce (inline allowlist).
+     */
+    enforcedTools?: string[];
+    /**
+     * RUN/event attribute holding a string[] of declared tool names.
+     * Used when `declaredTools` is omitted.
+     */
+    declaredToolsAttribute?: string;
+    /**
+     * RUN/event attribute holding a string[] of enforced tool names.
+     */
+    enforcedToolsAttribute?: string;
+    /**
+     * Fail when both declared and enforced sets resolve and differ.
+     */
+    requireDeclaredMatchesEnforced?: boolean;
+    /**
+     * Fail when any observed finished tool is outside the enforced set.
+     */
+    requireObservedWithinEnforced?: boolean;
+    /**
+     * Fail when any observed finished tool is outside the declared set.
+     */
+    requireObservedWithinDeclared?: boolean;
+    /**
+     * Require observation names for control stages (default `control.<stage>`).
+     */
+    requiredStages?: Array<{
+        stage: ControlStage;
+        /** Observation name; defaults to `control.<stage>`. */
+        observation?: string;
+    }>;
+}
+
+/**
+ * Bounded safe recovery operation contracts (6.27).
+ *
+ * Additive `retry.operations[]` rules for read-first recovery oracles.
+ * AgentInspect evaluates traces; it does not perform retries.
+ *
+ * @experimental
+ */
+
+/** How same-argument evidence may be compared across attempts. */
+type RecoverySameArgumentsMode = "structured-or-digest";
+/**
+ * Side-effect class for conservative write recovery semantics.
+ * Read-only tools may recover without write idempotency proof.
+ * Write tools treat timeout/unknown completion as fail/unevaluable
+ * unless authoritative idempotency evidence is present.
+ */
+type RecoverySideEffectClass = "read" | "write";
+interface TraceContractRecoveryRetryableErrors {
+    /** Allowed error codes on failed attempts that precede a retry. */
+    codes?: readonly string[];
+}
+interface TraceContractRecoverySuccessfulResultDependency {
+    /** Consumer kind that must observe the successful tool result. */
+    consumerKind: "LLM";
+    /**
+     * When true, an LLM event must explicitly reference the successful tool
+     * event id (attributes / workflow metadata), not merely follow it in time.
+     */
+    requireExplicitReference?: boolean;
+}
+/**
+ * Per-tool bounded recovery oracle (additive under `retry.operations`).
+ *
+ * @experimental Additive in 6.27.
+ */
+interface TraceContractRecoveryOperation {
+    tool: string;
+    maxAttempts?: number;
+    retryableErrors?: TraceContractRecoveryRetryableErrors;
+    requireFailureBeforeRetry?: boolean;
+    /**
+     * When true or `"structured-or-digest"`, retries must share structured
+     * arguments or matching digests. Missing evidence fails closed.
+     */
+    requireSameArguments?: boolean | RecoverySameArgumentsMode;
+    requireTerminalSuccess?: boolean;
+    requireRecoveredFailureVisible?: boolean;
+    successfulResultDependency?: TraceContractRecoverySuccessfulResultDependency;
+    /**
+     * Defaults to `"read"`. Write tools apply conservative timeout/unknown rules.
+     */
+    sideEffectClass?: RecoverySideEffectClass;
+}
+
+/**
+ * Retry / side-effect safety checks for TraceContract (6.23+; corrected in 6.25.1).
+ *
+ * Uses explicit attempt identity from session workflow metadata.
+ * AgentInspect evaluates; it does not perform retries.
+ *
+ * @experimental
+ */
+
+interface TraceContractRetryRules {
+    /**
+     * Maximum attempts per `operationId` (or `attemptOf` grouping).
+     * Prefers distinct `attemptId` values, else validated contiguous `attemptNumber`s,
+     * else finished tool/LLM events in the operation.
+     */
+    maxAttempts?: number;
+    /**
+     * When true, every operation with attempts must include a non-running terminal event.
+     */
+    requireTerminalResult?: boolean;
+    /**
+     * Fail when `fallbackOf` is set without an earlier failure for the referenced operation
+     * that chronologically precedes the fallback event.
+     */
+    fallbackOnlyAfterFailure?: boolean;
+    /**
+     * Tool names treated as non-idempotent. A later attempt after an `ok` occurrence fails
+     * unless idempotency / no-side-effect evidence is present on the retry.
+     */
+    nonIdempotentTools?: string[];
+    /**
+     * When true, genuine retries (including error→success) require `idempotencyKey`
+     * or `attributes.noSideEffect === true` / `sideEffect === false`.
+     * A client key alone is not proof of exactly-once mutation.
+     */
+    requireIdempotencyEvidenceForRetry?: boolean;
+    /**
+     * When true, recovered success paths must retain an earlier error attempt in the
+     * same operation/retry chain (not merely coexistence of ok+error).
+     */
+    requireRecoveredFailureVisible?: boolean;
+    /**
+     * Per-tool bounded recovery oracles (read-first; write timeout/unknown fails closed).
+     *
