agent-inspect 6.31.16 → 6.31.18

package/packages/cli/dist/index.cjs

@@ -261,7 +261,7 @@ function stringContainsHighConfidenceCredential(value) {
 var KEY_VALUE_SECRET_PATTERN, HIGH_CONFIDENCE_CREDENTIAL_PATTERNS;
 var init_credential_value_patterns = __esm({
   "packages/core/src/safety/credential-value-patterns.ts"() {
-    KEY_VALUE_SECRET_PATTERN = /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i;
+    KEY_VALUE_SECRET_PATTERN = /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED|HASH:(?:[0-9a-f]{8}|unknown))\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i;
     HIGH_CONFIDENCE_CREDENTIAL_PATTERNS = [
       /^(?:basic|bearer|digest|apikey)\s+[a-z0-9._~+/=-]+$/i,
       /\bbearer\s+[a-z0-9._~+/=-]{12,}\b/i,
@@ -5994,8 +5994,8 @@ function isFullyRedactedValue(value, markers = ["[REDACTED]", "[REDACTED:"]) {
   if (typeof value !== "string") return false;
   const trimmed = value.trim();
   if (trimmed.length === 0) return false;
-  if (/^\[HASH:[A-Za-z0-9_-]+\]$/.test(trimmed)) return true;
-  if (/^\[REDACTED:[^\]]*\]$/.test(trimmed)) return true;
+  if (trimmed === "[HASH:unknown]") return true;
+  if (/^\[HASH:[0-9a-f]{8}\]$/.test(trimmed)) return true;
   for (const marker of markers) {
     if (marker.endsWith(":")) continue;
     if (trimmed === marker) return true;
@@ -7540,7 +7540,7 @@ var init_checks2 = __esm({
       // Keep in sync with packages/redact/src/key-value-secret.ts (KEY_VALUE_SECRET_PATTERN_SOURCE).
       {
         id: "key-value-secret",
-        pattern: /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i
+        pattern: /\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED|HASH:(?:[0-9a-f]{8}|unknown))\](?![^\s"'\\&#?]))([^\s"'\\]{8,})/i
       }
     ];
   }
@@ -8166,24 +8166,26 @@ function attemptIdOf(event) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
 function countOperationAttempts(members) {
-  const attemptIds = new Set(
-    members.map((event) => attemptIdOf(event)).filter((value) => value !== void 0)
-  );
-  if (attemptIds.size > 0) {
-    return attemptIds.size;
+  const identified = /* @__PURE__ */ new Set();
+  let unidentified = 0;
+  for (const event of members) {
+    if (event.kind !== "TOOL" && event.kind !== "LLM") continue;
+    const id = attemptIdOf(event);
+    if (id !== void 0) {
+      identified.add(id);
+      continue;
+    }
+    unidentified += 1;
+  }
+  if (identified.size > 0) {
+    return identified.size + unidentified;
   }
   const numbers = members.map((event) => attemptNumberOf(event)).filter((value) => value !== void 0).sort((a, b) => a - b);
   if (numbers.length > 0) {
     const unique = [...new Set(numbers)];
-    const min = unique[0];
-    const max = unique[unique.length - 1];
-    const contiguous = unique.length === max - min + 1 && unique.every((value, index) => value === min + index);
-    if (contiguous) {
-      return unique.length;
-    }
     return unique.length;
   }
-  return members.filter((event) => event.kind === "TOOL" || event.kind === "LLM").length;
+  return unidentified;
 }
 function classifyRetryAttempt(event, priorOrdered, allMembers) {
   const workflow = workflowFor(event);
@@ -8464,8 +8466,30 @@ function eventEvidence3(event) {
 function eventTime2(event) {
   return event.startedAt ?? event.timestamp ?? "";
 }
+function parseComparableMs(value) {
+  if (!value) return void 0;
