agent-inspect 6.31.21 → 6.31.22

package/packages/core/dist/{chunk-4CDX5GDS.mjs → chunk-ZOF6ON65.mjs}

@@ -2,6 +2,7 @@ import { OBSERVED_OUTCOME_METHODS, extractOutcomesFromPersistedEvents, outcomesM
 import { DEFAULT_CREDENTIAL_SENSITIVE_KEYS, isCredentialSensitiveKey } from './chunk-VLVCLAPB.mjs';
 import { projectLogicalEvents, resolveCanonicalToolName } from './chunk-AHUZNHFI.mjs';
 import { formatProgrammaticDiagnostic } from './chunk-S6LQBLX5.mjs';
+import { canonicalStructuredEqual, hasDeliveryConflictMarker, deliverySemanticFingerprint, encodeCanonicalStructured } from './chunk-GCZUWY47.mjs';
 import { isAttributionConfidence, ATTRIBUTION_CONFIDENCES, ATTRIBUTION_CONFIDENCE_RANK } from './chunk-EE5Z2GQ3.mjs';
 
 // packages/core/src/sessions/metadata.ts
@@ -976,76 +977,6 @@ function evaluateControlRules(events, rules, runEvidence2, observationNames) {
   return findings;
 }
 
-// packages/core/src/checks/canonical-equality.ts
-var DEFAULT_MAX_DEPTH = 8;
-var DEFAULT_MAX_BYTES = 16384;
-function sortKeysDeep(input, depth, maxDepth) {
-  if (depth > maxDepth) {
-    throw new Error("AI_CHECK_CANONICAL_DEPTH_EXCEEDED");
-  }
-  if (input === null || typeof input !== "object") return input;
-  if (Array.isArray(input)) {
-    return input.map((item) => sortKeysDeep(item, depth + 1, maxDepth));
-  }
-  const record = input;
-  const out = {};
-  for (const key of Object.keys(record).sort()) {
-    out[key] = sortKeysDeep(record[key], depth + 1, maxDepth);
-  }
-  return out;
-}
-function encodeCanonicalStructured(value, limits) {
-  const maxDepth = DEFAULT_MAX_DEPTH;
-  const maxBytes = DEFAULT_MAX_BYTES;
-  try {
-    const sorted = sortKeysDeep(value, 0, maxDepth);
-    const encoded = JSON.stringify(sorted);
-    if (encoded === void 0) {
-      return {
-        ok: false,
-        reason: "Value is not JSON-serializable for canonical comparison.",
-        code: "AI_CHECK_CANONICAL_UNSERIALIZABLE"
-      };
-    }
-    if (Buffer.byteLength(encoded, "utf8") > maxBytes) {
-      return {
-        ok: false,
-        reason: "Canonical structured value exceeds bounded size limit.",
-        code: "AI_CHECK_CANONICAL_SIZE_EXCEEDED"
-      };
-    }
-    return { ok: true, value: encoded };
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    if (message === "AI_CHECK_CANONICAL_DEPTH_EXCEEDED") {
-      return {
-        ok: false,
-        reason: "Canonical structured value exceeds bounded depth limit.",
-        code: "AI_CHECK_CANONICAL_DEPTH_EXCEEDED"
-      };
-    }
-    return {
-      ok: false,
-      reason: "Canonical structured encoding failed.",
-      code: "AI_CHECK_CANONICAL_UNSERIALIZABLE"
-    };
-  }
-}
-function canonicalStructuredEqual(left, right, limits) {
-  const a = encodeCanonicalStructured(left);
-  if (!a.ok) return { equal: false, reason: a.reason, code: a.code };
-  const b = encodeCanonicalStructured(right);
-  if (!b.ok) return { equal: false, reason: b.reason, code: b.code };
-  if (a.value !== b.value) {
-    return {
-      equal: false,
-      reason: "Canonical structured values differ.",
-      code: "AI_CHECK_CANONICAL_NOT_EQUAL"
-    };
-  }
-  return { equal: true };
-}
-
 // packages/core/src/checks/tool-arguments.ts
 function decodeToken(token) {
   return token.replace(/~1/g, "/").replace(/~0/g, "~");
@@ -1241,7 +1172,7 @@ function attemptIdOf(event) {
 }
 function countOperationAttempts(members) {
   const identified = /* @__PURE__ */ new Set();
-  let unidentified = 0;