+     * @experimental Additive in 6.27.
+     */
+    operations?: readonly TraceContractRecoveryOperation[];
+}
+
+/**
+ * Resolve an RFC 6901 JSON Pointer against a JSON-like value.
+ * Returns `{ found: false }` when the path does not exist.
+ */
+declare function resolveJsonPointer(document: unknown, pointer: string): {
+    found: true;
+    value: unknown;
+} | {
+    found: false;
+};
+type ToolArgumentOperator = "exists" | "type" | "equals" | "oneOf";
+type ToolArgumentOccurrence = "first" | "last" | "any" | "all";
+interface ToolArgumentCheck {
+    tool: string;
+    path: string;
+    operator: ToolArgumentOperator;
+    occurrence?: ToolArgumentOccurrence;
+    /** Required for `equals`. */
+    expected?: unknown;
+    /** Required for `oneOf`. */
+    oneOf?: readonly unknown[];
+    /** Required for `type` (`string` | `number` | `boolean` | `object` | `array` | `null`). */
+    type?: "string" | "number" | "boolean" | "object" | "array" | "null";
+}
+type ToolArgumentEval = {
+    status: "pass";
+} | {
+    status: "fail";
+    message: string;
+    code: string;
+} | {
+    status: "unavailable";
+    message: string;
+    code: "AI_CHECK_TOOL_ARGUMENT_EVIDENCE_UNAVAILABLE";
+};
+/**
+ * Extract structured tool-argument evidence from a tool event.
+ * Preview-only strings and digests do not count as structured evidence.
+ */
+declare function extractToolArgumentPayload(event: {
+    attributes?: Record<string, unknown>;
+    inputSummary?: unknown;
+}): {
+    present: boolean;
+    value: unknown;
+};
+declare function evaluateToolArgumentValue(value: unknown, check: ToolArgumentCheck, evidencePresent: boolean): ToolArgumentEval;
+
+/**
+ * @experimental Typed trace contract input. Evolves during v6.5.x.
+ */
+interface TraceContractRunRules {
+    requireCompleted?: boolean;
+    allowedStatuses?: string[];
+    maxDurationMs?: number;
+}
+interface TraceContractToolRules {
+    /**
+     * Unconditional tool presence invariant. Every named tool must appear at least
+     * once. Do not use for cache-hit or alternate-path shortcuts — prefer
+     * `alternatives.anyOf` or `observations.required` when a legitimate path may
+     * skip the tool.
+     *
+     * @see docs/TRACE-CONTRACTS.md
+     */
+    required?: string[];
+    /** Alias of `required` (TraceContract v2 normalization). */
+    requiredTools?: string[];
+    forbidden?: string[];
+    /** Alias of `forbidden`. */
+    forbiddenTools?: string[];
+    allowed?: string[];
+    maxCalls?: number;
+    /**
+     * Required tool order expanded into adjacent pairs.
+     *
+     * `[A, B, C]` expands to “A before B” and “B before C”, each comparing the
+     * selected `requiredOrderMode` to every pair. Unlisted intermediate tools
+     * are allowed.
+     *
+     * TraceContract `requiredOrder` **implies presence**: every listed name is
+     * added to the effective required-tool set. Low-level `createToolOrderingRule`
+     * alone may still pass vacuously when an endpoint is missing.
+     *
+     * The default `first-occurrence` mode preserves first-occurrence encounter
+     * ordering; overlapping intervals emit a non-failing warning. `happens-before`
+     * requires the first before event to finish before the first after event starts.
+     * `all-occurrences` applies that causal boundary to every occurrence.
+     *
+     * @see docs/TRACE-CONTRACTS.md
+     * @beta Available through `agent-inspect/checks`. Additive changes may ship
+     * in minor releases; breaking changes require a future major.
+     */
+    requiredOrder?: string[];
+    /**
+     * Ordering semantics applied to every adjacent pair in `requiredOrder`.
+     * Causal modes fail closed when a required interval boundary is unavailable.
+     *
+     * @defaultValue `"first-occurrence"`
+     * @beta Available through `agent-inspect/checks`.
+     */
+    requiredOrderMode?: "first-occurrence" | "happens-before" | "all-occurrences";
+    /**
+     * Bounded structured tool-argument checks (JSON Pointer + limited operators).
+     *
+     * Missing structured evidence fails closed as unevaluable (not pass).
+     * Findings never embed full actual inputs.
+     *
+     * @experimental Additive in 6.23.
+     */
+    arguments?: ToolArgumentCheck[];
+    /**
+     * Default occurrence mode for `orderRules` when a rule omits `occurrenceMode`.
+     *
+     * @experimental Additive in 6.23.
+     */
+    defaultOccurrenceMode?: "first-occurrence" | "happens-before" | "all-occurrences";
+    /**
+     * Mixed per-pair ordering rules (additive alongside `requiredOrder`).
+     *
+     * @experimental Additive in 6.23.
+     */
+    orderRules?: Array<{
+        before: string;
+        after: string;
+        occurrenceMode?: "first-occurrence" | "happens-before" | "all-occurrences";
+        requireEndpoints?: boolean;
+    }>;
+}
+interface TraceContractLlmRules {
