agent-inspect 6.28.0 → 6.29.1

package/packages/core/dist/advanced.d.cts

@@ -1,17 +1,17 @@
-export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-DGMqxFpz.cjs';
+export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-BhaVHtOT.cjs';
 import { R as RedactionRule } from './log-config-DcjV8ZjF.cjs';
-import { R as RedactionProfile, h as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, j as TraceMetadataStatus, f as StepType, g as TraceCorrelationMetadata } from './types-wXuxMUop.cjs';
-export { A as ActiveStepContext, i as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, T as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-wXuxMUop.cjs';
+import { R as RedactionProfile, h as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, j as TraceMetadataStatus, f as StepType, g as TraceCorrelationMetadata } from './types-BSzhK7Z1.cjs';
+export { A as ActiveStepContext, i as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, T as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-BSzhK7Z1.cjs';
 import { a as InspectRunTree } from './inspect-event-CDqjcrG_.cjs';
 export { A as AttributionConfidence, E as EventSource, b as InspectEvent, I as InspectKind, c as InspectNode } from './inspect-event-CDqjcrG_.cjs';
-import { P as PersistedInspectEvent } from './persisted-inspect-event-DiJ0I_vi.cjs';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-DPaCiars.cjs';
 import { Stats } from 'node:fs';
-import { aR as SessionWorkflowMetadata, aS as SessionRunRecord, aT as EnrichSessionSummaryOptions, aU as SessionStatus, aV as SessionSummary, aW as SessionIndex, aX as BuildActivitySummaryOptions, aY as ActivitySummary, aZ as SessionWarning, a_ as BuildSessionIndexOptions, N as TraceCheckResult, X as TraceCheckStatus, a2 as TraceContractInput, Z as TraceContract } from './index-DVetZwGG.cjs';
-export { a$ as ActivityEntry, b0 as CriticalPathStep, b1 as HandoffEdge, b2 as RetryLink, b3 as SESSION_WORKFLOW_KEYS, b4 as SessionCheckSummary, b5 as SessionConfidence, b6 as SessionEdgeSource, b7 as SessionGroup, b8 as SessionLastError, b9 as SessionWorkflowKey } from './index-DVetZwGG.cjs';
+import { aR as SessionWorkflowMetadata, aS as SessionRunRecord, aT as EnrichSessionSummaryOptions, aU as SessionStatus, aV as SessionSummary, aW as SessionIndex, aX as BuildActivitySummaryOptions, aY as ActivitySummary, aZ as SessionWarning, a_ as BuildSessionIndexOptions, N as TraceCheckResult, X as TraceCheckStatus, a2 as TraceContractInput, Z as TraceContract } from './index-C61p7wBR.cjs';
+export { a$ as ActivityEntry, b0 as CriticalPathStep, b1 as HandoffEdge, b2 as RetryLink, b3 as SESSION_WORKFLOW_KEYS, b4 as SessionCheckSummary, b5 as SessionConfidence, b6 as SessionEdgeSource, b7 as SessionGroup, b8 as SessionLastError, b9 as SessionWorkflowKey } from './index-C61p7wBR.cjs';
 import { b as ObservedOutcome } from './types-BA_IOdg4.cjs';
 export { a as ObservedOutcomeStatus } from './types-BA_IOdg4.cjs';
 import './writers.cjs';
-import './index-C6bCIbFO.cjs';
+import './index-BT3KcO6-.cjs';
 
 interface ResolvedRedactionProfile {
     profile: RedactionProfile;
@@ -337,6 +337,8 @@ interface RunWhatSummary {
         output: number;
         total?: number;
         cached?: number;
+        cacheWrite?: number;
+        reasoning?: number;
     };
     correlation?: TraceCorrelationMetadata;
     failedStepNames: string[];
@@ -1055,6 +1057,16 @@ interface EvidenceHtmlShellInput {
      * Callers must pass only trusted, escaped fragments (use evidence view builders).
      */
     viewBodies?: Partial<Record<EvidenceViewId, string>>;
+    /**
+     * Safe contract-binding metadata only (status / digest / note). Never embed
+     * expected-value payloads in HTML (6.29.3).
+     */
+    contractBinding?: {
+        status: string;
+        sha256?: string;
+        note?: string;
+        ruleCount?: number;
+    };
 }
 /**
  * Encode JSON for embedding in HTML without breaking out of a script/pre context.
@@ -1251,6 +1263,7 @@ interface EvidenceCiPackageFiles {
 }
 /**
  * Build the standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Order (6.29.3): resolve → safety → bind → HTML → manifest last.