+  const unidentifiedFingerprints = /* @__PURE__ */ new Set();
   for (const event of members) {
     if (event.kind !== "TOOL" && event.kind !== "LLM") continue;
     const id = attemptIdOf(event);
@@ -1249,13 +1180,13 @@ function countOperationAttempts(members) {
       identified.add(id);
       continue;
     }
-    unidentified += 1;
+    unidentifiedFingerprints.add(redeliveryFingerprint(event));
   }
   if (identified.size > 0) {
-    return identified.size + unidentified;
+    return identified.size + unidentifiedFingerprints.size;
   }
   const numbered = /* @__PURE__ */ new Set();
-  let unnumbered = 0;
+  const unnumberedFingerprints = /* @__PURE__ */ new Set();
   for (const event of members) {
     if (event.kind !== "TOOL" && event.kind !== "LLM") continue;
     const num = attemptNumberOf(event);
@@ -1263,12 +1194,12 @@ function countOperationAttempts(members) {
       numbered.add(num);
       continue;
     }
-    unnumbered += 1;
+    unnumberedFingerprints.add(redeliveryFingerprint(event));
   }
   if (numbered.size > 0) {
-    return numbered.size + unnumbered;
+    return numbered.size + unnumberedFingerprints.size;
   }
-  return unnumbered;
+  return unnumberedFingerprints.size;
 }
 function classifyRetryAttempt(event, priorOrdered, allMembers) {
   const workflow = workflowFor(event);
@@ -1320,19 +1251,49 @@ function classifyRetryAttempt(event, priorOrdered, allMembers) {
 }
 function redeliveryFingerprint(event) {
   const workflow = workflowFor(event);
-  const stableEventId = (event.eventId ?? "").replace(/:\d+$/, "");
-  return JSON.stringify({
-    stableEventId,
+  return deliverySemanticFingerprint({
+    eventId: event.eventId ?? "",
     runId: event.runId,
     kind: event.kind,
     name: event.name,
     status: event.status,
+    parentId: event.parentId,
+    timestamp: event.timestamp,
+    startedAt: event.startedAt,
+    sourceType: event.source?.type,
+    attributes: event.attributes && typeof event.attributes === "object" ? event.attributes : void 0,
     operationId: workflow.operationId ?? null,
     attemptId: workflow.attemptId ?? null,
     attemptNumber: workflow.attemptNumber ?? null,
     retryOf: workflow.retryOf ?? null
   });
 }
+var IDENTITY_KEYS = ["operationId", "attemptId", "retryOf", "attemptNumber"];
+function identityValuesEqual(a, b) {
+  if (typeof a === "number" && typeof b === "number") {
+    return Number.isFinite(a) && Number.isFinite(b) && a === b;
+  }
+  if (typeof a === "string" && typeof b === "string") {
+    return a.trim() === b.trim();
+  }
+  return a === b;
+}
+function directNestedIdentityConflicts(event) {
+  const attrs2 = event.attributes;
+  if (!attrs2 || typeof attrs2 !== "object") return [];
+  const nested = attrs2.metadata && typeof attrs2.metadata === "object" && !Array.isArray(attrs2.metadata) ? attrs2.metadata : void 0;
+  if (!nested) return [];
+  const conflicts = [];
+  for (const key of IDENTITY_KEYS) {
+    const direct = attrs2[key];
+    const nestedValue = nested[key];
+    if (direct === void 0 || nestedValue === void 0) continue;
+    if (!identityValuesEqual(direct, nestedValue)) {
+      conflicts.push(key);
+    }
+  }
+  return conflicts;
+}
 function hasConflictingAttemptIdReuse(members) {
   const byAttempt = /* @__PURE__ */ new Map();
   for (const event of members) {
@@ -1348,6 +1309,31 @@ function hasConflictingAttemptIdReuse(members) {
   }
   return false;
 }
+function hasConflictingEventIdReuse(members) {
+  const byEventId = /* @__PURE__ */ new Map();
