agent-inspect 6.8.0 → 6.10.0

package/packages/cli/dist/index.mjs

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, enrichSessionRunRecord, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, extractMetadata, filterTraces, truncateName, getTraceFilePath, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, openTrace, TraceReadError, filterMetasBySessionScope, runTraceChecks, aggregateSessionCheckResults, createBaselineRegressionRule, resolveBundleRunIds, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, buildBundleMetadata, buildBundleSummaryMarkdown, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, Redactor, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, assertBundlePathContained, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, escapeMarkdown, escapeHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, resolveRedactionProfile, applyProfileMetadataCaps, flattenTree, safeString, compactAttributes, stableJson, truncateStringForProfile } from './chunk-TO4VENHV.mjs';
+import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, filterMetasBySessionScope, aggregateSessionCheckResults, createBaselineRegressionRule, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, diffRuns, manualTraceEventsToComparableRun } from './chunk-36IJ76LH.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
-import path14 from 'path';
+import path15 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, Option } from 'commander';
-import { unlink, stat, mkdir, writeFile, appendFile, readFile, rm, access, open, readdir, constants } from 'fs/promises';
+import { readFile, stat, mkdir, writeFile, unlink, appendFile, rm, access, open, readdir, constants } from 'fs/promises';
 import process2, { stdin, stdout } from 'process';
 import crypto, { createHash } from 'crypto';
 import { createServer } from 'http';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.8.0";
+var version = "6.10.0";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -2971,9 +2971,9 @@ Trace directory: ${traceDir}`);
     process.exitCode = 1;
   }
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path14.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path15.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path14.dirname(outPath), { recursive: true });
+    await mkdir(path15.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     const vlabel = validation !== void 0 ? validation.ok ? "ok" : "failed" : "skipped";
     console.log(`Wrote ${result.fileExtension} export to ${outPath} (validation: ${vlabel})`);
@@ -3011,471 +3011,6 @@ Trace directory: ${traceDir}`);
   }
 }
 
-// packages/core/src/diff/comparable.ts
-function extractOutputPreview(meta) {
-  if (meta === void 0) return void 0;
-  if ("outputPreview" in meta) return meta.outputPreview;
-  if ("resultPreview" in meta) return meta.resultPreview;
-  return void 0;
-}
-function mapStepStatus2(s) {
-  if (s === void 0) return "running";
-  return s;
-}
-function manualTraceEventsToComparableRun(events) {
-  const started = events.find((e) => e.event === "run_started");
-  if (!started || started.event !== "run_started") {
-    throw new Error("Invalid trace: missing run_started");
-  }
-  const rs = started;
-  const runId = rs.runId;
-  const completedAll = events.filter((e) => e.event === "run_completed");
-  const lastCompleted = completedAll[completedAll.length - 1];
-  let runStatus;
-  if (lastCompleted === void 0) runStatus = "running";
-  else runStatus = lastCompleted.status;
-  const durationMs2 = lastCompleted !== void 0 && Number.isFinite(lastCompleted.durationMs) ? lastCompleted.durationMs : void 0;
-  const steps = /* @__PURE__ */ new Map();
-  let order = 0;
-  for (const e of events) {
-    if (e.event !== "step_started") continue;
-    const s = e;
-    const meta = s.metadata ? { ...s.metadata } : void 0;
-    steps.set(s.stepId, {
-      id: s.stepId,
-      parentId: s.parentId,
-      name: s.name,
-      type: s.type,
-      order: order++,
-      timestamp: s.timestamp,
-      metadata: meta
-    });
-  }
-  for (const e of events) {
-    if (e.event !== "step_completed") continue;
-    const acc = steps.get(e.stepId);
-    if (!acc) continue;
-    acc.status = e.status;
-    acc.durationMs = e.durationMs;
-    if (e.error?.message) acc.errorMsg = e.error.message;
-    const extra = e;
-    if (extra.metadata !== void 0 && typeof extra.metadata === "object") {
-      acc.metadata = { ...acc.metadata ?? {}, ...extra.metadata };
-    }
-  }
-  const nodes = /* @__PURE__ */ new Map();
-  for (const acc of steps.values()) {
-    let meta = acc.metadata ? { ...acc.metadata } : void 0;
-    if (acc.parentId !== void 0 && !steps.has(acc.parentId)) {
-      meta = { ...meta ?? {}, agent_inspect_diff_parent_missing: true };
-    }
-    const outputPreview = extractOutputPreview(meta);