  * Optionally packages `contract.resolved.json` and binds digests (6.28+).
  */
 declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;

package/packages/core/dist/advanced.d.ts

@@ -1,17 +1,17 @@
-export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-DgcvkJ9t.js';
+export { C as CreateInspectorOptions, D as DEFAULT_MAX_EVENT_BYTES, f as DEFAULT_MAX_METADATA_VALUE_LENGTH, h as DEFAULT_MAX_PREVIEW_LENGTH, I as Inspector, a as InspectorCaptureOptions, b as InspectorObserveOptions, c as InspectorRunOptions, i as InspectorRuntime, j as InspectorRuntimeContext, k as InspectorRuntimeDiagnostics, l as InspectorRuntimeOptions, d as InspectorStepOptions, T as TraceSafetyOptions, e as createInspector, n as createInspectorRuntime, o as getCurrentContext, g as getCurrentCorrelationMetadata, p as getCurrentDepth, q as getCurrentRunId, r as getCurrentRunName, s as getCurrentStepId, t as getParentStepId, u as getTraceDirFromContext, v as getTraceSafetyFromContext, w as hasActiveContext, x as isAgentInspectEnabled, y as isSilentContext, m as maybeInspectRun, z as prepareMetadataForDisk, A as prepareTraceEventForDisk, B as resolveTraceSafetyOptions, E as runWithContext, F as runWithStepContext } from './context-B8zzsmjX.js';
 import { R as RedactionRule } from './log-config-N_c5AE09.js';
-import { R as RedactionProfile, h as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, j as TraceMetadataStatus, f as StepType, g as TraceCorrelationMetadata } from './types-xv9bSgOK.js';
-export { A as ActiveStepContext, i as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, T as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-xv9bSgOK.js';
+import { R as RedactionProfile, h as TraceEvent, E as ErrorInfo, b as RunStatus, e as StepStatus, k as RunSummary, l as TraceMetadata, j as TraceMetadataStatus, f as StepType, g as TraceCorrelationMetadata } from './types-C5Y8Idle.js';
+export { A as ActiveStepContext, i as ExecutionContext, I as InspectRunOptions, O as ObserveOptions, a as Run, m as RunCompletedEvent, n as RunStartedEvent, c as Step, o as StepCompletedEvent, d as StepMetadata, S as StepOptions, p as StepStartedEvent, T as TokenMetadata, q as TraceEventBase, r as TraceSchemaVersion, s as isStepStatus, t as isStepType, u as isTraceEvent } from './types-C5Y8Idle.js';
 import { a as InspectRunTree } from './inspect-event-CDqjcrG_.js';
 export { A as AttributionConfidence, E as EventSource, b as InspectEvent, I as InspectKind, c as InspectNode } from './inspect-event-CDqjcrG_.js';
-import { P as PersistedInspectEvent } from './persisted-inspect-event-CbaRYpbw.js';
+import { P as PersistedInspectEvent } from './persisted-inspect-event-BMwvGIB8.js';
 import { Stats } from 'node:fs';
-import { aR as SessionWorkflowMetadata, aS as SessionRunRecord, aT as EnrichSessionSummaryOptions, aU as SessionStatus, aV as SessionSummary, aW as SessionIndex, aX as BuildActivitySummaryOptions, aY as ActivitySummary, aZ as SessionWarning, a_ as BuildSessionIndexOptions, N as TraceCheckResult, X as TraceCheckStatus, a2 as TraceContractInput, Z as TraceContract } from './index-BOA1AeEU.js';
-export { a$ as ActivityEntry, b0 as CriticalPathStep, b1 as HandoffEdge, b2 as RetryLink, b3 as SESSION_WORKFLOW_KEYS, b4 as SessionCheckSummary, b5 as SessionConfidence, b6 as SessionEdgeSource, b7 as SessionGroup, b8 as SessionLastError, b9 as SessionWorkflowKey } from './index-BOA1AeEU.js';
+import { aR as SessionWorkflowMetadata, aS as SessionRunRecord, aT as EnrichSessionSummaryOptions, aU as SessionStatus, aV as SessionSummary, aW as SessionIndex, aX as BuildActivitySummaryOptions, aY as ActivitySummary, aZ as SessionWarning, a_ as BuildSessionIndexOptions, N as TraceCheckResult, X as TraceCheckStatus, a2 as TraceContractInput, Z as TraceContract } from './index-DTO2iGeq.js';
+export { a$ as ActivityEntry, b0 as CriticalPathStep, b1 as HandoffEdge, b2 as RetryLink, b3 as SESSION_WORKFLOW_KEYS, b4 as SessionCheckSummary, b5 as SessionConfidence, b6 as SessionEdgeSource, b7 as SessionGroup, b8 as SessionLastError, b9 as SessionWorkflowKey } from './index-DTO2iGeq.js';
 import { b as ObservedOutcome } from './types-BA_IOdg4.js';
 export { a as ObservedOutcomeStatus } from './types-BA_IOdg4.js';
 import './writers.js';
-import './index-BzyNPfLm.js';
+import './index-reskZCVW.js';
 
 interface ResolvedRedactionProfile {
     profile: RedactionProfile;
@@ -337,6 +337,8 @@ interface RunWhatSummary {
         output: number;
         total?: number;
         cached?: number;
+        cacheWrite?: number;
+        reasoning?: number;
     };
     correlation?: TraceCorrelationMetadata;
     failedStepNames: string[];
@@ -1055,6 +1057,16 @@ interface EvidenceHtmlShellInput {
      * Callers must pass only trusted, escaped fragments (use evidence view builders).