+  for (const event of members) {
+    if (event.kind !== "TOOL" && event.kind !== "LLM") continue;
+    const eventId = event.eventId;
+    if (!eventId) continue;
+    if (hasDeliveryConflictMarker(event.attributes)) {
+      return true;
+    }
+    const fingerprints = byEventId.get(eventId) ?? /* @__PURE__ */ new Set();
+    fingerprints.add(redeliveryFingerprint(event));
+    byEventId.set(eventId, fingerprints);
+  }
+  for (const fingerprints of byEventId.values()) {
+    if (fingerprints.size > 1) return true;
+  }
+  return false;
+}
+function hasIdentityRepresentationConflict(members) {
+  for (const event of members) {
+    if (event.kind !== "TOOL" && event.kind !== "LLM") continue;
+    if (directNestedIdentityConflicts(event).length > 0) return true;
+  }
+  return false;
+}
 function evaluateRetrySafetyRules(events, rules, _runEvidence) {
   const findings = [];
   const byOperation = /* @__PURE__ */ new Map();
@@ -1355,13 +1341,14 @@ function evaluateRetrySafetyRules(events, rules, _runEvidence) {
     const workflow = workflowFor(event);
     const operationId = workflow.operationId;
     if (!operationId) continue;
-    const list = byOperation.get(operationId) ?? [];
-    list.push(event);
-    byOperation.set(operationId, list);
+    const key = `${event.runId}\0${operationId}`;
+    const group = byOperation.get(key) ?? { operationId, members: [] };
+    group.members.push(event);
+    byOperation.set(key, group);
   }
   if (rules.maxAttempts !== void 0) {
-    for (const [operationId, members] of byOperation) {
-      if (hasConflictingAttemptIdReuse(members)) {
+    for (const { operationId, members } of byOperation.values()) {
+      if (hasConflictingAttemptIdReuse(members) || hasConflictingEventIdReuse(members)) {
         findings.push(
           fail2(
             "contract.retry.duplicate-attempt-id",
@@ -1372,6 +1359,31 @@ function evaluateRetrySafetyRules(events, rules, _runEvidence) {
           )
         );
       }
+      if (hasIdentityRepresentationConflict(members)) {
+        findings.push(
+          fail2(
+            "contract.retry.ambiguous-identity",
+            `Operation ${operationId} has conflicting direct vs nested identity fields; strict identity cannot pass.`,
+            members.slice(0, 4).map(eventEvidence),
+            "agreeing identity representation",
+            "direct/nested conflict"
+          )
+        );
+      }
+      const toolish = members.filter((event) => event.kind === "TOOL" || event.kind === "LLM");
+      const hasAttemptId = toolish.some((event) => attemptIdOf(event) !== void 0);
+      const missingAttemptId = toolish.some((event) => attemptIdOf(event) === void 0);
+      if (hasAttemptId && missingAttemptId) {
+        findings.push(
+          fail2(
+            "contract.retry.ambiguous-identity",
+            `Operation ${operationId} has partial attempt identity; strict identity conformance cannot pass.`,
+            members.slice(0, 4).map(eventEvidence),
+            "complete attempt identity",
+            "partial attemptId coverage"
+          )
+        );
+      }
       const count = countOperationAttempts(members);
       if (count > rules.maxAttempts) {
         findings.push(
@@ -1387,7 +1399,7 @@ function evaluateRetrySafetyRules(events, rules, _runEvidence) {
     }
   }
   if (rules.requireTerminalResult) {
-    for (const [operationId, members] of byOperation) {
+    for (const { operationId, members } of byOperation.values()) {
