agent-inspect 6.29.0 → 6.29.2

package/packages/cli/dist/index.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, renderErrorLine, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-D7PT6TXM.mjs';
+import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, renderErrorLine, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-UK4HD5M3.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
 import path19 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, Option } from 'commander';
-import { readFile, stat, mkdir, writeFile, unlink, appendFile, access, rm, open, readdir, constants } from 'fs/promises';
+import { readFile, stat, mkdir, writeFile, unlink, appendFile, access, rm, open, readdir, lstat, constants } from 'fs/promises';
 import process2, { stdin, stdout } from 'process';
 import crypto, { createHash } from 'crypto';
 import { execFile, spawn } from 'child_process';
@@ -13,7 +13,7 @@ import { createServer } from 'http';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.29.0";
+var version = "6.29.2";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -3397,7 +3397,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-QONEBW2F.mjs');
+    const mod = await import('./src-CMPIJGUE.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -4396,15 +4396,14 @@ var REDACTION_POLICY_LIMITS = {
   maxPatterns: 32,
   maxPatternLength: 128,
   maxPatternIdLength: 64,
-  maxTypedQuantifier: 64
+  /** Maximum policy file size before parse (bytes). */
+  maxPolicyFileBytes: 64 * 1024
 };
-var SAFE_TYPED_PATTERN = /^[A-Za-z0-9_@./:=<>\-[\]()|+*?{},\\\s^$]+$/;
+var ALLOWED_TOP_LEVEL = /* @__PURE__ */ new Set(["version", "extraKeys", "patterns"]);
+var ALLOWED_PATTERN_FIELDS = /* @__PURE__ */ new Set(["id", "type", "value", "severity"]);
 function isRecord6(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function escapeRegExp(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
 function rejectRemotePolicyPath(policyPath) {
   const trimmed = policyPath.trim();
   if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) {
@@ -4433,43 +4432,23 @@ function validateExtraKey(key, index) {
   }
   return key;
 }
-function assertBoundedTypedPattern(pattern, label) {
-  if (pattern.length === 0) throw new Error(`${label} must be non-empty.`);
-  if (pattern.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
-    throw new Error(
-      `${label} exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
-    );
-  }
-  if (!SAFE_TYPED_PATTERN.test(pattern)) {
-    throw new Error(
-      `${label} contains unsupported characters for bounded typed patterns.`
-    );
-  }
-  if (/\(\?/.test(pattern) || /\\[1-9]/.test(pattern)) {
-    throw new Error(
-      `${label} rejects lookaround, backreferences, and nested quantifiers.`
-    );
-  }
-  if (/\([^)]*[+*{][^)]*\)[+*{]/.test(pattern) || /\[[^\]]*[+*{][^\]]*\][+*{]/.test(pattern)) {
-    throw new Error(`${label} rejects nested quantifiers.`);
-  }
-  if (/\.[*+]/.test(pattern) || /[*+]\{/.test(pattern)) {
-    throw new Error(`${label} rejects unbounded .* / .+ style quantifiers.`);
-  }
-  for (const match of pattern.matchAll(/\{(\d+)(?:,(\d*))?\}/g)) {
-    const min = Number(match[1]);
-    const maxRaw = match[2];
-    const max = maxRaw === void 0 || maxRaw === "" ? min : Number(maxRaw);
-    if (!Number.isFinite(min) || !Number.isFinite(max) || min > REDACTION_POLICY_LIMITS.maxTypedQuantifier || max > REDACTION_POLICY_LIMITS.maxTypedQuantifier) {
-      throw new Error(
-        `${label} quantifiers must be <= ${REDACTION_POLICY_LIMITS.maxTypedQuantifier}.`
-      );
+function rejectUnknownFields(record, allowed, label) {
+  for (const key of Object.keys(record)) {
+    if (!allowed.has(key)) {
+      throw new Error(`${label} rejects unknown field "${key}".`);
     }
   }
 }
 function compilePatternDetector(input3, index) {
   const label = `patterns[${index}]`;
   if (!isRecord6(input3)) throw new Error(`${label} must be an object.`);