      */
     viewBodies?: Partial<Record<EvidenceViewId, string>>;
+    /**
+     * Safe contract-binding metadata only (status / digest / note). Never embed
+     * expected-value payloads in HTML (6.29.3).
+     */
+    contractBinding?: {
+        status: string;
+        sha256?: string;
+        note?: string;
+        ruleCount?: number;
+    };
 }
 /**
  * Encode JSON for embedding in HTML without breaking out of a script/pre context.
@@ -1251,6 +1263,7 @@ interface EvidenceCiPackageFiles {
 }
 /**
  * Build the standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Order (6.29.3): resolve → safety → bind → HTML → manifest last.
  * Optionally packages `contract.resolved.json` and binds digests (6.28+).
  */
 declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;

package/packages/core/dist/advanced.mjs

@@ -1,24 +1,24 @@
-import { extractSessionWorkflowMetadata, sessionKeyForRun, defineTraceContract, runTraceChecks, createRunStatusRule, createToolUsageRule, createRunDurationRule, createLlmUsageRule, createObservedOutcomeRule } from './chunk-ME4WXYY3.mjs';
-export { extractSessionWorkflowMetadata, sessionKeyForRun } from './chunk-ME4WXYY3.mjs';
-export { MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, TERMINAL_INDENT, TraceDirectory, createInspector, createInspectorRuntime, formatTerminalName, getCurrentContext, getCurrentCorrelationMetadata, getCurrentDepth, getCurrentRunId, getCurrentRunName, getCurrentStepId, getIndent, getParentStepId, getTraceDirFromContext, getTraceSafetyFromContext, hasActiveContext, isAgentInspectEnabled, isSilentContext, maybeInspectRun, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, renderErrorLine, renderRunSummary, renderStepLine, resolveTraceDir, runWithContext, runWithStepContext } from './chunk-WGDSM37E.mjs';
-import { buildRunTimeline, filterTraces, extractMetadata, buildRunSummary } from './chunk-JBNRJLIV.mjs';
-export { buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildTraceStats, extractMetadata, filterTraces, formatStepLabel, renderRunWhat, renderTimeline, renderTraceStats } from './chunk-JBNRJLIV.mjs';
-import { extractOutcomesFromTraceEvents, parseObservationFilter, summarizeObservedOutcomes, extractOutcomesFromPersistedEvents, renderObservedOutcomesHtml } from './chunk-R4SSYU6D.mjs';
-export { extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents } from './chunk-R4SSYU6D.mjs';
+import { extractSessionWorkflowMetadata, sessionKeyForRun, defineTraceContract, runTraceChecks, createRunStatusRule, createToolUsageRule, createRunDurationRule, createLlmUsageRule, createObservedOutcomeRule } from './chunk-GPGBKN7W.mjs';
+export { extractSessionWorkflowMetadata, sessionKeyForRun } from './chunk-GPGBKN7W.mjs';
+export { MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, TERMINAL_INDENT, TraceDirectory, createInspector, createInspectorRuntime, formatTerminalName, getCurrentContext, getCurrentCorrelationMetadata, getCurrentDepth, getCurrentRunId, getCurrentRunName, getCurrentStepId, getIndent, getParentStepId, getTraceDirFromContext, getTraceSafetyFromContext, hasActiveContext, isAgentInspectEnabled, isSilentContext, maybeInspectRun, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, renderErrorLine, renderRunSummary, renderStepLine, resolveTraceDir, runWithContext, runWithStepContext } from './chunk-AQMJFKI6.mjs';
+import { buildRunTimeline, filterTraces, extractMetadata, buildRunSummary } from './chunk-5RF7FYGL.mjs';
+export { buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildTraceStats, extractMetadata, filterTraces, formatStepLabel, renderRunWhat, renderTimeline, renderTraceStats } from './chunk-5RF7FYGL.mjs';