-    if (meta !== void 0 && ("outputPreview" in meta || "resultPreview" in meta)) {
-      delete meta.outputPreview;
-      delete meta.resultPreview;
-    }
-    const sc = {
-      id: acc.id,
-      name: acc.name,
-      type: acc.type,
-      status: mapStepStatus2(acc.status),
-      durationMs: acc.durationMs,
-      error: acc.errorMsg,
-      metadata: meta && Object.keys(meta).length > 0 ? meta : void 0,
-      outputPreview,
-      children: []
-    };
-    nodes.set(acc.id, sc);
-  }
-  const roots = [];
-  const sortByOrder = (a, b) => {
-    const oa = steps.get(a.id)?.order ?? 0;
-    const ob = steps.get(b.id)?.order ?? 0;
-    return oa - ob;
-  };
-  for (const acc of steps.values()) {
-    const node = nodes.get(acc.id);
-    if (acc.parentId !== void 0 && nodes.has(acc.parentId)) {
-      nodes.get(acc.parentId).children.push(node);
-    } else {
-      roots.push(node);
-    }
-  }
-  roots.sort(sortByOrder);
-  for (const n of nodes.values()) {
-    n.children.sort(sortByOrder);
-  }
-  return {
-    runId,
-    name: rs.name,
-    status: runStatus,
-    durationMs: durationMs2,
-    steps: roots
-  };
-}
-
-// packages/core/src/diff/engine.ts
-var DEFAULT_THRESHOLD_MS = 0;
-function pathSeg(step, index) {
-  return { index, name: step.name, stepId: step.id };
-}
-function buildPath(segments) {
-  return { path: [...segments] };
-}
-function pairSteps(left, right) {
-  const usedRight = /* @__PURE__ */ new Set();
-  const pairs = [];
-  for (let i = 0; i < left.length; i++) {
-    const L = left[i];
-    let R = right.find((r) => !usedRight.has(r.id) && r.id === L.id);
-    if (R === void 0 && i < right.length && !usedRight.has(right[i].id)) {
-      const cand = right[i];
-      if (cand.name === L.name && (cand.type ?? "") === (L.type ?? "")) {
-        R = cand;
-      }
-    }
-    if (R === void 0) {
-      R = right.find(
-        (r) => !usedRight.has(r.id) && r.name === L.name && (r.type ?? "") === (L.type ?? "")
-      );
-    }
-    if (R !== void 0) {
-      usedRight.add(R.id);
-      pairs.push([L, R]);
-    } else {
-      pairs.push([L, void 0]);
-    }
-  }
-  for (const R of right) {
-    if (!usedRight.has(R.id)) {
-      pairs.push([void 0, R]);
-    }
-  }
-  return pairs;
-}
-function compareLeafSteps(L, R, segments, opts, out) {
-  const path25 = buildPath(segments);
-  if (L.name !== R.name) {
-    out.push({
-      kind: "structure",
-      severity: "warning",
-      message: "Step name differs",
-      path: path25,
-      left: L.name,
-      right: R.name
-    });
-  }
-  if ((L.type ?? "") !== (R.type ?? "")) {
-    out.push({
-      kind: "step-type",
-      severity: "warning",
-      message: "Step type differs",
-      path: path25,
-      left: L.type,
-      right: R.type
-    });
-  }
-  if ((L.status ?? "") !== (R.status ?? "")) {
-    out.push({
-      kind: "step-status",
-      severity: "warning",
-      message: "Step status differs",
-      path: path25,
-      left: L.status,
-      right: R.status
-    });
-  }
-  const le = L.error ?? "";
-  const re = R.error ?? "";
-  if (le !== re) {
-    out.push({
-      kind: "error",
-      severity: "error",
-      message: "Step error message differs",
-      path: path25,
-      left: le || void 0,
-      right: re || void 0
-    });
-  }
-  if (!opts.ignoreDuration) {
-    const ld = L.durationMs;
-    const rd = R.durationMs;
-    const th = opts.durationThresholdMs;
-    let differs = false;
-    if (ld === void 0 && rd === void 0) differs = false;
-    else if (ld === void 0 || rd === void 0) differs = true;
-    else differs = Math.abs(ld - rd) > th;
-    if (differs) {
-      out.push({
-        kind: "duration",
-        severity: "info",
-        message: "Step duration differs",
-        path: path25,
-        left: ld,
-        right: rd
-      });
-    }
-  }
-  const lm = stableJson(L.metadata ?? {});
-  const rm3 = stableJson(R.metadata ?? {});
-  if (lm !== rm3) {
-    out.push({
-      kind: "metadata",
-      severity: "info",
-      message: "Step metadata differs",
-      path: path25,
-      left: L.metadata,
-      right: R.metadata
-    });
-  }
-  const lo = stableJson(L.outputPreview ?? null);
-  const ro = stableJson(R.outputPreview ?? null);
-  if (lo !== ro) {
-    out.push({
-      kind: "output",
-      severity: "info",
-      message: "Output preview differs",
-      path: path25,
-      left: L.outputPreview,
-      right: R.outputPreview
-    });
-  }
-}
-function compareRecursive(L, R, segments, opts, out) {
-  compareLeafSteps(L, R, segments, opts, out);
-  const pairs = pairSteps(L.children, R.children);
-  let ci = 0;
-  for (const [lch, rch] of pairs) {
-    if (lch !== void 0 && rch !== void 0) {
-      compareRecursive(lch, rch, [...segments, pathSeg(lch, ci)], opts, out);
