agent-inspect 6.7.0 → 6.7.2

package/docs/INDEX.md

@@ -0,0 +1,69 @@
+# Optional Local Index (`@agent-inspect/index-sqlite`)
+
+The optional SQLite index accelerates local queries over large AgentInspect trace directories. It is **experimental** (added in v4.1) and entirely opt-in.
+
+- **Source of truth stays JSONL.** The index is derived from your trace files and is always safe to delete.
+- **Never mutates traces.** Building, rebuilding, and cleaning the index only touch the index database file.
+- **Local-only.** No network access. No upload. No hosted service.
+- **Not required.** Every core CLI command works without it; the index only speeds up queries.
+
+## Install
+
+```bash
+npm install @agent-inspect/index-sqlite
+```
+
+The package depends on `better-sqlite3` (a native module). The core `agent-inspect` package has no SQLite dependency.
+
+## CLI
+
+```bash
+agent-inspect index sqlite build            # build/rebuild trace-index.sqlite
+agent-inspect index sqlite status --json    # health, counts, staleness
+agent-inspect index sqlite query --status error --tool search
+agent-inspect index sqlite clean            # delete the index (traces untouched)
+```
+
+See [CLI.md § 6.23](CLI.md) for the full flag reference.
+
+## Programmatic API
+
+```ts
+import {
+  buildIndex,
+  queryRuns,
+  indexStatus,
+  isIndexStale,
+  resolveIndexDbPath,
+} from "@agent-inspect/index-sqlite";
+
+const { dbPath, runs } = await buildIndex({ traceDir: ".agent-inspect/runs" });
+
+const failed = queryRuns(dbPath, { status: "error", tool: "search", limit: 50 });
+
+const status = indexStatus(dbPath); // { healthy, runs, steps, builtAt, ... }
+```
+
+All read functions are non-throwing: a missing or corrupt index returns empty
+results (for `queryRuns`), `healthy: false` (for `indexStatus`), or `true` (for
+`isIndexStale`), so callers can transparently fall back to a directory scan.
+
+## Layout
+
+The index database defaults to `<traceDir>/trace-index.sqlite`. It stores derived
+`runs`, `steps`, `errors`, and `sessions` tables plus a `meta` table recording the
+schema version, source directory, and build time.
+
+## Staleness and recovery
+
+- **Staleness:** an index is stale when any trace file is newer than the recorded
+  build time. `status` reports this; rebuild to refresh.
+- **Corruption:** a failed integrity check is treated as "absent". Queries return
+  empty and a rebuild recreates the database from scratch.
+
+## Boundaries
+
+- No vector or semantic search.
+- No background daemon.
+- No SQLite dependency in root/core.
+- No trace schema changes; deleting the index is always safe.

package/docs/NETWORK-BEHAVIOR.md

@@ -0,0 +1,32 @@
+# Network behavior
+
+AgentInspect is **local-first**. Core tracing writes local files and does **not** upload to AgentInspect. Some optional surfaces can use the network when **explicitly** enabled.
+
+## Summary
+
+| Surface | Default | Network? | Notes |
+| ------- | ------- | -------- | ----- |
+| Core CLI / writers | On | No | Local JSONL only |
+| Framework adapters | Opt-in install | No AgentInspect upload | Provider SDKs may still call their own APIs |
+| `explain` | Local facts | No provider calls in default mode | |
+| Viewer | Localhost | Loopback only | Read-only |
+| Studio CLI | Localhost bind | Loopback by default | Customer-owned |
+| Studio file-drop ingest | Off / explicit | No | Local files |
+| Studio GitHub artifact import | Off / explicit | Yes → GitHub | User credentials; customer-owned |
+| Studio HTTP ingest | **Disabled by default** | Yes if enabled | Token + binding required |
+| MCP client (`@agent-inspect/mcp`) | Opt-in | To your MCP servers | Tracing only; not a gateway |
+| MCP server | Opt-in | Exposes local evidence to connected client | Preview; share-profile boundary |
+| Standards export / collector | Opt-in | Only if you configure export | Known losses documented |
+| Website / docs | N/A | Public site | No trace upload |
+
+## Rules of thumb
+
+1. **No default upload** of traces to AgentInspect maintainers.
+2. **No hidden telemetry** from the library.
+3. **Customer-owned** destinations only (your disk, your Studio, your collector).
+4. Prefer **redact / verify-safe** before any share or ingest path.
+5. Redaction is best-effort, not certification.
+
+## Enabling Studio ingest
+
+See [SELF-HOSTING.md](./SELF-HOSTING.md) and [`@agent-inspect/studio`](https://github.com/rajudandigam/agent-inspect/tree/main/packages/studio). HTTP ingest remains off until you configure token and binding.

