agent-inspect 6.29.0 → 6.29.1

package/packages/core/dist/advanced.d.cts

@@ -1057,6 +1057,16 @@ interface EvidenceHtmlShellInput {
      * Callers must pass only trusted, escaped fragments (use evidence view builders).
      */
     viewBodies?: Partial<Record<EvidenceViewId, string>>;
+    /**
+     * Safe contract-binding metadata only (status / digest / note). Never embed
+     * expected-value payloads in HTML (6.29.3).
+     */
+    contractBinding?: {
+        status: string;
+        sha256?: string;
+        note?: string;
+        ruleCount?: number;
+    };
 }
 /**
  * Encode JSON for embedding in HTML without breaking out of a script/pre context.
@@ -1253,6 +1263,7 @@ interface EvidenceCiPackageFiles {
 }
 /**
  * Build the standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Order (6.29.3): resolve → safety → bind → HTML → manifest last.
  * Optionally packages `contract.resolved.json` and binds digests (6.28+).
  */
 declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;

package/packages/core/dist/advanced.d.ts

@@ -1057,6 +1057,16 @@ interface EvidenceHtmlShellInput {
      * Callers must pass only trusted, escaped fragments (use evidence view builders).
      */
     viewBodies?: Partial<Record<EvidenceViewId, string>>;
+    /**
+     * Safe contract-binding metadata only (status / digest / note). Never embed
+     * expected-value payloads in HTML (6.29.3).
+     */
+    contractBinding?: {
+        status: string;
+        sha256?: string;
+        note?: string;
+        ruleCount?: number;
+    };
 }
 /**
  * Encode JSON for embedding in HTML without breaking out of a script/pre context.
@@ -1253,6 +1263,7 @@ interface EvidenceCiPackageFiles {
 }
 /**
  * Build the standard CI evidence files (in memory) using Evidence v2 helpers.
+ * Order (6.29.3): resolve → safety → bind → HTML → manifest last.
  * Optionally packages `contract.resolved.json` and binds digests (6.28+).
  */
 declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;

package/packages/core/dist/advanced.mjs

@@ -1,15 +1,15 @@
-import { extractSessionWorkflowMetadata, sessionKeyForRun, defineTraceContract, runTraceChecks, createRunStatusRule, createToolUsageRule, createRunDurationRule, createLlmUsageRule, createObservedOutcomeRule } from './chunk-LGTPSHH2.mjs';
-export { extractSessionWorkflowMetadata, sessionKeyForRun } from './chunk-LGTPSHH2.mjs';
-export { MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, TERMINAL_INDENT, TraceDirectory, createInspector, createInspectorRuntime, formatTerminalName, getCurrentContext, getCurrentCorrelationMetadata, getCurrentDepth, getCurrentRunId, getCurrentRunName, getCurrentStepId, getIndent, getParentStepId, getTraceDirFromContext, getTraceSafetyFromContext, hasActiveContext, isAgentInspectEnabled, isSilentContext, maybeInspectRun, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, renderErrorLine, renderRunSummary, renderStepLine, resolveTraceDir, runWithContext, runWithStepContext } from './chunk-TIGBAVED.mjs';
-import { buildRunTimeline, filterTraces, extractMetadata, buildRunSummary } from './chunk-TNOPL75V.mjs';
-export { buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildTraceStats, extractMetadata, filterTraces, formatStepLabel, renderRunWhat, renderTimeline, renderTraceStats } from './chunk-TNOPL75V.mjs';
-import { extractOutcomesFromTraceEvents, parseObservationFilter, summarizeObservedOutcomes, extractOutcomesFromPersistedEvents, renderObservedOutcomesHtml } from './chunk-MVRZ7JBH.mjs';
-export { extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents } from './chunk-MVRZ7JBH.mjs';