+  const typeEarly = input3.type;
+  if (typeEarly === "typed") {
+    throw new Error(
+      `${label}.type "typed" is no longer supported (removed in 6.29.1). Use type "literal" or "prefix" with a fixed value; arbitrary regex patterns are not accepted.`
+    );
+  }
+  rejectUnknownFields(input3, ALLOWED_PATTERN_FIELDS, label);
   const idRaw = input3.id;
   if (typeof idRaw !== "string" || idRaw.trim() === "") {
     throw new Error(`${label}.id must be a non-empty string.`);
@@ -4484,48 +4463,35 @@ function compilePatternDetector(input3, index) {
     throw new Error(`${label}.id must be an identifier-like detector id.`);
   }
   const type = input3.type;
-  if (type !== "literal" && type !== "prefix" && type !== "typed") {
-    throw new Error(`${label}.type must be literal, prefix, or typed.`);
+  if (type !== "literal" && type !== "prefix") {
+    throw new Error(`${label}.type must be literal or prefix.`);
+  }
+  if (input3.pattern !== void 0) {
+    throw new Error(
+      `${label}.pattern is not accepted; use .value with type literal or prefix.`
+    );
   }
   const severity = parseSeverity(input3.severity, label);
-  let source;
-  if (type === "typed") {
-    if (typeof input3.pattern !== "string") {
-      throw new Error(`${label}.pattern must be a string for typed patterns.`);
-    }
-    assertBoundedTypedPattern(input3.pattern, `${label}.pattern`);
-    source = input3.pattern;
-  } else {
-    if (typeof input3.value !== "string") {
-      throw new Error(`${label}.value must be a string for ${type} patterns.`);
-    }
-    if (input3.value.length === 0) {
-      throw new Error(`${label}.value must be non-empty.`);
-    }
-    if (input3.value.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
-      throw new Error(
-        `${label}.value exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
-      );
-    }
-    const escaped = escapeRegExp(input3.value);
-    source = type === "prefix" ? `^${escaped}` : escaped;
+  if (typeof input3.value !== "string") {
+    throw new Error(`${label}.value must be a string for ${type} patterns.`);
   }
-  let regex;
-  try {
-    regex = new RegExp(source);
-  } catch (error) {
+  if (input3.value.length === 0) {
+    throw new Error(`${label}.value must be non-empty.`);
+  }
+  if (input3.value.length > REDACTION_POLICY_LIMITS.maxPatternLength) {
     throw new Error(
-      `${label} failed to compile: ${error instanceof Error ? error.message : String(error)}`
+      `${label}.value exceeds max length ${REDACTION_POLICY_LIMITS.maxPatternLength}.`
     );
   }
+  const needle = input3.value;
+  const match = type === "prefix" ? (haystack) => haystack.startsWith(needle) : (haystack) => haystack.includes(needle);
   return {
     id: `policy.${id}`,
     severity,
     matchKind: "custom",
     detect({ value }) {
       if (typeof value !== "string") return [];
-      regex.lastIndex = 0;
-      return regex.test(value) ? [{ action: "replace", severity, matchKind: "custom" }] : [];
+      return match(value) ? [{ action: "replace", severity, matchKind: "custom" }] : [];
     }
   };
 }
@@ -4533,6 +4499,7 @@ function compileRedactionPolicy(raw, policyPath) {
   if (!isRecord6(raw)) {
     throw new Error(`Redaction policy must be a JSON object (${policyPath}).`);
   }
+  rejectUnknownFields(raw, ALLOWED_TOP_LEVEL, "Redaction policy");
   const diagnostics = [];
   if (raw.version !== void 0 && raw.version !== 1) {
     throw new Error(`Unsupported redaction policy version (supported: 1).`);
@@ -4596,14 +4563,38 @@ function compileRedactionPolicy(raw, policyPath) {
 async function loadRedactionPolicy(policyPath) {
   rejectRemotePolicyPath(policyPath);
   const resolved = path19.resolve(policyPath);
-  let text;
+  let fileStat;
   try {
-    text = await readFile(resolved, "utf-8");
+    fileStat = await stat(resolved);
   } catch (error) {
     throw new Error(