package/docs/PRE-V7-PILOT-KIT.md

@@ -0,0 +1,45 @@
+# Pre-v7 Pilot Kit
+
+**Purpose:** External design-partner and three-team pilot evidence for the 6.7.x technical launch candidate.  
+**Do not fabricate results.** Record only real partner outcomes in [implementation/PRE-V7-ADOPTION-EVIDENCE.md](implementation/PRE-V7-ADOPTION-EVIDENCE.md).
+
+## What is shipping for partners
+
+| Item | Version / path |
+|------|----------------|
+| npm | `agent-inspect@6.7.1` (and fixed-group packages) |
+| Quickstart | `npx agent-inspect init --yes` → demo → `list` → `verify-safe` |
+| Packed E2E (maintainers) | `pnpm run pack:smoke` |
+| Demo script | [DEMO-SCRIPT.md](DEMO-SCRIPT.md) |
+| Design partner guide | [DESIGN-PARTNER-GUIDE.md](DESIGN-PARTNER-GUIDE.md) |
+| Broken-agent starter | `examples/starters/broken-agent-debugging` |
+| Studio (Beta) | `@agent-inspect/studio` — customer-owned, local |
+
+## Partner trial checklist (copy per team)
+
+1. Install `agent-inspect@6.7.1` on Node ≥ 20.
+2. Complete five-minute quickstart (init → one run → verify-safe).
+3. Run at least one framework path (AI SDK, OpenAI Agents, or LangChain) **or** observe/manual path.
+4. Optionally run Studio against a local workspace.
+5. Optionally retain a CI check/suite gate on a PR.
+6. Return dated findings: blockers, what worked, whether they will keep using it.
+
+## Evidence required before distinct 6.8.0
+
+From the canonical roadmap:
+
+- One design-partner Studio trial (sign-off row)
+- Three **external** teams with golden-path trial
+- At least one retained CI contract/gate per pilot set
+- At least one Studio trial in the pilot set
+- Dated findings — no internal-only rows
+
+## Maintainer stop condition
+
+When this kit is prepared and 6.7.1 is on npm:
+
+```text
+trainStatus: blocked-on-external-pilot
+```
+
+Do **not** schedule or implement v7 until adoption gates in [implementation/release-trains/V7.0.0-READINESS-ASSESSMENT.md](implementation/release-trains/V7.0.0-READINESS-ASSESSMENT.md) are met and a maintainer explicitly authorizes a v7 train.

package/docs/SCREENSHOTS.md

@@ -1,6 +1,6 @@
 # Visual demos
 
-Curated terminal recordings and static diagrams for AgentInspect **3.5.x**. They show what the local trace workbench captures and how to inspect it — without a hosted dashboard or vendor upload.
+Curated terminal recordings and static diagrams for AgentInspect **6.7.x**. They show local capture → inspect → enforce → verify/bundle — without a maintainer-hosted dashboard or vendor upload.
 
 **Synthetic output only:** demos use committed [fixtures](../fixtures/README.md), [examples](../examples/README.md), and recipes. No external LLM calls or API keys.
 