+    maxCalls?: number;
+    maxTotalTokens?: number;
+    allowedModels?: string[];
+}
+/**
+ * Structural provenance requirements for named observed outcomes (#321).
+ *
+ * These checks prove method/evidence linkage was recorded. They do **not**
+ * prove the claim is semantically true, authorized, complete, or externally
+ * trusted.
+ *
+ * @experimental
+ */
+interface TraceContractObservationProvenance {
+    /** Require a non-empty method from the bounded ObservedOutcomeMethod vocabulary. */
+    method?: boolean;
+    /**
+     * Require bounded evidence references. Supported shapes:
+     * `string` event id, `{ eventId }`, or `{ eventIds: string[] }` (max 16 ids).
+     */
+    evidence?: boolean;
+    /** When true with evidence, each referenced event id must exist in the same run. */
+    sameRunEventReference?: boolean;
+}
+interface TraceContractObservationRules {
+    required?: string[];
+    failOn?: Array<"failed" | "unknown" | "skipped">;
+    /**
+     * Structural provenance gates for `required` observation names.
+     *
+     * @experimental
+     */
+    requireProvenance?: TraceContractObservationProvenance;
+}
+/**
+ * One deterministic alternate path. Branch contracts are one level only —
+ * nested `alternatives` are rejected.
+ *
+ * @experimental
+ */
+interface TraceContractAlternativeBranch {
+    /** Unique branch id within `alternatives.anyOf`. */
+    id: string;
+    description?: string;
+    /** Branch body: run/tools/llm/observations only (no nested alternatives). */
+    contract: TraceContractBody;
+}
+/**
+ * Bounded alternative valid paths for legitimate shortcuts (GitHub #309).
+ *
+ * @experimental
+ */
+interface TraceContractAlternatives {
+    /**
+     * One level of named branches. The overall contract passes when the base
+     * rules pass and **at least one** complete branch passes.
+     */
+    anyOf: TraceContractAlternativeBranch[];
+}
+/** Contract body without alternatives (base or branch). */
+type TraceContractBody = {
+    run?: TraceContractRunRules;
+    tools?: TraceContractToolRules;
+    llm?: TraceContractLlmRules;
+    observations?: TraceContractObservationRules;
+    /**
+     * Declared-versus-enforced control invariants.
+     *
+     * @experimental Additive in 6.23.
+     */
+    controls?: TraceContractControlRules;
+    /**
+     * Retry / side-effect safety using explicit attempt identity.
+     * Additive `retry.operations[]` recovery oracles land in 6.27.
+     *
+     * @experimental Additive in 6.23; operations in 6.27.
+     */
+    retry?: TraceContractRetryRules;
+};
+interface TraceContractInput extends TraceContractBody {
+    /**
+     * Optional actor/run projection applied before evaluation (#320).
+     *
+     * @experimental
+     */
+    scope?: TraceContractScope;
+    alternatives?: TraceContractAlternatives;
+}
+interface TraceContract extends TraceContractBody {
+    /**
+     * Optional actor/run projection applied before evaluation (#320).
+     *
+     * @experimental
+     */
+    scope?: TraceContractScope;
+    alternatives?: TraceContractAlternatives;
+}
+/**
+ * Lint diagnostic for brittle or invalid TraceContract shapes.
+ *
+ * @experimental
+ */
+interface TraceContractLintDiagnostic {
+    code: string;
+    severity: "error" | "warning" | "info";
+    message: string;
+    path?: string;
+}
+/**
+ * Define a normalized trace contract object.
+ *
+ * @experimental
+ */
+declare function defineTraceContract(input: TraceContractInput): TraceContract;
+/**
+ * Evaluate a trace contract against an opened trace read result.
+ *
+ * Base rules always apply. When `alternatives.anyOf` is present, at least one
+ * complete branch must also pass.
+ *
+ * @experimental
+ */
+declare function evaluateTraceContract(input: TraceCheckInput, contract: TraceContract, options?: {
+    runId?: string;
+}): TraceCheckResult;
+/**
+ * Convenience: evaluate a contract against a TraceReadResult directly.
+ *
+ * @experimental Additive wrapper over `evaluateTraceContract({ read }, …)`.
+ */
+declare function evaluateTraceContractRead(read: TraceReadResult, contract: TraceContract, options?: {
+    runId?: string;
+}): TraceCheckResult;
+/**
+ * Lint a TraceContract for invalid or brittle shapes (does not evaluate a trace).
+ *
+ * @experimental
+ */
+declare function lintTraceContract(contract: TraceContract): TraceContractLintDiagnostic[];
+/**
+ * Explain a TraceContract as short human-readable lines (does not evaluate a trace).
+ *
+ * @experimental
+ */
+declare function explainTraceContract(contract: TraceContract): string[];
+
 /**
  * Experimental trace-check finding severity.
  *
@@ -881,4 +1348,4 @@ declare function createObservedOutcomeRule(options?: ObservedOutcomeRuleOptions)
  */
 declare function runTraceChecks(input: TraceCheckInput, options?: RunTraceChecksOptions): TraceCheckResult;
 