       const hasTerminal = members.some((event) => event.status === "ok" || event.status === "error");
       if (!hasTerminal) {
         findings.push(
@@ -1407,7 +1419,7 @@ function evaluateRetrySafetyRules(events, rules, _runEvidence) {
       const workflow = workflowFor(event);
       const fallbackOf = workflow.fallbackOf;
       if (!fallbackOf) continue;
-      const prior = byOperation.get(fallbackOf) ?? [];
+      const prior = byOperation.get(`${event.runId}\0${fallbackOf}`)?.members ?? [];
       const fallbackStart = eventTime(event);
       const earlierFailure = prior.some(
         (candidate) => candidate.status === "error" && eventTime(candidate) !== "" && fallbackStart !== "" && eventTime(candidate) < fallbackStart
@@ -1434,7 +1446,7 @@ function evaluateRetrySafetyRules(events, rules, _runEvidence) {
     for (const event of toolEvents) {
       const name = resolveCanonicalToolName(event);
       const workflow = workflowFor(event);
-      const key = `${workflow.operationId ?? name}::${name}`;
+      const key = `${event.runId}::${workflow.operationId ?? name}::${name}`;
       const list = byToolOp.get(key) ?? [];
       list.push(event);
       byToolOp.set(key, list);
@@ -1492,7 +1504,7 @@ function evaluateRetrySafetyRules(events, rules, _runEvidence) {
     }
   }
   if (rules.requireRecoveredFailureVisible) {
-    for (const [operationId, members] of byOperation) {
+    for (const { operationId, members } of byOperation.values()) {
       const ordered = sortByTime(members);
       const toolish = ordered.filter(
         (event) => (event.kind === "TOOL" || event.kind === "LLM") && (event.status === "ok" || event.status === "error")
@@ -1751,14 +1763,7 @@ function attemptIdOf2(event) {
   return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
 function hasDuplicateAttemptIds(members) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const event of members) {
-    const id = attemptIdOf2(event);
-    if (!id) continue;
-    if (seen.has(id)) return true;
-    seen.add(id);
-  }
-  return false;
+  return hasConflictingAttemptIdReuse(members) || hasConflictingEventIdReuse(members);
 }
 function findRetryTarget(members, retryOf) {
   return members.find(
@@ -5338,5 +5343,5 @@ function runTraceChecks(input, options = {}) {
 }
 
 export { buildTraceFacts, createBaselineRegressionRule, createDecisionRule, createGuardrailRule, createLlmUsageRule, createMaxStepDurationRule, createObservedOutcomeRule, createRequireCompletedRule, createRetrievalRule, createRunDepthRule, createRunDurationRule, createRunEventCountRule, createRunStatusRule, createSafetyOversizedAttributeRule, createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createStallDetectionRule, createStepOrderingRule, createStructureCycleRule, createStructureIncompleteRule, createStructureOrphanRule, createStructureParallelWidthRule, createStructureRelationshipRule, createToolFailureRule, createToolOrderingRule, createToolUsageRule, defineTraceContract, deriveFailureFacts, deriveRelationshipFacts, evaluateToolArgumentValue, evaluateTraceContract, evaluateTraceContractRead, explainTraceContract, extractSessionWorkflowMetadata, extractToolArgumentPayload, lintTraceContract, resolveJsonPointer, resolveTraceContractScope, runTraceChecks, sessionKeyForRun, summarizeSemanticParity, workflowMetadataForRun };
-//# sourceMappingURL=chunk-4CDX5GDS.mjs.map
-//# sourceMappingURL=chunk-4CDX5GDS.mjs.map
+//# sourceMappingURL=chunk-ZOF6ON65.mjs.map
+//# sourceMappingURL=chunk-ZOF6ON65.mjs.map