+  const parsed = Date.parse(value);
+  return Number.isFinite(parsed) ? parsed : void 0;
+}
+function consumerStartMs(event) {
+  return parseComparableMs(event.startedAt) ?? parseComparableMs(event.timestamp);
+}
+function resultAvailableMs(event) {
+  const ended = parseComparableMs(event.endedAt);
+  if (ended !== void 0) return ended;
+  const started = parseComparableMs(event.startedAt) ?? parseComparableMs(event.timestamp);
+  if (started !== void 0 && event.durationMs !== void 0 && Number.isFinite(event.durationMs)) {
+    return started + event.durationMs;
+  }
+  return parseComparableMs(event.timestamp);
+}
 function sortByTime2(events) {
-  return [...events].sort((a, b) => eventTime2(a).localeCompare(eventTime2(b)));
+  return [...events].sort((a, b) => {
+    const aMs = consumerStartMs(a) ?? 0;
+    const bMs = consumerStartMs(b) ?? 0;
+    if (aMs !== bMs) return aMs - bMs;
+    return eventTime2(a).localeCompare(eventTime2(b));
+  });
 }
 function errorCodeOf(event) {
   if (typeof event.error?.code === "string" && event.error.code.trim() !== "") {
@@ -8537,9 +8561,10 @@ function isUnevaluableWriteCompletion(event) {
   if (event.status === "running" || event.status === "unknown") return true;
   const attrs = event.attributes ?? {};
   if (attrs.timeout === true) return true;
+  if (attrs.unknownCompletion === true) return true;
   if (attrs.completionState === "unknown" || attrs.completionState === "timeout") return true;
   const code = errorCodeOf(event)?.toUpperCase();
-  if (code === "TIMEOUT" || code === "UNKNOWN_COMPLETION" || code === "DEADLINE_EXCEEDED") {
+  if (code && UNEVALUABLE_WRITE_ERROR_CODES.has(code)) {
     return true;
   }
   return false;
@@ -8587,14 +8612,17 @@ function collectExplicitReferences(event) {
   return refs;
 }
 function llmReferencesTool(llm, toolEvent, requireExplicit) {
-  if (!requireExplicit) {
-    return eventTime2(llm) >= eventTime2(toolEvent);
-  }
-  const refs = collectExplicitReferences(llm);
-  if (refs.has(toolEvent.eventId)) return true;
-  const toolCallId = workflowFor2(toolEvent).toolCallId;
-  if (toolCallId && refs.has(toolCallId)) return true;
-  return false;
+  if (llm.runId !== toolEvent.runId) return false;
+  if (requireExplicit) {
+    const refs = collectExplicitReferences(llm);
+    const toolCallId = workflowFor2(toolEvent).toolCallId;
+    const hasRef = refs.has(toolEvent.eventId) || toolCallId !== void 0 && refs.has(toolCallId);
+    if (!hasRef) return false;
+  }
+  const resultMs = resultAvailableMs(toolEvent);
+  const consumerMs = consumerStartMs(llm);
+  if (resultMs === void 0 || consumerMs === void 0) return false;
+  return resultMs <= consumerMs;
 }
 function attemptIdOf2(event) {
   const value = workflowFor2(event).attemptId;
@@ -8906,6 +8934,7 @@ function evaluateRecoveryOperations(events, operations) {
   }
   return findings;
 }
+var UNEVALUABLE_WRITE_ERROR_CODES;
 var init_recovery_operations = __esm({
   "packages/core/src/checks/recovery-operations.ts"() {
     init_canonical_equality();
@@ -8913,6 +8942,12 @@ var init_recovery_operations = __esm({
     init_tool_arguments();
     init_retry_safety();
     init_metadata();
+    UNEVALUABLE_WRITE_ERROR_CODES = /* @__PURE__ */ new Set([
+      "TIMEOUT",
+      "ETIMEDOUT",
+      "UNKNOWN_COMPLETION",
+      "DEADLINE_EXCEEDED"
+    ]);
   }
 });
 