@@ -12,21 +12,21 @@ Curated terminal recordings and static diagrams for AgentInspect **3.5.x**. They
 
 ---
 
-## README brand assets (v3.5.4)
+## README brand assets (6.7.x)
 
 | Asset | Use |
 | ----- | --- |
 | [agent-inspect-logo.svg](assets/agent-inspect-logo.svg) | Light-mode wordmark |
 | [agent-inspect-logo-dark.svg](assets/agent-inspect-logo-dark.svg) | Dark-mode wordmark |
-| [readme-product-loop.svg](assets/readme-product-loop.svg) | Capture → inspect → check → redact |
+| [readme-product-loop.svg](assets/readme-product-loop.svg) | Capture → understand → enforce → verify/bundle → local/Studio |
 
 Root README embeds the logo and product-loop SVG only. Terminal GIFs stay below.
 
 ---
 
-## Adoption demo (v3.5.2)
+## Adoption demo (6.7.x)
 
-Deterministic broken-agent flow — recommended for live demos and Show HN rehearsal.
+Deterministic broken-agent flow — recommended for live demos.
 
 **Run:**
 
@@ -34,7 +34,8 @@ Deterministic broken-agent flow — recommended for live demos and Show HN rehea
 cd examples/starters/broken-agent-debugging
 pnpm install && pnpm start
 npx agent-inspect report <run-id> --dir .agent-inspect
-npx agent-inspect redact .agent-inspect/*.jsonl --profile share -o safe.jsonl
+npx agent-inspect redact <run-id> --dir .agent-inspect --profile share -o safe.jsonl
+npx agent-inspect verify-safe <run-id> --dir .agent-inspect
 ```
 
 **GIF status:** re-record optional; use [error-handling.gif](assets/demos/error-handling.gif) as b-roll until a dedicated broken-agent GIF exists.

package/docs/SELF-HOSTING.md

@@ -0,0 +1,130 @@
+# Self-hosting AgentInspect Studio
+
+AgentInspect Studio is a **customer-owned**, **read-only** analyzer for multi-project workspaces. It is not a maintainer-hosted service.
+
+## Install
+
+```bash
+npm install agent-inspect @agent-inspect/studio
+```
+
+## Quick start (localhost)
+
+```bash
+npx agent-inspect studio --workspace ./studio-registry.json
+```
+
+Defaults:
+
+- bind: `127.0.0.1:7340`
+- database: `./.agent-inspect/studio.db` (SQLite, disposable cache)
+- JSONL + `workspace.json` remain canonical
+
+## Studio registry
+
+Create `studio-registry.json` beside your team workspace root:
+
+```json
+{
+  "schemaVersion": "1.0",
+  "name": "platform-team",
+  "projects": [
+    { "id": "support-agent", "path": "/path/to/project", "label": "Support Agent" }
+  ],
+  "import": {
+    "ciArtifactsDir": "./imports/ci",
+    "bundlesDir": "./imports/bundles"
+  }
+}
+```
+
+Each `projects[].path` must contain `.agent-inspect/workspace.json` (v4 layout).
+
+Optional **file-drop ingest** (v6.1+, disabled by default):
+
+```bash
+npx agent-inspect studio import drop --workspace ./studio-registry.json
+npx agent-inspect studio --ingest file-drop --workspace ./studio-registry.json
+```
+
+Registry `import.fileDropDir` points at the watched folder; allowlisted files (`.jsonl`, `.suite.json`, `.tgz`, `.zip`) copy into `import.ciArtifactsDir` / `import.bundlesDir` with idempotent SQLite bookkeeping. Ingest stays off until you pass `--ingest file-drop` or run `studio import drop`.
+
+**GitHub Actions artifacts** (v6.1+, operator-initiated pull only):
+
+```bash
+export GITHUB_TOKEN=...   # actions:read on your repo
+npx agent-inspect studio import github \
+  --repo owner/name \
+  --run-id 123456789 \
+  --artifact ci-artifacts \
+  --workspace ./studio-registry.json
+```
+
+Downloads the artifact zip into `import.bundlesDir`, records idempotent ingest bookkeeping, and refreshes the studio project index. No maintainer GitHub App or AgentInspect proxy — CI tests use checked-in fixture archives only.
+