+import { extractOutcomesFromTraceEvents, parseObservationFilter, summarizeObservedOutcomes, extractOutcomesFromPersistedEvents, renderObservedOutcomesHtml } from './chunk-COZPMOUF.mjs';
+export { extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents } from './chunk-COZPMOUF.mjs';
 import { diffTraceEvents, renderRunDiff } from './chunk-F7STQ5JF.mjs';
 import './chunk-BT7CATSD.mjs';
 import { escapeHtml, flattenTree } from './chunk-CAWPF22J.mjs';
-import { resolveRedactionProfile, readTraceEventsFromFile } from './chunk-U25RHRSU.mjs';
-export { DEFAULT_MAX_EVENT_BYTES, DEFAULT_MAX_METADATA_VALUE_LENGTH, DEFAULT_MAX_PREVIEW_LENGTH, getRunIdFromTraceFileName, initializeTraceFile, listTraceFiles, prepareMetadataForDisk, prepareTraceEventForDisk, readTraceEvents, readTraceFile, resolveRedactionProfile, resolveTraceSafetyOptions, serializeEvent, validateEvent, writeTraceEvent } from './chunk-U25RHRSU.mjs';
+import { resolveRedactionProfile, readTraceEventsFromFile, stringContainsHighConfidenceCredential } from './chunk-65LFRW2T.mjs';
+export { DEFAULT_MAX_EVENT_BYTES, DEFAULT_MAX_METADATA_VALUE_LENGTH, DEFAULT_MAX_PREVIEW_LENGTH, getRunIdFromTraceFileName, initializeTraceFile, listTraceFiles, prepareMetadataForDisk, prepareTraceEventForDisk, readTraceEvents, readTraceFile, resolveRedactionProfile, resolveTraceSafetyOptions, serializeEvent, validateEvent, writeTraceEvent } from './chunk-65LFRW2T.mjs';
 import { Redactor } from './chunk-VU6O5QAH.mjs';
-import { openTrace } from './chunk-NDRMIL7Z.mjs';
+import { openTrace } from './chunk-FKUTGUFG.mjs';
 import './chunk-FWK3Q3OJ.mjs';
-import './chunk-NXQF73EC.mjs';
+import './chunk-5B4DNGFB.mjs';
 import './chunk-S4YWKV4G.mjs';
 import './chunk-AK5EN4U2.mjs';
-import { parseDuration, isTraceEvent, getTraceFilePath } from './chunk-WRE4CNPF.mjs';
-export { DEFAULT_TRACE_DIR_NAME, FALLBACK_TRACE_DIR, MAX_NAME_LENGTH, RUNS_DIR_NAME, createRunId, createStepId, ensureTraceDir, formatDuration, formatError, formatTimestamp, getDefaultTraceDir, getTraceFilePath, isStepStatus, isStepType, isTraceEvent, parseDuration, parseTraceJsonl, truncateName, unknownTraceFormatMessage, warn } from './chunk-WRE4CNPF.mjs';
-import { persistedInspectEventsToTraceEvents } from './chunk-P366CCL2.mjs';
+import { parseDuration, isTraceEvent, getTraceFilePath } from './chunk-SJ3C5RIS.mjs';
+export { DEFAULT_TRACE_DIR_NAME, FALLBACK_TRACE_DIR, MAX_NAME_LENGTH, RUNS_DIR_NAME, createRunId, createStepId, ensureTraceDir, formatDuration, formatError, formatTimestamp, getDefaultTraceDir, getTraceFilePath, isStepStatus, isStepType, isTraceEvent, parseDuration, parseTraceJsonl, truncateName, unknownTraceFormatMessage, warn } from './chunk-SJ3C5RIS.mjs';
+import { persistedInspectEventsToTraceEvents } from './chunk-QJI52TH3.mjs';
 import './chunk-7TGZLWEE.mjs';
 import { createReadStream } from 'fs';
 import { createInterface } from 'readline';
@@ -1990,6 +1990,39 @@ var EVIDENCE_CONTRACT_CANONICALIZATION_VERSION = "1";
 var EVIDENCE_CONTRACT_PARTIAL_NOTE = "Custom or programmatic rules are not serializable; Evidence records rule IDs only and does not claim complete reviewer replay.";
 var EVIDENCE_CONTRACT_UNAVAILABLE_NOTE = "No resolved TraceContract or check preset was packaged with this Evidence artifact.";
 var EVIDENCE_CONTRACT_ASSURANCE_NOTE = "Contract binding verifies packaged digest integrity only; it does not prove producer identity, trusted time, source completeness, semantic truth, or external acceptance.";
+var EVIDENCE_CONTRACT_UNSAFE_NOTE = "Resolved TraceContract contains high-confidence credential-like expected values; Evidence refuses complete packaging rather than silently redacting evaluated expectations.";