@@ -16829,7 +16864,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "6.31.16";
+var version = "6.31.18";
 
 // packages/cli/src/list.ts
 init_advanced();
@@ -19480,6 +19515,51 @@ function genAiOperationName(kind) {
       return void 0;
   }
 }
+var STRUCTURAL_IDENTITY_KEYS = [
+  "operationId",
+  "attemptId",
+  "retryOf",
+  "attemptNumber",
+  "attempt"
+];
+function pickBoundedIdentityString(bag, key, maxLen) {
+  if (!bag || typeof bag !== "object") return void 0;
+  const direct = bag[key];
+  if (typeof direct === "string" && direct.trim() !== "") {
+    return direct.trim().slice(0, maxLen);
+  }
+  const nested = bag.metadata && typeof bag.metadata === "object" ? bag.metadata[key] : void 0;
+  if (typeof nested === "string" && nested.trim() !== "") {
+    return nested.trim().slice(0, maxLen);
+  }
+  return void 0;
+}
+function pickBoundedIdentityNumber(bag, key) {
+  if (!bag || typeof bag !== "object") return void 0;
+  const direct = bag[key];
+  if (typeof direct === "number" && Number.isFinite(direct)) return direct;
+  const nested = bag.metadata && typeof bag.metadata === "object" ? bag.metadata[key] : void 0;
+  if (typeof nested === "number" && Number.isFinite(nested)) return nested;
+  return void 0;
+}
+function appendStructuralIdentityAttrs(attrs, meta2, maxLen) {
+  const operationId = pickBoundedIdentityString(meta2, "operationId", maxLen);
+  if (operationId !== void 0) {
+    attrs.push(stringAttr2("agent_inspect.operation_id", operationId));
+  }
+  const attemptId = pickBoundedIdentityString(meta2, "attemptId", maxLen);
+  if (attemptId !== void 0) {
+    attrs.push(stringAttr2("agent_inspect.attempt_id", attemptId));
+  }
+  const retryOf = pickBoundedIdentityString(meta2, "retryOf", maxLen);
+  if (retryOf !== void 0) {
+    attrs.push(stringAttr2("agent_inspect.retry_of", retryOf));
+  }
+  const attemptNumber2 = pickBoundedIdentityNumber(meta2, "attemptNumber") ?? pickBoundedIdentityNumber(meta2, "attempt");
+  if (attemptNumber2 !== void 0) {
+    attrs.push(intAttr("agent_inspect.attempt_number", attemptNumber2));
+  }
+}
 function resolveSpanTimes(ev) {
   const startedAtMs = typeof ev.attributes?.startedAtMs === "number" && Number.isFinite(ev.attributes.startedAtMs) ? ev.attributes.startedAtMs : void 0;
   const endedAtMs = typeof ev.attributes?.endedAtMs === "number" && Number.isFinite(ev.attributes.endedAtMs) ? ev.attributes.endedAtMs : void 0;
@@ -19500,7 +19580,8 @@ function exportOtlpJson(tree, options) {
   const warnings = [
     "OTLP JSON export uses OTel GenAI-aligned attributes where applicable; experimental until verified against specific collectors.",
     "Not OTLP gRPC/protobuf \u2014 JSON mapping only. Generated locally; no network upload.",
-    "Status and span kind use OTLP numeric enums (StatusCode 0/1/2, SpanKind INTERNAL=1)."
+    "Status and span kind use OTLP numeric enums (StatusCode 0/1/2, SpanKind INTERNAL=1).",
+    "When present on source events, operationId/attemptId/retryOf/attemptNumber are emitted as bounded agent_inspect.* identity attributes (not a broad attribute dump)."
   ];
   const traceId = hexFrom2(`trace:${tree.runId}`, 16);
   const includeAttributes = options?.includeAttributes ?? false;
@@ -19548,6 +19629,11 @@ function exportOtlpJson(tree, options) {
       if (typeof inp === "number") attrs.push(intAttr("gen_ai.usage.input_tokens", inp));
       if (typeof outp === "number") attrs.push(intAttr("gen_ai.usage.output_tokens", outp));
     }
+    appendStructuralIdentityAttrs(
+      attrs,
+      meta2 && typeof meta2 === "object" ? meta2 : void 0,
+      maxLen
+    );
     if (includeAttributes && meta2 && typeof meta2 === "object") {
       const skipKeys = /* @__PURE__ */ new Set([
         "tokens",
@@ -19556,7 +19642,8 @@ function exportOtlpJson(tree, options) {
         "responseModel",
         "responseModelId",
         "provider",
-        "originalSourceType"
+        "originalSourceType",
+        ...STRUCTURAL_IDENTITY_KEYS
       ]);
       for (const [k, v] of Object.entries(meta2)) {
         if (skipKeys.has(k)) continue;
@@ -21415,7 +21502,7 @@ function isCredentialSensitiveKey2(key, sensitiveKeys) {
 }
 
 // packages/redact/src/key-value-secret.ts
-var KEY_VALUE_SECRET_PATTERN_SOURCE = String.raw`\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?]))([^\s"'\\]{8,})`;
+var KEY_VALUE_SECRET_PATTERN_SOURCE = String.raw`\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED|HASH:(?:[0-9a-f]{8}|unknown))\](?![^\s"'\\&#?]))([^\s"'\\]{8,})`;
 var KEY_VALUE_SECRET_PATTERN2 = new RegExp(
   KEY_VALUE_SECRET_PATTERN_SOURCE,
   "i"
@@ -21872,8 +21959,8 @@ function isCompleteRedactionMarker(value, replacement = "[REDACTED]") {
   const trimmed = value.trim();
   if (trimmed.length === 0) return false;
   if (trimmed === replacement) return true;
-  if (/^\[HASH:[A-Za-z0-9_-]+\]$/.test(trimmed)) return true;
-  if (/^\[REDACTED:[^\]]*\]$/.test(trimmed)) return true;
+  if (trimmed === "[HASH:unknown]") return true;
+  if (/^\[HASH:[0-9a-f]{8}\]$/.test(trimmed)) return true;
   return false;
 }
 function applyRule(rule, value, replacement) {
@@ -22106,6 +22193,9 @@ function isRecord18(value) {
 }
 function rejectRemotePolicyPath(policyPath) {
   const trimmed = policyPath.trim();
+  if (/^[a-z]:[\\/]/i.test(trimmed)) {
+    return;
+  }
   if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) {
     throw new Error(
       `--policy must be a local JSON file path (got a URL-like value). Remote policy fetch is not supported.`