+import { extractSessionWorkflowMetadata, sessionKeyForRun, defineTraceContract, runTraceChecks, createRunStatusRule, createToolUsageRule, createRunDurationRule, createLlmUsageRule, createObservedOutcomeRule } from './chunk-GPGBKN7W.mjs';
+export { extractSessionWorkflowMetadata, sessionKeyForRun } from './chunk-GPGBKN7W.mjs';
+export { MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, TERMINAL_INDENT, TraceDirectory, createInspector, createInspectorRuntime, formatTerminalName, getCurrentContext, getCurrentCorrelationMetadata, getCurrentDepth, getCurrentRunId, getCurrentRunName, getCurrentStepId, getIndent, getParentStepId, getTraceDirFromContext, getTraceSafetyFromContext, hasActiveContext, isAgentInspectEnabled, isSilentContext, maybeInspectRun, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, renderErrorLine, renderRunSummary, renderStepLine, resolveTraceDir, runWithContext, runWithStepContext } from './chunk-AQMJFKI6.mjs';
+import { buildRunTimeline, filterTraces, extractMetadata, buildRunSummary } from './chunk-5RF7FYGL.mjs';
+export { buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildTraceStats, extractMetadata, filterTraces, formatStepLabel, renderRunWhat, renderTimeline, renderTraceStats } from './chunk-5RF7FYGL.mjs';
+import { extractOutcomesFromTraceEvents, parseObservationFilter, summarizeObservedOutcomes, extractOutcomesFromPersistedEvents, renderObservedOutcomesHtml } from './chunk-COZPMOUF.mjs';
+export { extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents } from './chunk-COZPMOUF.mjs';
 import { diffTraceEvents, renderRunDiff } from './chunk-F7STQ5JF.mjs';
 import './chunk-BT7CATSD.mjs';
 import { escapeHtml, flattenTree } from './chunk-CAWPF22J.mjs';
-import { resolveRedactionProfile, readTraceEventsFromFile } from './chunk-3B24355S.mjs';
-export { DEFAULT_MAX_EVENT_BYTES, DEFAULT_MAX_METADATA_VALUE_LENGTH, DEFAULT_MAX_PREVIEW_LENGTH, getRunIdFromTraceFileName, initializeTraceFile, listTraceFiles, prepareMetadataForDisk, prepareTraceEventForDisk, readTraceEvents, readTraceFile, resolveRedactionProfile, resolveTraceSafetyOptions, serializeEvent, validateEvent, writeTraceEvent } from './chunk-3B24355S.mjs';
+import { resolveRedactionProfile, readTraceEventsFromFile, stringContainsHighConfidenceCredential } from './chunk-65LFRW2T.mjs';
+export { DEFAULT_MAX_EVENT_BYTES, DEFAULT_MAX_METADATA_VALUE_LENGTH, DEFAULT_MAX_PREVIEW_LENGTH, getRunIdFromTraceFileName, initializeTraceFile, listTraceFiles, prepareMetadataForDisk, prepareTraceEventForDisk, readTraceEvents, readTraceFile, resolveRedactionProfile, resolveTraceSafetyOptions, serializeEvent, validateEvent, writeTraceEvent } from './chunk-65LFRW2T.mjs';
 import { Redactor } from './chunk-VU6O5QAH.mjs';
 import { openTrace } from './chunk-FKUTGUFG.mjs';
 import './chunk-FWK3Q3OJ.mjs';
@@ -1990,6 +1990,39 @@ var EVIDENCE_CONTRACT_CANONICALIZATION_VERSION = "1";
 var EVIDENCE_CONTRACT_PARTIAL_NOTE = "Custom or programmatic rules are not serializable; Evidence records rule IDs only and does not claim complete reviewer replay.";
 var EVIDENCE_CONTRACT_UNAVAILABLE_NOTE = "No resolved TraceContract or check preset was packaged with this Evidence artifact.";
 var EVIDENCE_CONTRACT_ASSURANCE_NOTE = "Contract binding verifies packaged digest integrity only; it does not prove producer identity, trusted time, source completeness, semantic truth, or external acceptance.";
+var EVIDENCE_CONTRACT_UNSAFE_NOTE = "Resolved TraceContract contains high-confidence credential-like expected values; Evidence refuses complete packaging rather than silently redacting evaluated expectations.";