-export { createRequireCompletedRule as $, type TraceCheckEvidence as A, type BaselineRegressionRuleOptions as B, type TraceCheckFacts as C, type DecisionRuleOptions as D, type TraceCheckFinding as E, type TraceCheckFindingStatus as F, type GuardrailRuleOptions as G, type TraceCheckRule as H, type TraceCheckRuleCategory as I, type TraceCheckRuleExecution as J, type TraceCheckRuleExecutionStatus as K, type LogicalTraceEvent as L, type MaxStepDurationRuleOptions as M, type TraceCheckSeverity as N, type ObservedOutcomeRuleOptions as O, type TraceCheckStatus as P, type TraceCheckSummary as Q, type RetrievalRuleOptions as R, type SessionWorkflowMetadata as S, type TraceCheckInput as T, type TraceSignalRuleOptions as U, createBaselineRegressionRule as V, createDecisionRule as W, createGuardrailRule as X, createLlmUsageRule as Y, createMaxStepDurationRule as Z, createObservedOutcomeRule as _, type LogicalProjectionDiagnostic as a, createRetrievalRule as a0, createRunDepthRule as a1, createRunDurationRule as a2, createRunEventCountRule as a3, createRunStatusRule as a4, createSafetyOversizedAttributeRule as a5, createSafetyRawContentRule as a6, createSafetyRedactionRule as a7, createSafetySecretPatternRule as a8, createStallDetectionRule as a9, type SessionConfidence as aA, type SessionEdgeSource as aB, type SessionGroup as aC, type SessionLastError as aD, type SessionWorkflowKey as aE, createStructureCycleRule as aa, createStructureIncompleteRule as ab, createStructureOrphanRule as ac, createStructureParallelWidthRule as ad, createStructureRelationshipRule as ae, createToolFailureRule as af, createToolOrderingRule as ag, createToolUsageRule as ah, projectLogicalEvents as ai, resolveCanonicalToolName as aj, runTraceChecks as ak, type SessionRunRecord as al, type EnrichSessionSummaryOptions as am, type SessionStatus as an, type SessionSummary as ao, type SessionIndex as ap, type BuildActivitySummaryOptions as aq, type ActivitySummary as ar, type SessionWarning as as, type BuildSessionIndexOptions as at, type ActivityEntry as au, type CriticalPathStep as av, type HandoffEdge as aw, type RetryLink as ax, SESSION_WORKFLOW_KEYS as ay, type SessionCheckSummary as az, type TraceCheckDiagnostic as b, type TraceCheckResult as c, type LlmUsageRuleOptions as d, type RunDepthRuleOptions as e, type RunDurationRuleOptions as f, type RunEventCountRuleOptions as g, type RunStatusRuleOptions as h, type RunTraceChecksOptions as i, type SafetyFindingCategory as j, type SafetyFindingConfidence as k, type SafetyOversizedAttributeRuleOptions as l, type SafetyRawContentRuleOptions as m, type SafetyRedactionRuleOptions as n, type SafetySecretPattern as o, type SafetySecretPatternRuleOptions as p, type StallDetectionRuleOptions as q, type StructureIncompleteRuleOptions as r, type StructureOrphanRuleOptions as s, type StructureParallelWidthRuleOptions as t, type StructureRelationshipRuleOptions as u, type ToolFailureRuleOptions as v, type ToolOrderingRuleOptions as w, type ToolUsageRuleOptions as x, type TraceCheckContext as y, type TraceCheckDiagnosticCode as z };
+export { type TraceContractAlternatives as $, type TraceCheckDiagnostic as A, type BaselineRegressionRuleOptions as B, type ControlStage as C, type DecisionRuleOptions as D, type TraceCheckDiagnosticCode as E, type TraceCheckEvidence as F, type GuardrailRuleOptions as G, type TraceCheckFacts as H, type TraceCheckFinding as I, type TraceCheckFindingStatus as J, type TraceCheckInput as K, type LogicalTraceEvent as L, type MaxStepDurationRuleOptions as M, type TraceCheckResult as N, type ObservedOutcomeRuleOptions as O, type TraceCheckRule as P, type TraceCheckRuleCategory