+**Manual bundle upload** (v6.1+):
+
+```bash
+npx agent-inspect bundle <run-id> --profile share --out ./bundle-out
+npx agent-inspect studio import bundle --path ./bundle-out --workspace ./studio-registry.json
+```
+
+Validates `metadata.json` from a local share-safe bundle directory before copying into `import.bundlesDir`.
+
+**HTTP ingest** (v6.1+, disabled by default):
+
+```bash
+export STUDIO_INGEST_TOKEN=$(openssl rand -hex 32)
+npx agent-inspect studio --ingest http --ingest-token-env STUDIO_INGEST_TOKEN
+# POST /api/ingest/bundle or /api/ingest/artifact with Authorization: Bearer $STUDIO_INGEST_TOKEN
+```
+
+HTTP ingest stays off until `--ingest http` or `ingest.http.enabled: true` in the registry. Token required on every POST.
+
+## Ingestion security model (v6.1)
+
+| Control | Behavior |
+| ------- | -------- |
+| Default | All ingest channels off |
+| File-drop | Explicit CLI or `--ingest file-drop` only |
+| GitHub | Operator-initiated pull with their token only |
+| HTTP POST | Explicit enable + `STUDIO_INGEST_TOKEN` (constant-time validation) |
+| Body size | Bounded (default 50MB) |
+| Paths | Traversal guards; server chooses dest under registry `import.*` |
+| Secrets | Tokens never logged; safe error messages only |
+| Network | Studio never phones home; no maintainer upload target |
+| Data | Imported files are read-only evidence; JSONL canonical |
+
+Combine `--auth basic` when binding beyond localhost. Review imported artifacts with `scan` / `verify-safe` before sharing outside your network.
+
+## Network exposure
+
+- **Default:** localhost only.
+- **`--server`:** binds `0.0.0.0` with an explicit startup warning.
+- **`--auth basic --password-env STUDIO_PASSWORD`:** optional HTTP Basic auth (recommended for non-localhost).
+
+Studio performs **no default upload**. Read routes are GET-only; optional **ingest POST routes** exist only when HTTP ingest is explicitly enabled (v6.1+).
+
+## API surface (read-only)
+
+| Route | Purpose |
+| ----- | ------- |
+| `GET /api/health` | Studio status |
+| `GET /api/projects` | Registered projects |
+| `GET /api/projects/:id/runs` | Run list |
+| `GET /api/projects/:id/sessions` | Session index |
+| `GET /api/projects/:id/suites` | Suite results |
+| `GET /api/projects/:id/checks` | Check summaries |
+| `GET /api/search?projectId=&q=` | Metadata search |
+| `GET /api/diff?projectId=&left=&right=` | Regression diff |
+| `GET /api/bundles/export?projectId=&runId=` | Bundle export hints (CLI assembly) |
+
+## Postgres
+
+Postgres URLs are reserved for team deployments and are **not required** for local use. v6.0 ships SQLite by default in `@agent-inspect/studio` only — never in root/core.
+
+## Related docs
+
+- [SELF-HOSTED-STUDIO-V6.0.md](./proposals/SELF-HOSTED-STUDIO-V6.0.md)
+- [CLIENT-HOSTED-INGESTION-V6.1.md](./proposals/CLIENT-HOSTED-INGESTION-V6.1.md)
+- [LOCAL-TRACE-WORKSPACE.md](./proposals/LOCAL-TRACE-WORKSPACE.md)

package/docs/SESSIONS-AND-OUTCOMES.md

@@ -0,0 +1,19 @@
+# Sessions and observed outcomes
+
+## Sessions
+
+Workflow sessions group related runs (retries, handoffs, multi-agent activity) using **explicit metadata** — AgentInspect does not invent causal links from timestamps alone.
+
+Useful CLI entry points: `sessions`, `search`, activity views (see [CLI.md](./CLI.md)).
+
+## Observed outcomes
+
+Outcomes record what the agent produced or decided at a high level for later review and gates. They remain local JSONL-derived evidence.
+
+## Limitations
+
+- Session indexing is not a full workflow contract engine
+- Handoff / approval TraceContract rules are not fully wired — see [TRACE-CONTRACTS.md](./TRACE-CONTRACTS.md)