+function contractContainsUnsafeExpectedValues(value) {
+  return scanForExpectedFields(value, 0);
+}
+function scanForExpectedFields(value, depth) {
+  if (depth > 32) return false;
+  if (Array.isArray(value)) {
+    return value.some((item) => scanForExpectedFields(item, depth + 1));
+  }
+  if (value === null || typeof value !== "object") return false;
+  const record = value;
+  for (const [key, child] of Object.entries(record)) {
+    if (key === "expected" || key === "oneOf") {
+      if (valueTreeContainsCredential(child, depth + 1)) return true;
+      continue;
+    }
+    if (scanForExpectedFields(child, depth + 1)) return true;
+  }
+  return false;
+}
+function valueTreeContainsCredential(value, depth) {
+  if (depth > 32) return false;
+  if (typeof value === "string") {
+    return stringContainsHighConfidenceCredential(value);
+  }
+  if (Array.isArray(value)) {
+    return value.some((item) => valueTreeContainsCredential(item, depth + 1));
+  }
+  if (value === null || typeof value !== "object") return false;
+  return Object.values(value).some(
+    (child) => valueTreeContainsCredential(child, depth + 1)
+  );
+}
 function serializeCanonicalJson(value) {
   return `${JSON.stringify(stableValue(value), null, 2)}
 `;
@@ -2123,6 +2156,32 @@ function buildEvidenceContractPackage(input) {
   if (unsupported.length > 0) {
     ruleIds = sortedUniqueStrings([...ruleIds, ...unsupported]);
   }
+  if (contractContainsUnsafeExpectedValues(resolved)) {
+    return {
+      binding: {
+        status: "unavailable",
+        source: input.source,
+        ...input.contractId !== void 0 ? { contractId: input.contractId } : {},
+        ...input.contractVersion !== void 0 ? { contractVersion: input.contractVersion } : {},
+        canonicalizationVersion: EVIDENCE_CONTRACT_CANONICALIZATION_VERSION,
+        engineVersion: input.engineVersion,
+        ruleIds,
+        ...unsupported.length > 0 ? { unsupportedRuleIds: unsupported } : {},
+        note: input.note ?? EVIDENCE_CONTRACT_UNSAFE_NOTE
+      },
+      checkBinding: {
+        canonicalizationVersion: EVIDENCE_CONTRACT_CANONICALIZATION_VERSION,
+        engineVersion: input.engineVersion,
+        evaluatedRuleIds: ruleIds,
+        bindingStatus: "unavailable",
+        ...unsupported.length > 0 ? { unsupportedRuleIds: unsupported } : {},
+        origin: {
+          source: input.source,
+          ...input.preset?.name ? { preset: input.preset.name } : {}
+        }
+      }
+    };
+  }
   const document = {
     canonicalizationVersion: EVIDENCE_CONTRACT_CANONICALIZATION_VERSION,
     kind,
@@ -2504,7 +2563,15 @@ function buildEmbeddedPayload(input) {
       redactionProfile: input.redactionProfile,
       verificationPolicy: input.verificationPolicy
     },
-    checkSummary: input.checkSummary
+    checkSummary: input.checkSummary,
+    ...input.contractBinding !== void 0 ? {
+      contract: {
+        status: input.contractBinding.status,
+        ...input.contractBinding.sha256 !== void 0 ? { sha256: input.contractBinding.sha256 } : {},
+        ...input.contractBinding.ruleCount !== void 0 ? { ruleCount: input.contractBinding.ruleCount } : {},
+        ...input.contractBinding.note !== void 0 ? { note: input.contractBinding.note } : {}
+      }
+    } : {}
   };
 }
 function buildEvidenceHtmlShell(input) {
@@ -2602,6 +2669,7 @@ ${nav}
     <p>Artifact status: <span class="badge ${statusClass(input.assessmentStatus)}">${escapeHtml(input.assessmentStatus)}</span>
     ${input.sourceStatus !== void 0 ? ` \xB7 Source status: <span class="badge ${statusClass(input.sourceStatus)}">${escapeHtml(input.sourceStatus)}</span>` : ""}</p>