+function contractContainsUnsafeExpectedValues(value) {
+  return scanForExpectedFields(value, 0);
+}
+function scanForExpectedFields(value, depth) {
+  if (depth > 32) return false;
+  if (Array.isArray(value)) {
+    return value.some((item) => scanForExpectedFields(item, depth + 1));
+  }
+  if (value === null || typeof value !== "object") return false;
+  const record = value;
+  for (const [key, child] of Object.entries(record)) {
+    if (key === "expected" || key === "oneOf") {
+      if (valueTreeContainsCredential(child, depth + 1)) return true;
+      continue;
+    }
+    if (scanForExpectedFields(child, depth + 1)) return true;
+  }
+  return false;
+}
+function valueTreeContainsCredential(value, depth) {
+  if (depth > 32) return false;
+  if (typeof value === "string") {
+    return stringContainsHighConfidenceCredential(value);
+  }
+  if (Array.isArray(value)) {
+    return value.some((item) => valueTreeContainsCredential(item, depth + 1));
+  }
+  if (value === null || typeof value !== "object") return false;
+  return Object.values(value).some(
+    (child) => valueTreeContainsCredential(child, depth + 1)
+  );
+}
 function serializeCanonicalJson(value) {
   return `${JSON.stringify(stableValue(value), null, 2)}
 `;
@@ -2123,6 +2156,32 @@ function buildEvidenceContractPackage(input) {
   if (unsupported.length > 0) {
     ruleIds = sortedUniqueStrings([...ruleIds, ...unsupported]);
   }
+  if (contractContainsUnsafeExpectedValues(resolved)) {
+    return {
+      binding: {
+        status: "unavailable",
+        source: input.source,
+        ...input.contractId !== void 0 ? { contractId: input.contractId } : {},
+        ...input.contractVersion !== void 0 ? { contractVersion: input.contractVersion } : {},
+        canonicalizationVersion: EVIDENCE_CONTRACT_CANONICALIZATION_VERSION,
+        engineVersion: input.engineVersion,
+        ruleIds,
+        ...unsupported.length > 0 ? { unsupportedRuleIds: unsupported } : {},
+        note: input.note ?? EVIDENCE_CONTRACT_UNSAFE_NOTE
+      },
+      checkBinding: {
+        canonicalizationVersion: EVIDENCE_CONTRACT_CANONICALIZATION_VERSION,
+        engineVersion: input.engineVersion,
+        evaluatedRuleIds: ruleIds,
+        bindingStatus: "unavailable",
+        ...unsupported.length > 0 ? { unsupportedRuleIds: unsupported } : {},
+        origin: {
+          source: input.source,
+          ...input.preset?.name ? { preset: input.preset.name } : {}
+        }
+      }
+    };
+  }
   const document = {
     canonicalizationVersion: EVIDENCE_CONTRACT_CANONICALIZATION_VERSION,
     kind,
@@ -2504,7 +2563,15 @@ function buildEmbeddedPayload(input) {
       redactionProfile: input.redactionProfile,
       verificationPolicy: input.verificationPolicy
     },
-    checkSummary: input.checkSummary
+    checkSummary: input.checkSummary,
+    ...input.contractBinding !== void 0 ? {
+      contract: {
+        status: input.contractBinding.status,
+        ...input.contractBinding.sha256 !== void 0 ? { sha256: input.contractBinding.sha256 } : {},
+        ...input.contractBinding.ruleCount !== void 0 ? { ruleCount: input.contractBinding.ruleCount } : {},
+        ...input.contractBinding.note !== void 0 ? { note: input.contractBinding.note } : {}
+      }
+    } : {}
   };
 }
 function buildEvidenceHtmlShell(input) {
@@ -2602,6 +2669,7 @@ ${nav}
     <p>Artifact status: <span class="badge ${statusClass(input.assessmentStatus)}">${escapeHtml(input.assessmentStatus)}</span>
     ${input.sourceStatus !== void 0 ? ` \xB7 Source status: <span class="badge ${statusClass(input.sourceStatus)}">${escapeHtml(input.sourceStatus)}</span>` : ""}</p>