+- Studio session pages may still be thinner than APIs — Studio is Beta
+
+Related: [WORKSPACE.md](./WORKSPACE.md) · [USE-CASES.md](./USE-CASES.md)

package/docs/STANDARDS.md

@@ -0,0 +1,45 @@
+# Standards interop (v6.4+)
+
+AgentInspect persists **AgentInspect JSONL** locally. Standards exports are **compatibility copies** for review and optional import — not a replacement persisted schema.
+
+## OpenInference (experimental)
+
+```bash
+npx agent-inspect export <run-id> --format openinference --profile share
+```
+
+Validate fixtures:
+
+```ts
+import {
+  validateOpenInferenceFixture,
+  validateOpenInferenceSemanticFixture,
+} from "agent-inspect/exporters";
+```
+
+Shape validation is **compatible**; semantic checks add field-level warnings for tested fixtures only.
+
+Fixture: [fixtures/standards/openinference-basic.json](../fixtures/standards/openinference-basic.json)
+
+## OTLP JSON (experimental)
+
+```bash
+npx agent-inspect export <run-id> --format otlp-json --profile share
+```
+
+GenAI attribute mapping follows `OTEL_GEN_AI_SEMCONV_PIN` (see exporters API). No gRPC collector included.
+
+Fixture: [fixtures/standards/otlp-basic.json](../fixtures/standards/otlp-basic.json)
+
+## Import recipes
+
+- [Phoenix / OpenInference](../examples/recipes/phoenix-openinference-import/)
+- [Langfuse self-hosted](../examples/recipes/langfuse-local-import/)
+
+## Vendor graduation (manual)
+
+- [New Relic](./vendors/NEW-RELIC.md)
+- [Datadog](./vendors/DATADOG.md)
+- [Honeycomb](./vendors/HONEYCOMB.md)
+
+Review redacted exports before sharing. See [SAFE-TRACE-SHARING.md](./SAFE-TRACE-SHARING.md).

package/docs/SUITES-COHORTS-GATES.md

@@ -0,0 +1,34 @@
+# Suites, cohorts, and gates
+
+**Support level:** Beta  
+
+Deterministic regression tooling over local traces and workspaces.
+
+## Suites
+
+- Validate expectations against **existing** traces (`suite validate` / config-driven checks)
+- Aggregate status must not pass when all cases are missing evidence (all-skipped semantics)
+- Executable “fresh run” modes exist only where harness/suite run is implemented — do not assume every template executes live agents
+
+## Cohorts
+
+- Baseline vs candidate comparison with tolerances
+- Sample counts, missing values, and insufficient-evidence / not-comparable states
+- Not every positive delta is a regression
+
+## Gates
+
+- CI-oriented thresholds (error rate, duration, etc.)
+- Invalid ranges (negative / NaN / out-of-range percentages) are rejected
+- Exit codes are intended for CI fail-closed use
+
+## Artifacts
+
+Suites/gates can emit local reports and CI summaries. Prefer share profiles before attaching to PRs.
+
+## Limitations
+
+- Cross-platform consumer matrix rows may still be pending in adoption evidence
+- Full golden-path automation (broken → contract → suite → Studio) is only partially covered by scripts — see [GOLDEN-PATH.md](./GOLDEN-PATH.md)
+
+Related: [CI-ARTIFACTS.md](./CI-ARTIFACTS.md) · [TRACE-CONTRACTS.md](./TRACE-CONTRACTS.md) · [CLI.md](./CLI.md)

package/docs/SUPPORT-LEVELS.md

@@ -0,0 +1,47 @@
+# Support levels
+
+Canonical maturity labels for AgentInspect public packages and major surfaces (6.7.x).
+
+## Definitions
+
+| Level | Meaning |
+| ----- | ------- |
+| **Stable** | Core contracts intended for long-term use; breaking changes require a major version |
+| **Supported** | Officially maintained; API may evolve with minors; documented and tested |
+| **Beta** | Useful and tested; API or UX may change; known limitations disclosed |
+| **Preview** | Early surface; expect gaps; not for production-critical workflows alone |
