agent-inspect 6.31.31 → 6.31.32

package/packages/core/dist/exporters.mjs

@@ -1,8 +1,8 @@
-import { buildRunWhatSummary, renderRunWhat, renderTimeline, buildRunTimeline } from './chunk-76QIWWJ5.mjs';
-import { summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml } from './chunk-QMO3ITYF.mjs';
+import { buildRunWhatSummary, renderRunWhat, renderTimeline, buildRunTimeline } from './chunk-6S666BF4.mjs';
+import { summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml } from './chunk-FBPDF7HO.mjs';
 import { escapeHtml, flattenTree, safeString, compactAttributes, stableJson, escapeMarkdown, zeroKinds } from './chunk-CAWPF22J.mjs';
 export { compactAttributes, escapeHtml, escapeMarkdown, flattenTree, safeString, stableJson, summarizeTree } from './chunk-CAWPF22J.mjs';
-import { resolveRedactionProfile, applyProfileMetadataCaps, truncateStringForProfile, stringContainsHighConfidenceCredential } from './chunk-XM27TZLD.mjs';
+import { resolveRedactionProfile, applyProfileMetadataCaps, truncateStringForProfile, stringContainsHighConfidenceCredential } from './chunk-RB6WANSW.mjs';
 import { Redactor, DEFAULT_REDACT_KEYS, isCredentialSensitiveKey } from './chunk-VLVCLAPB.mjs';
 import { IDENTITY_CONFLICT_ATTR, DELIVERY_CONFLICT_ATTR, DELIVERY_EVENT_BASE_ATTR } from './chunk-AN5MOADW.mjs';
 import './chunk-7DHSWDKB.mjs';

package/packages/core/dist/{index-DACU4Dy1.d.cts → index-Ceyw5x7b.d.cts}

@@ -1024,7 +1024,8 @@ interface StepOrderingRuleOptions {
      * Ordering semantics. `first-occurrence` preserves first-occurrence encounter
      * ordering, `happens-before` requires the first before event to finish before
      * the first after event starts, and `all-occurrences` applies that causal
-     * boundary to every matching occurrence.
+     * boundary to every matching occurrence. When the boundary timestamps tie at
+     * millisecond resolution, the causal modes decide by recorded event order.
      *
      * @defaultValue `"first-occurrence"`
      */
@@ -1055,7 +1056,8 @@ interface ToolOrderingRuleOptions {
      * Ordering semantics. `first-occurrence` preserves first-occurrence encounter
      * ordering, `happens-before` requires the first before event to finish before
      * the first after event starts, and `all-occurrences` applies that causal
-     * boundary to every matching occurrence.
+     * boundary to every matching occurrence. When the boundary timestamps tie at
+     * millisecond resolution, the causal modes decide by recorded event order.
      *
      * @defaultValue `"first-occurrence"`
      * @experimental Available through `agent-inspect/checks`.

package/packages/core/dist/{index-b4tIGrzq.d.ts → index-K5Cinf1r.d.ts}

@@ -1024,7 +1024,8 @@ interface StepOrderingRuleOptions {
      * Ordering semantics. `first-occurrence` preserves first-occurrence encounter
      * ordering, `happens-before` requires the first before event to finish before
      * the first after event starts, and `all-occurrences` applies that causal
-     * boundary to every matching occurrence.
+     * boundary to every matching occurrence. When the boundary timestamps tie at
+     * millisecond resolution, the causal modes decide by recorded event order.
      *
      * @defaultValue `"first-occurrence"`
      */
@@ -1055,7 +1056,8 @@ interface ToolOrderingRuleOptions {
      * Ordering semantics. `first-occurrence` preserves first-occurrence encounter
      * ordering, `happens-before` requires the first before event to finish before
      * the first after event starts, and `all-occurrences` applies that causal
-     * boundary to every matching occurrence.
+     * boundary to every matching occurrence. When the boundary timestamps tie at
+     * millisecond resolution, the causal modes decide by recorded event order.
      *
      * @defaultValue `"first-occurrence"`
      * @experimental Available through `agent-inspect/checks`.

package/packages/core/dist/index.cjs

@@ -241,6 +241,10 @@ var HIGH_CONFIDENCE_CREDENTIAL_PATTERNS = [
   /\b[a-z0-9_.-]+=[^;\s]+(?:;\s*[a-z0-9_.-]+=[^;\s]+)+/i,
   /\beyJ[a-zA-Z0-9_-]{8,}\.[a-zA-Z0-9_-]{8,}\.[a-zA-Z0-9_-]{8,}\b/,
   /\b(?:sk-(?:proj-)?[a-zA-Z0-9_-]{16,}|sk-ant-[a-zA-Z0-9_-]{16,}|AIza[0-9A-Za-z_-]{20,})\b/,
+  // Stripe secret / restricted keys use underscores (not sk-). Keep in sync with
+  // packages/redact/src/index.ts + packages/core/src/checks DEFAULT_SECRET_PATTERNS (#520).
+  /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{16,}\b/,
+  /\bxox[abposr]-[A-Za-z0-9-]{10,}\b/,
   /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{20,}\b/,
   /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/,
   /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*-----END [A-Z ]*PRIVATE KEY-----/,