as Q, type RecoverySameArgumentsMode as R, type SafetyFindingCategory as S, type ToolArgumentCheck as T, type TraceCheckRuleExecution as U, type TraceCheckRuleExecutionStatus as V, type TraceCheckSeverity as W, type TraceCheckStatus as X, type TraceCheckSummary as Y, type TraceContract as Z, type TraceContractAlternativeBranch as _, type LogicalProjectionDiagnostic as a, type ActivityEntry as a$, type TraceContractBody as a0, type TraceContractControlRules as a1, type TraceContractInput as a2, type TraceContractLintDiagnostic as a3, type TraceContractLlmRules as a4, type TraceContractObservationProvenance as a5, type TraceContractObservationRules as a6, type TraceContractRecoveryOperation as a7, type TraceContractRecoveryRetryableErrors as a8, type TraceContractRecoverySuccessfulResultDependency as a9, createStructureRelationshipRule as aA, createToolFailureRule as aB, createToolOrderingRule as aC, createToolUsageRule as aD, defineTraceContract as aE, evaluateToolArgumentValue as aF, evaluateTraceContract as aG, evaluateTraceContractRead as aH, explainTraceContract as aI, extractToolArgumentPayload as aJ, lintTraceContract as aK, projectLogicalEvents as aL, resolveCanonicalToolName as aM, resolveJsonPointer as aN, resolveTraceContractScope as aO, runTraceChecks as aP, workflowMetadataForRun as aQ, type SessionWorkflowMetadata as aR, type SessionRunRecord as aS, type EnrichSessionSummaryOptions as aT, type SessionStatus as aU, type SessionSummary as aV, type SessionIndex as aW, type BuildActivitySummaryOptions as aX, type ActivitySummary as aY, type SessionWarning as aZ, type BuildSessionIndexOptions as a_, type TraceContractRetryRules as aa, type TraceContractRunRules as ab, type TraceContractScope as ac, type TraceContractToolRules as ad, type TraceSignalRuleOptions as ae, createBaselineRegressionRule as af, createDecisionRule as ag, createGuardrailRule as ah, createLlmUsageRule as ai, createMaxStepDurationRule as aj, createObservedOutcomeRule as ak, createRequireCompletedRule as al, createRetrievalRule as am, createRunDepthRule as an, createRunDurationRule as ao, createRunEventCountRule as ap, createRunStatusRule as aq, createSafetyOversizedAttributeRule as ar, createSafetyRawContentRule as as, createSafetyRedactionRule as at, createSafetySecretPatternRule as au, createStallDetectionRule as av, createStructureCycleRule as aw, createStructureIncompleteRule as ax, createStructureOrphanRule as ay, createStructureParallelWidthRule as az, type LlmUsageRuleOptions as b, type CriticalPathStep as b0, type HandoffEdge as b1, type RetryLink as b2, SESSION_WORKFLOW_KEYS as b3, type SessionCheckSummary as b4, type SessionConfidence as b5, type SessionEdgeSource as b6, type SessionGroup as b7, type SessionLastError as b8, type SessionWorkflowKey as b9, type RecoverySideEffectClass as c, type RetrievalRuleOptions as d, type RunDepthRuleOptions as e, type RunDurationRuleOptions as f, type RunEventCountRuleOptions as g, type RunStatusRuleOptions as h, type RunTraceChecksOptions as i, type SafetyFindingConfidence as j, type SafetyOversizedAttributeRuleOptions as k, type SafetyRawContentRuleOptions as l, type SafetyRedactionRuleOptions as m, type SafetySecretPattern as n, type SafetySecretPatternRuleOptions as o, type StallDetectionRuleOptions as p, type StructureIncompleteRuleOptions as q, type StructureOrphanRuleOptions as r, type StructureParallelWidthRuleOptions as s, type StructureRelationshipRuleOptions as t, type ToolArgumentOccurrence as u, type ToolArgumentOperator as v, type ToolFailureRuleOptions as w, type ToolOrderingRuleOptions as x, type ToolUsageRuleOptions as y, type TraceCheckContext as z };