+| **Experimental** | Research / extension; may be removed or redesigned |
+
+## Package matrix (fixed release line)
+
+| Package / surface | Level |
+| ----------------- | ----- |
+| `agent-inspect` core schema, readers, writers, inspection CLI | Stable |
+| Redaction engine / `@agent-inspect/redact` | Stable |
+| Deterministic checks (`agent-inspect/checks`) | Stable |
+| Official adapters (ai-sdk, openai-agents, langchain) | Supported |
+| Vitest / Jest reporters | Supported |
+| `@agent-inspect/harness` | Supported |
+| Workspace / bundles / observed outcomes | Supported |
+| TraceContract API | Beta |
+| Suites / cohorts / gates | Beta |
+| `@agent-inspect/index-sqlite` | Beta |
+| `@agent-inspect/viewer` | Beta |
+| `@agent-inspect/adapter-sdk` / plugins | Beta |
+| `@agent-inspect/studio` | Beta |
+| Studio HTTP / GitHub ingest | Preview |
+| `@agent-inspect/mcp-server` | Preview |
+| Standards round-trip / Collector–Phoenix external proof | Preview |
+| Vitest/Jest TraceContract matchers | **Not shipped** |
+
+Part of the fixed AgentInspect release line — see the npm badge for the current version.
+
+## Compatibility promise
+
+- Persisted schema **1.0**; v0.1 / v0.2 / 1.0 traces remain readable
+- Optional packages do not add root/core runtime dependencies
+- Network behavior is explicit (see [NETWORK-BEHAVIOR.md](./NETWORK-BEHAVIOR.md))
+
+## Promotion criteria
+
+A surface moves up only with tests, docs, packed smoke where relevant, and honest limitation disclosure — not changelog marketing alone.

package/docs/TRACE-CONTRACTS.md

@@ -0,0 +1,39 @@
+# Trace contracts
+
+**Support level:** Beta  
+
+Typed trajectory expectations over local AgentInspect traces via `defineTraceContract` / `evaluateTraceContract` (`agent-inspect/checks`).
+
+## What is shipped
+
+Contracts compile to deterministic check rules for common cases:
+
+- run status / completion / max duration
+- tool required / forbidden / allowed / maxCalls / order
+- LLM maxCalls / maxTotalTokens / allowedModels
+- evidence-bearing findings on failures
+
+See [API.md](./API.md) and `packages/core/src/checks/contract.ts`.
+
+## What is not shipped (yet)
+
+Do **not** document these as available:
+
+- Vitest / Jest `expectTrace(...).toSatisfyTraceContract` matchers
+- Full workflow handoff / approval / MCP protocol contract rules
+- Per-tool argument schema / regex validators on the contract surface
+- Every structure rule (orphan/cycle/depth) exposed on the contract API (many exist as standalone check rules)
+
+## CLI relationship
+
+```bash
+npx agent-inspect check <run-id> --dir .agent-inspect
+```
+
+Suites and gates can consume check results; see [SUITES-COHORTS-GATES.md](./SUITES-COHORTS-GATES.md).
+
+## Limitations
+
+- Experimental/Beta API — may evolve in minors
+- Contract tests are smoke-level; prefer check-engine tests for deep rule coverage
+- Always review findings before treating a green check as product proof

package/docs/assets/readme-product-loop.svg

@@ -1,26 +1,35 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="760" height="140" viewBox="0 0 760 140" role="img" aria-label="AgentInspect product loop: capture, inspect, check, redact">
+<svg xmlns="http://www.w3.org/2000/svg" width="900" height="150" viewBox="0 0 900 150" role="img" aria-label="AgentInspect evidence loop: capture or import, understand causality, enforce expectations, verify and bundle, review locally or in customer-owned Studio">
   <defs>
     <marker id="arr" markerWidth="8" markerHeight="8" refX="6" refY="3" orient="auto">
       <path d="M0,0 L6,3 L0,6 Z" fill="#64748b"/>