     <p>Profile: <code>${escapeHtml(input.redactionProfile)}</code> \xB7 Verification: <code>${escapeHtml(input.verificationPolicy)}</code></p>
+    ${input.contractBinding !== void 0 ? `<p>Contract binding: <code>${escapeHtml(input.contractBinding.status)}</code>${input.contractBinding.ruleCount !== void 0 ? ` \xB7 Rules: <code>${escapeHtml(String(input.contractBinding.ruleCount))}</code>` : ""}${input.contractBinding.sha256 !== void 0 ? ` \xB7 Digest: <code>${escapeHtml(input.contractBinding.sha256.slice(0, 16))}\u2026</code>` : ""}</p>${input.contractBinding.note !== void 0 && input.contractBinding.note.trim() !== "" ? `<p class="muted">${escapeHtml(input.contractBinding.note)}</p>` : ""}` : ""}
     <p>Generator: <code>${escapeHtml(input.generatorName)}@${escapeHtml(input.generatorVersion)}</code>
     ${input.createdAt ? ` \xB7 Created: <code>${escapeHtml(input.createdAt)}</code>` : ""}</p>
     <h3>Runs</h3>
@@ -3163,29 +3231,6 @@ function buildEvidenceCiPackage(input) {
     schemaVersions.add(version);
   }
   const createdAt = input.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
-  const evidenceHtml = buildEvidenceHtmlShell({
-    title: "AgentInspect evidence",
-    runIds: input.runIds,
-    assessmentStatus: input.assessmentStatus,
-    sourceStatus: input.sourceStatus,
-    redactionProfile: input.redactionProfile,
-    verificationPolicy: input.redactionProfile,
-    generatorName: "agent-inspect",
-    generatorVersion: input.generatorVersion,
-    createdAt,
-    summaryText: input.summaryText,
-    checkSummary: {
-      aggregateStatus: input.assessmentStatus,
-      runs: input.runIds.map((runId) => ({
-        runId,
-        status: input.assessmentStatus,
-        sourceStatus: input.sourceStatus,
-        errors: input.assessmentStatus === "UNSAFE" || input.assessmentStatus === "UNKNOWN" ? 1 : 0,
-        warnings: input.assessmentStatus === "SAFE WITH WARNINGS" ? 1 : 0,
-        findings: 0
-      }))
-    }
-  });
   let checkResultsJson = input.checkResultsJson;
   let contractBinding;
   let contractFileContent;
@@ -3208,6 +3253,37 @@ function buildEvidenceCiPackage(input) {
       bindCheckResultsToContract(parsed, packaged2.checkBinding)
     );
   }
+  const evidenceHtml = buildEvidenceHtmlShell({
+    title: "AgentInspect evidence",
+    runIds: input.runIds,
+    assessmentStatus: input.assessmentStatus,
+    sourceStatus: input.sourceStatus,
+    redactionProfile: input.redactionProfile,
+    verificationPolicy: input.redactionProfile,
+    generatorName: "agent-inspect",
+    generatorVersion: input.generatorVersion,
+    createdAt,
+    summaryText: input.summaryText,
+    checkSummary: {
+      aggregateStatus: input.assessmentStatus,
+      runs: input.runIds.map((runId) => ({
+        runId,
+        status: input.assessmentStatus,
+        sourceStatus: input.sourceStatus,
+        errors: input.assessmentStatus === "UNSAFE" || input.assessmentStatus === "UNKNOWN" ? 1 : 0,
+        warnings: input.assessmentStatus === "SAFE WITH WARNINGS" ? 1 : 0,
+        findings: 0
+      }))
+    },
+    ...contractBinding !== void 0 ? {
+      contractBinding: {
+        status: contractBinding.status,
+        ...contractBinding.sha256 !== void 0 ? { sha256: contractBinding.sha256 } : {},
+        ...contractBinding.note !== void 0 ? { note: contractBinding.note } : {},
+        ruleCount: contractBinding.ruleIds.length
+      }
+    } : {}
+  });
   const packaged = [
     { path: EVIDENCE_HTML_FILENAME, content: evidenceHtml },
     { path: "check-results.json", content: checkResultsJson },