package/packages/core/dist/index.d.cts

@@ -1,10 +1,10 @@
-import { I as InspectRunOptions, S as StepOptions, O as ObserveOptions } from './types-VzKihKQo.cjs';
-export { E as ErrorInfo, R as RedactionProfile, a as Run, b as RunStatus, c as Step, d as StepMetadata, e as StepStatus, f as StepType, g as TokenMetadata, h as TraceCorrelationMetadata } from './types-VzKihKQo.cjs';
-export { C as CreateInspectorOptions, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, d as InspectorStepOptions, e as createInspector, g as getCurrentCorrelationMetadata, m as maybeInspectRun } from './context-DOOT9GZ-.cjs';
-import { a as ObserveOutcomeOptions } from './types-B562HgN_.cjs';
-import './log-config-CFlIJHTf.cjs';
-import './inspect-event-DRthdZlf.cjs';
-import './persisted-inspect-event-CVZWZldL.cjs';
+import { I as InspectRunOptions, S as StepOptions, O as ObserveOptions } from './types-wXuxMUop.cjs';
+export { E as ErrorInfo, R as RedactionProfile, a as Run, b as RunStatus, c as Step, d as StepMetadata, e as StepStatus, f as StepType, T as TokenMetadata, g as TraceCorrelationMetadata } from './types-wXuxMUop.cjs';
+export { C as CreateInspectorOptions, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, d as InspectorStepOptions, e as createInspector, g as getCurrentCorrelationMetadata, m as maybeInspectRun } from './context-DGMqxFpz.cjs';
+import { O as ObserveOutcomeOptions } from './types-BA_IOdg4.cjs';
+import './log-config-DcjV8ZjF.cjs';
+import './inspect-event-CDqjcrG_.cjs';
+import './persisted-inspect-event-DiJ0I_vi.cjs';
 import './writers.cjs';
 
 /**

package/packages/core/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { I as InspectRunOptions, S as StepOptions, O as ObserveOptions } from './types-Bx3mEZ04.js';
-export { E as ErrorInfo, R as RedactionProfile, a as Run, b as RunStatus, c as Step, d as StepMetadata, e as StepStatus, f as StepType, g as TokenMetadata, h as TraceCorrelationMetadata } from './types-Bx3mEZ04.js';
-export { C as CreateInspectorOptions, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, d as InspectorStepOptions, e as createInspector, g as getCurrentCorrelationMetadata, m as maybeInspectRun } from './context-DOX2-RjH.js';
-import { a as ObserveOutcomeOptions } from './types-B562HgN_.js';
-import './log-config-OZRfpHED.js';
-import './inspect-event-DRthdZlf.js';
-import './persisted-inspect-event-BVucFVrP.js';
+import { I as InspectRunOptions, S as StepOptions, O as ObserveOptions } from './types-xv9bSgOK.js';
+export { E as ErrorInfo, R as RedactionProfile, a as Run, b as RunStatus, c as Step, d as StepMetadata, e as StepStatus, f as StepType, T as TokenMetadata, g as TraceCorrelationMetadata } from './types-xv9bSgOK.js';
+export { C as CreateInspectorOptions, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, d as InspectorStepOptions, e as createInspector, g as getCurrentCorrelationMetadata, m as maybeInspectRun } from './context-DgcvkJ9t.js';
+import { O as ObserveOutcomeOptions } from './types-BA_IOdg4.js';
+import './log-config-N_c5AE09.js';
+import './inspect-event-CDqjcrG_.js';
+import './persisted-inspect-event-CbaRYpbw.js';
 import './writers.js';
 
 /**

package/packages/core/dist/{inspect-event-DRthdZlf.d.cts → inspect-event-CDqjcrG_.d.cts}

@@ -47,4 +47,4 @@ interface InspectRunTree {
     };
 }
 
-export type { AttributionConfidence as A, EventSource as E, InspectKind as I, InspectRunTree as a, InspectNode as b, InspectEvent as c };
+export type { AttributionConfidence as A, EventSource as E, InspectKind as I, InspectRunTree as a, InspectEvent as b, InspectNode as c };

package/packages/core/dist/{inspect-event-DRthdZlf.d.ts → inspect-event-CDqjcrG_.d.ts}

@@ -47,4 +47,4 @@ interface InspectRunTree {
     };
 }
 
-export type { AttributionConfidence as A, EventSource as E, InspectKind as I, InspectRunTree as a, InspectNode as b, InspectEvent as c };
+export type { AttributionConfidence as A, EventSource as E, InspectKind as I, InspectRunTree as a, InspectEvent as b, InspectNode as c };

package/packages/core/dist/{log-config-CFlIJHTf.d.cts → log-config-DcjV8ZjF.d.cts}