     </marker>
   </defs>
-  <rect width="760" height="140" fill="#ffffff"/>
+  <rect width="900" height="150" fill="#ffffff"/>
   <g font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, sans-serif">
-    <rect x="16" y="28" width="150" height="72" rx="12" fill="#eef2ff" stroke="#6366f1" stroke-width="1.5"/>
-    <text x="91" y="58" text-anchor="middle" font-size="14" font-weight="600" fill="#312e81">Capture</text>
-    <text x="91" y="78" text-anchor="middle" font-size="11" fill="#475569">run, tools, adapters</text>
-    <path d="M174 64h28" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
-    <rect x="210" y="28" width="150" height="72" rx="12" fill="#ecfdf5" stroke="#10b981" stroke-width="1.5"/>
-    <text x="285" y="58" text-anchor="middle" font-size="14" font-weight="600" fill="#064e3b">Inspect</text>
-    <text x="285" y="78" text-anchor="middle" font-size="11" fill="#475569">tree, report, diff</text>
-    <path d="M368 64h28" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
-    <rect x="404" y="28" width="150" height="72" rx="12" fill="#fff7ed" stroke="#f59e0b" stroke-width="1.5"/>
-    <text x="479" y="58" text-anchor="middle" font-size="14" font-weight="600" fill="#78350f">Check</text>
-    <text x="479" y="78" text-anchor="middle" font-size="11" fill="#475569">CI, eval, stalls</text>
-    <path d="M562 64h28" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
-    <rect x="598" y="28" width="146" height="72" rx="12" fill="#f8fafc" stroke="#64748b" stroke-width="1.5"/>
-    <text x="671" y="58" text-anchor="middle" font-size="14" font-weight="600" fill="#0f172a">Redact</text>
-    <text x="671" y="78" text-anchor="middle" font-size="11" fill="#475569">share-safe artifact</text>
-    <text x="380" y="124" text-anchor="middle" font-size="12" fill="#64748b">local JSONL only - no account - no upload</text>
+    <rect x="10" y="24" width="150" height="78" rx="12" fill="#eef2ff" stroke="#6366f1" stroke-width="1.5"/>
+    <text x="85" y="52" text-anchor="middle" font-size="13" font-weight="600" fill="#312e81">Capture / import</text>
+    <text x="85" y="72" text-anchor="middle" font-size="10" fill="#475569">JSONL, adapters,</text>
+    <text x="85" y="86" text-anchor="middle" font-size="10" fill="#475569">logs, standards</text>
+    <path d="M168 63h22" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
+    <rect x="198" y="24" width="150" height="78" rx="12" fill="#ecfdf5" stroke="#10b981" stroke-width="1.5"/>
+    <text x="273" y="52" text-anchor="middle" font-size="13" font-weight="600" fill="#064e3b">Understand</text>
+    <text x="273" y="72" text-anchor="middle" font-size="10" fill="#475569">tree, timeline,</text>
+    <text x="273" y="86" text-anchor="middle" font-size="10" fill="#475569">report, diff</text>
+    <path d="M356 63h22" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
+    <rect x="386" y="24" width="150" height="78" rx="12" fill="#fff7ed" stroke="#f59e0b" stroke-width="1.5"/>
+    <text x="461" y="52" text-anchor="middle" font-size="13" font-weight="600" fill="#78350f">Enforce</text>
+    <text x="461" y="72" text-anchor="middle" font-size="10" fill="#475569">checks, contracts,</text>
+    <text x="461" y="86" text-anchor="middle" font-size="10" fill="#475569">suites, CI gates</text>
+    <path d="M544 63h22" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
+    <rect x="574" y="24" width="150" height="78" rx="12" fill="#f8fafc" stroke="#64748b" stroke-width="1.5"/>
+    <text x="649" y="52" text-anchor="middle" font-size="13" font-weight="600" fill="#0f172a">Verify / bundle</text>