     <p>Profile: <code>${escapeHtml(input.redactionProfile)}</code> \xB7 Verification: <code>${escapeHtml(input.verificationPolicy)}</code></p>
+    ${input.contractBinding !== void 0 ? `<p>Contract binding: <code>${escapeHtml(input.contractBinding.status)}</code>${input.contractBinding.ruleCount !== void 0 ? ` \xB7 Rules: <code>${escapeHtml(String(input.contractBinding.ruleCount))}</code>` : ""}${input.contractBinding.sha256 !== void 0 ? ` \xB7 Digest: <code>${escapeHtml(input.contractBinding.sha256.slice(0, 16))}\u2026</code>` : ""}</p>${input.contractBinding.note !== void 0 && input.contractBinding.note.trim() !== "" ? `<p class="muted">${escapeHtml(input.contractBinding.note)}</p>` : ""}` : ""}
     <p>Generator: <code>${escapeHtml(input.generatorName)}@${escapeHtml(input.generatorVersion)}</code>
     ${input.createdAt ? ` \xB7 Created: <code>${escapeHtml(input.createdAt)}</code>` : ""}</p>
     <h3>Runs</h3>
@@ -3163,29 +3231,6 @@ function buildEvidenceCiPackage(input) {
     schemaVersions.add(version);
   }
   const createdAt = input.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
-  const evidenceHtml = buildEvidenceHtmlShell({
-    title: "AgentInspect evidence",
-    runIds: input.runIds,
-    assessmentStatus: input.assessmentStatus,
-    sourceStatus: input.sourceStatus,
-    redactionProfile: input.redactionProfile,
-    verificationPolicy: input.redactionProfile,
-    generatorName: "agent-inspect",
-    generatorVersion: input.generatorVersion,
-    createdAt,
-    summaryText: input.summaryText,
-    checkSummary: {
-      aggregateStatus: input.assessmentStatus,
-      runs: input.runIds.map((runId) => ({
-        runId,
-        status: input.assessmentStatus,
-        sourceStatus: input.sourceStatus,
-        errors: input.assessmentStatus === "UNSAFE" || input.assessmentStatus === "UNKNOWN" ? 1 : 0,
-        warnings: input.assessmentStatus === "SAFE WITH WARNINGS" ? 1 : 0,
-        findings: 0
-      }))
-    }
-  });
   let checkResultsJson = input.checkResultsJson;
   let contractBinding;
   let contractFileContent;
@@ -3208,6 +3253,37 @@ function buildEvidenceCiPackage(input) {
       bindCheckResultsToContract(parsed, packaged2.checkBinding)
     );
   }
+  const evidenceHtml = buildEvidenceHtmlShell({
+    title: "AgentInspect evidence",
+    runIds: input.runIds,
+    assessmentStatus: input.assessmentStatus,
+    sourceStatus: input.sourceStatus,
+    redactionProfile: input.redactionProfile,
+    verificationPolicy: input.redactionProfile,
+    generatorName: "agent-inspect",
+    generatorVersion: input.generatorVersion,
+    createdAt,
+    summaryText: input.summaryText,
+    checkSummary: {
+      aggregateStatus: input.assessmentStatus,
+      runs: input.runIds.map((runId) => ({
+        runId,
+        status: input.assessmentStatus,
+        sourceStatus: input.sourceStatus,
+        errors: input.assessmentStatus === "UNSAFE" || input.assessmentStatus === "UNKNOWN" ? 1 : 0,
+        warnings: input.assessmentStatus === "SAFE WITH WARNINGS" ? 1 : 0,
+        findings: 0
+      }))
+    },
+    ...contractBinding !== void 0 ? {
+      contractBinding: {
+        status: contractBinding.status,
+        ...contractBinding.sha256 !== void 0 ? { sha256: contractBinding.sha256 } : {},
+        ...contractBinding.note !== void 0 ? { note: contractBinding.note } : {},
+        ruleCount: contractBinding.ruleIds.length
+      }
+    } : {}
+  });
   const packaged = [
     { path: EVIDENCE_HTML_FILENAME, content: evidenceHtml },
     { path: "check-results.json", content: checkResultsJson },