@@ -1,4 +1,4 @@
-import { I as InspectKind } from './inspect-event-DRthdZlf.cjs';
+import { I as InspectKind } from './inspect-event-CDqjcrG_.cjs';
 
 interface LogEventMapping {
     kind?: InspectKind;

package/packages/core/dist/{log-config-OZRfpHED.d.ts → log-config-N_c5AE09.d.ts}

@@ -1,4 +1,4 @@
-import { I as InspectKind } from './inspect-event-DRthdZlf.js';
+import { I as InspectKind } from './inspect-event-CDqjcrG_.js';
 
 interface LogEventMapping {
     kind?: InspectKind;

package/packages/core/dist/logs.d.cts

@@ -1,6 +1,6 @@
-import { L as LogIngestConfig, a as LogEventMapping, R as RedactionRule } from './log-config-CFlIJHTf.cjs';
-export { b as RedactionStrategy } from './log-config-CFlIJHTf.cjs';
-import { c as InspectEvent, a as InspectRunTree } from './inspect-event-DRthdZlf.cjs';
+import { L as LogIngestConfig, a as LogEventMapping, R as RedactionRule } from './log-config-DcjV8ZjF.cjs';
+export { b as RedactionStrategy } from './log-config-DcjV8ZjF.cjs';
+import { b as InspectEvent, a as InspectRunTree } from './inspect-event-CDqjcrG_.cjs';
 
 type ParserWarningCode = "MALFORMED_JSON" | "MISSING_RUN_ID" | "MISSING_EVENT" | "MISSING_TIMESTAMP" | "UNSUPPORTED_LOG4JS_PAYLOAD" | "CONFIG_ERROR" | "UNKNOWN";
 interface ParserWarning {

package/packages/core/dist/logs.d.ts

@@ -1,6 +1,6 @@
-import { L as LogIngestConfig, a as LogEventMapping, R as RedactionRule } from './log-config-OZRfpHED.js';
-export { b as RedactionStrategy } from './log-config-OZRfpHED.js';
-import { c as InspectEvent, a as InspectRunTree } from './inspect-event-DRthdZlf.js';
+import { L as LogIngestConfig, a as LogEventMapping, R as RedactionRule } from './log-config-N_c5AE09.js';
+export { b as RedactionStrategy } from './log-config-N_c5AE09.js';
+import { b as InspectEvent, a as InspectRunTree } from './inspect-event-CDqjcrG_.js';
 
 type ParserWarningCode = "MALFORMED_JSON" | "MISSING_RUN_ID" | "MISSING_EVENT" | "MISSING_TIMESTAMP" | "UNSUPPORTED_LOG4JS_PAYLOAD" | "CONFIG_ERROR" | "UNKNOWN";
 interface ParserWarning {

package/packages/core/dist/{persisted-inspect-event-BVucFVrP.d.ts → persisted-inspect-event-CbaRYpbw.d.ts}

@@ -1,4 +1,4 @@
-import { I as InspectKind, A as AttributionConfidence } from './inspect-event-DRthdZlf.js';
+import { I as InspectKind, A as AttributionConfidence } from './inspect-event-CDqjcrG_.js';
 
 type PersistedSchemaVersion = "0.2" | "1.0";
 type PersistedEventSourceType = "manual" | "json-log" | "log4js" | "adapter" | "ai-sdk" | "otel";

package/packages/core/dist/{persisted-inspect-event-CVZWZldL.d.cts → persisted-inspect-event-DiJ0I_vi.d.cts}

@@ -1,4 +1,4 @@
-import { I as InspectKind, A as AttributionConfidence } from './inspect-event-DRthdZlf.cjs';
+import { I as InspectKind, A as AttributionConfidence } from './inspect-event-CDqjcrG_.cjs';
 
 type PersistedSchemaVersion = "0.2" | "1.0";
 type PersistedEventSourceType = "manual" | "json-log" | "log4js" | "adapter" | "ai-sdk" | "otel";