+    <text x="649" y="72" text-anchor="middle" font-size="10" fill="#475569">redact, verify-safe,</text>
+    <text x="649" y="86" text-anchor="middle" font-size="10" fill="#475569">offline bundle</text>
+    <path d="M732 63h22" stroke="#64748b" stroke-width="2" marker-end="url(#arr)"/>
+    <rect x="762" y="24" width="128" height="78" rx="12" fill="#f5f3ff" stroke="#7c3aed" stroke-width="1.5"/>
+    <text x="826" y="52" text-anchor="middle" font-size="13" font-weight="600" fill="#4c1d95">Review</text>
+    <text x="826" y="72" text-anchor="middle" font-size="10" fill="#475569">local or Studio</text>
+    <text x="826" y="86" text-anchor="middle" font-size="10" fill="#475569">Beta (yours)</text>
+    <text x="450" y="132" text-anchor="middle" font-size="12" fill="#64748b">No account · no default upload · metadata-only by default · optional customer-owned Studio</text>
   </g>
 </svg>

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "agent-inspect",
-  "version": "6.7.0",
+  "version": "6.7.2",
   "license": "MIT",
   "type": "module",
-  "description": "Trace, check, and safely share TypeScript AI-agent runs locally — no account, no upload, metadata-only by default",
+  "description": "Debug, regression-test, and safely share TypeScript AI-agent behavior locally — no account, no default upload, metadata-only by default",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rajudandigam/agent-inspect.git"
@@ -164,6 +164,17 @@
     "docs/DEMO-SCRIPT.md",
     "docs/TECHNICAL-GUIDE.md",
     "docs/WORKSPACE.md",
+    "docs/SELF-HOSTING.md",
+    "docs/STANDARDS.md",
+    "docs/BUNDLES.md",
+    "docs/INDEX.md",
+    "docs/SUPPORT-LEVELS.md",
+    "docs/NETWORK-BEHAVIOR.md",
+    "docs/TRACE-CONTRACTS.md",
+    "docs/SUITES-COHORTS-GATES.md",
+    "docs/SESSIONS-AND-OUTCOMES.md",
+    "docs/GOLDEN-PATH.md",
+    "docs/PRE-V7-PILOT-KIT.md",
     "docs/AI-SDK-ADOPTION.md",
     "docs/OPENAI-AGENTS-LOCAL.md",
     "docs/NESTJS.md",
@@ -212,10 +223,15 @@
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "size": "size-limit --config size-limit.config.mjs",
-    "test:all": "pnpm run typecheck && pnpm run test && pnpm run build && pnpm run size",
-    "prepublish:checks": "pnpm run typecheck && pnpm run test && pnpm run test:coverage && pnpm run build && pnpm run fixtures:check && pnpm run recipes:check && pnpm run size && pnpm run pack:smoke",
+    "test:all": "pnpm run typecheck && pnpm run linked-versions:check && pnpm run test && pnpm run build && pnpm run size",
+    "prepublish:checks": "pnpm run typecheck && pnpm run test && pnpm run test:coverage && pnpm run build && pnpm run fixtures:check && pnpm run recipes:check && pnpm run size && pnpm run linked-versions:check && pnpm run pack:smoke",
     "pack:dry-run": "pnpm run build && npm pack --dry-run",
     "pack:smoke": "pnpm run build && node scripts/package-smoke.mjs && node scripts/packed-quickstart-e2e.mjs",
+    "linked-versions:check": "node scripts/check-linked-versions.mjs",
+    "docs:commands": "node scripts/validate-doc-commands.mjs",
+    "docs:links": "node scripts/validate-doc-links.mjs",
+    "public-truth:check": "node scripts/validate-public-truth.mjs",
+    "docs:check": "pnpm run docs:commands && pnpm run docs:links && pnpm run public-truth:check",
     "compat:smoke": "node scripts/compat-smoke.mjs",
     "fixtures:check": "node scripts/validate-fixtures.mjs",
     "recipes:check": "node scripts/validate-recipes.mjs",

package/packages/cli/dist/index.cjs

@@ -10788,7 +10788,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "6.7.0";
+var version = "6.7.2";
 
 // packages/cli/src/list.ts
 init_advanced();