       `Failed to read --policy file "${resolved}": ${error instanceof Error ? error.message : String(error)}`
     );
   }
+  if (!fileStat.isFile()) {
+    throw new Error(
+      `--policy must be a regular local JSON file (not a directory or special file): "${resolved}".`
+    );
+  }
+  if (fileStat.size > REDACTION_POLICY_LIMITS.maxPolicyFileBytes) {
+    throw new Error(
+      `--policy file exceeds max size ${REDACTION_POLICY_LIMITS.maxPolicyFileBytes} bytes.`
+    );
+  }
+  let buffer;
+  try {
+    buffer = await readFile(resolved);
+  } catch (error) {
+    throw new Error(
+      `Failed to read --policy file "${resolved}": ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  if (buffer.byteLength > REDACTION_POLICY_LIMITS.maxPolicyFileBytes) {
+    throw new Error(
+      `--policy file exceeds max size ${REDACTION_POLICY_LIMITS.maxPolicyFileBytes} bytes.`
+    );
+  }
+  const text = buffer.toString("utf-8");
   let parsed;
   try {
     parsed = JSON.parse(text);
@@ -12079,7 +12070,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-QONEBW2F.mjs');
+    return await import('./src-CMPIJGUE.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(
@@ -12357,18 +12348,56 @@ async function workspacePathCommand(options = {}) {
   console.log(location.workspaceDir);
 }
 var DEFAULT_CONFIG_FILENAME = "agent-inspect.suite.json";
+var CONFIG_EXISTS_ERROR = `${DEFAULT_CONFIG_FILENAME} already exists; refusing to overwrite it.`;
 function printJson5(value) {
   console.log(JSON.stringify(value, null, 2));
 }
 function resolveCwd(options) {
   return path19.resolve(options.cwd ?? process.cwd());
 }
+function getErrorCode(error) {
+  if (typeof error !== "object" || error === null || !("code" in error)) {
+    return void 0;
+  }
+  return typeof error.code === "string" ? error.code : void 0;
+}
+function getErrorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function failInit(options, message) {
+  if (options.json) {
+    printJson5({ ok: false, error: message });
+  } else {
+    console.error(`[AgentInspect] suite init failed: ${message}`);
+  }
+  process.exitCode = 1;
+}
+async function pathExists2(filePath) {
+  try {
+    await lstat(filePath);
+    return true;
+  } catch (error) {
+    if (getErrorCode(error) === "ENOENT") return false;
+    throw error;
+  }
+}
 async function suiteInitCommand(options = {}) {
   const cwd = resolveCwd(options);
   const configPath = path19.join(cwd, DEFAULT_CONFIG_FILENAME);
   const template = options.template?.trim();
   const suiteConfig = template !== void 0 && template !== "" ? resolveSuiteTemplate(template) : defaultSuiteConfigTemplate();
+  const content = `${JSON.stringify(suiteConfig, null, 2)}
+`;
   if (options.dryRun) {
+    try {
+      if (await pathExists2(configPath)) {
+        failInit(options, CONFIG_EXISTS_ERROR);
+        return;
+      }
+    } catch (error) {
+      failInit(options, getErrorMessage(error));
+      return;
+    }
     if (options.json) {
       printJson5({
         ok: true,
@@ -12385,8 +12414,10 @@ async function suiteInitCommand(options = {}) {
     return;
   }
   try {
-    await writeFile(configPath, `${JSON.stringify(suiteConfig, null, 2)}
-`, "utf-8");
+    await writeFile(configPath, content, {
+      encoding: "utf-8",
+      flag: "wx"
+    });
     if (options.json) {
       printJson5({
         ok: true,
@@ -12403,13 +12434,8 @@ async function suiteInitCommand(options = {}) {
     console.log("  npx agent-inspect suite validate");
     console.log("  npx agent-inspect suite run --json");
   } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    if (options.json) {
-      printJson5({ ok: false, error: message });
-    } else {
-      console.error(`[AgentInspect] suite init failed: ${message}`);
-    }
-    process.exitCode = 1;
+    const message = getErrorCode(error) === "EEXIST" ? CONFIG_EXISTS_ERROR : getErrorMessage(error);
+    failInit(options, message);
   }
 }
 async function suiteValidateCommand(options = {}) {