package/packages/core/dist/persisted.d.cts

@@ -1,8 +1,8 @@
-import { P as PersistedInspectEvent } from './persisted-inspect-event-CVZWZldL.cjs';
-export { a as PersistedEventSource, b as PersistedEventSourceType, c as PersistedEventStatus, d as PersistedInspectError, e as PersistedInspectEventV02, f as PersistedInspectEventV10, g as PersistedSchemaVersion, h as PersistedTokenUsage, i as PersistedTraceContext, j as isPersistedInspectEvent, k as isPersistedInspectEventV02, l as isPersistedInspectEventV10 } from './persisted-inspect-event-CVZWZldL.cjs';
-import { i as TraceEvent } from './types-VzKihKQo.cjs';
-import { c as InspectEvent, a as InspectRunTree } from './inspect-event-DRthdZlf.cjs';
-import './log-config-CFlIJHTf.cjs';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-DiJ0I_vi.cjs';
+export { a as PersistedEventSource, b as PersistedEventSourceType, c as PersistedEventStatus, d as PersistedInspectError, e as PersistedInspectEventV02, f as PersistedInspectEventV10, g as PersistedSchemaVersion, h as PersistedTokenUsage, i as PersistedTraceContext, j as isPersistedInspectEvent, k as isPersistedInspectEventV02, l as isPersistedInspectEventV10 } from './persisted-inspect-event-DiJ0I_vi.cjs';
+import { h as TraceEvent } from './types-wXuxMUop.cjs';
+import { b as InspectEvent, a as InspectRunTree } from './inspect-event-CDqjcrG_.cjs';
+import './log-config-DcjV8ZjF.cjs';
 
 interface TraceEventToPersistedOptions {
     /**

package/packages/core/dist/persisted.d.ts

@@ -1,8 +1,8 @@
-import { P as PersistedInspectEvent } from './persisted-inspect-event-BVucFVrP.js';
-export { a as PersistedEventSource, b as PersistedEventSourceType, c as PersistedEventStatus, d as PersistedInspectError, e as PersistedInspectEventV02, f as PersistedInspectEventV10, g as PersistedSchemaVersion, h as PersistedTokenUsage, i as PersistedTraceContext, j as isPersistedInspectEvent, k as isPersistedInspectEventV02, l as isPersistedInspectEventV10 } from './persisted-inspect-event-BVucFVrP.js';
-import { i as TraceEvent } from './types-Bx3mEZ04.js';
-import { c as InspectEvent, a as InspectRunTree } from './inspect-event-DRthdZlf.js';
-import './log-config-OZRfpHED.js';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-CbaRYpbw.js';
+export { a as PersistedEventSource, b as PersistedEventSourceType, c as PersistedEventStatus, d as PersistedInspectError, e as PersistedInspectEventV02, f as PersistedInspectEventV10, g as PersistedSchemaVersion, h as PersistedTokenUsage, i as PersistedTraceContext, j as isPersistedInspectEvent, k as isPersistedInspectEventV02, l as isPersistedInspectEventV10 } from './persisted-inspect-event-CbaRYpbw.js';
+import { h as TraceEvent } from './types-xv9bSgOK.js';
+import { b as InspectEvent, a as InspectRunTree } from './inspect-event-CDqjcrG_.js';
+import './log-config-N_c5AE09.js';
 
 interface TraceEventToPersistedOptions {
     /**

package/packages/core/dist/readers.d.cts

@@ -1,7 +1,7 @@
-export { D as DEFAULT_TRACE_READERS, T as TraceFormatCandidate, a as TraceFormatDetectionResult, b as TraceFormatDetectionStatus, c as TraceInput, d as TraceReadError, e as TraceReadErrorCode, f as TraceReadOptions, g as TraceReadResult, h as TraceReadWarning, i as TraceReadWarningSeverity, j as TraceReader, k as TraceReaderDetectOptions, l as TraceReaderReadOptions, m as agentInspectJsonlReader, n as assertTraceInput, o as detectTraceFormat, p as openInferenceJsonReader, q as openTrace, r as openTraceDirectory, s as openTraceFile, t as openTraceText, u as otlpJsonReader, v as readTrace } from './index-DLLz9sce.cjs';
+export { D as DEFAULT_TRACE_READERS, T as TraceFormatCandidate, a as TraceFormatDetectionResult, b as TraceFormatDetectionStatus, c as TraceInput, d as TraceReadError, e as TraceReadErrorCode, f as TraceReadOptions, g as TraceReadResult, h as TraceReadWarning, i as TraceReadWarningSeverity, j as TraceReader, k as TraceReaderDetectOptions, l as TraceReaderReadOptions, m as agentInspectJsonlReader, n as assertTraceInput, o as detectTraceFormat, p as openInferenceJsonReader, q as openTrace, r as openTraceDirectory, s as openTraceFile, t as openTraceText, u as otlpJsonReader, v as readTrace } from './index-C6bCIbFO.cjs';
 export { P as PROGRAMMATIC_DIAGNOSTIC_SPECS, a as ProgrammaticDiagnosticCode, b as ProgrammaticDiagnosticSpec, f as formatProgrammaticDiagnostic } from './programmatic-gZTWLObB.cjs';
-import './inspect-event-DRthdZlf.cjs';
-import './persisted-inspect-event-CVZWZldL.cjs';
+import './inspect-event-CDqjcrG_.cjs';
+import './persisted-inspect-event-DiJ0I_vi.cjs';
 
 /**
  * Version-pinned reader/exporter mapping ledger (6.22).