-    } else if (lch !== void 0) {
-      out.push({
-        kind: "step-removed",
-        severity: "warning",
-        message: `Step only in left run: ${lch.name}`,
-        path: buildPath([...segments, pathSeg(lch, ci)]),
-        left: lch.id,
-        right: void 0
-      });
-    } else if (rch !== void 0) {
-      out.push({
-        kind: "step-added",
-        severity: "warning",
-        message: `Step only in right run: ${rch.name}`,
-        path: buildPath([...segments, pathSeg(rch, ci)]),
-        left: void 0,
-        right: rch.id
-      });
-    }
-    ci += 1;
-  }
-}
-function mergeDiffDefaults(options) {
-  return {
-    ignoreDuration: options?.ignoreDuration ?? false,
-    durationThresholdMs: options?.durationThresholdMs !== void 0 ? options.durationThresholdMs : DEFAULT_THRESHOLD_MS,
-    focus: options?.focus ?? "all",
-    check: options?.check ?? "all"
-  };
-}
-function kindMatchesFilter(kind, merged) {
-  const { focus, check } = merged;
-  if (check !== "all") {
-    if (check === "structure") {
-      if (!["step-added", "step-removed", "structure", "step-type"].includes(kind)) return false;
-    } else if (check === "outputs") {
-      if (!["metadata", "output"].includes(kind)) return false;
-    } else if (check === "errors") {
-      if (!["run-status", "step-status", "error"].includes(kind)) return false;
-    } else if (check === "timing") {
-      if (kind !== "duration") return false;
-    }
-  }
-  if (focus !== "all") {
-    if (focus === "errors") {
-      if (!["run-status", "step-status", "error"].includes(kind)) return false;
-    } else if (focus === "structure") {
-      if (!["step-added", "step-removed", "structure", "step-type"].includes(kind)) return false;
-    } else if (focus === "outputs") {
-      if (!["metadata", "output"].includes(kind)) return false;
-    }
-  }
-  return true;
-}
-function diffRuns(left, right, options) {
-  const merged = mergeDiffDefaults(options);
-  const opts = {
-    ignoreDuration: merged.ignoreDuration,
-    durationThresholdMs: merged.durationThresholdMs
-  };
-  const raw = [];
-  if ((left.status ?? "") !== (right.status ?? "")) {
-    raw.push({
-      kind: "run-status",
-      severity: "warning",
-      message: "Run completion status differs",
-      left: left.status,
-      right: right.status
-    });
-  }
-  if (!merged.ignoreDuration) {
-    const ld = left.durationMs;
-    const rd = right.durationMs;
-    const th = merged.durationThresholdMs;
-    let differs = false;
-    if (ld === void 0 && rd === void 0) differs = false;
-    else if (ld === void 0 || rd === void 0) differs = true;
-    else differs = Math.abs(ld - rd) > th;
-    if (differs) {
-      raw.push({
-        kind: "duration",
-        severity: "info",
-        message: "Run duration differs",
-        left: ld,
-        right: rd
-      });
-    }
-  }
-  const pairs = pairSteps(left.steps, right.steps);
-  let idx = 0;
-  for (const [ls, rs] of pairs) {
-    if (ls !== void 0 && rs !== void 0) {
-      compareRecursive(ls, rs, [pathSeg(ls, idx)], opts, raw);
-      idx += 1;
-    } else if (ls !== void 0) {
-      raw.push({
-        kind: "step-removed",
-        severity: "warning",
-        message: `Step only in left run: ${ls.name}`,
-        path: buildPath([pathSeg(ls, idx)]),
-        left: ls.id,
-        right: void 0
-      });
-      idx += 1;
-    } else if (rs !== void 0) {
-      raw.push({
-        kind: "step-added",
-        severity: "warning",
-        message: `Step only in right run: ${rs.name}`,
-        path: buildPath([pathSeg(rs, idx)]),
-        left: void 0,
-        right: rs.id
-      });
-      idx += 1;
-    }
-  }
-  const differences = raw.filter((d) => kindMatchesFilter(d.kind, merged));
-  let errors = 0;
-  let warnings = 0;
-  let info = 0;
-  for (const d of differences) {
-    if (d.severity === "error") errors += 1;
-    else if (d.severity === "warning") warnings += 1;
-    else info += 1;
-  }
-  const firstVisible = differences[0];
-  const firstDivergence = firstVisible !== void 0 ? {
-    kind: "first-divergence",
-    severity: firstVisible.severity,
-    message: `First divergence: ${firstVisible.message}`,
-    path: firstVisible.path,
-    left: firstVisible.left,
-    right: firstVisible.right
-  } : void 0;
-  const summary = {
-    leftRunId: left.runId,
-    rightRunId: right.runId,
-    totalDifferences: differences.length,
-    errors,
-    warnings,
-    info,
-    firstDivergence
-  };
-  return { summary, differences };
-}
-
-// packages/core/src/diff/renderer.ts
-function formatPath(path25) {
-  if (path25 === void 0 || path25.path.length === 0) {
-    return "(run)";
-  }
-  return path25.path.map((s) => s.name).join(" > ");
-}
-function formatValue(v, verbose) {
-  if (v === void 0) return "(undefined)";
-  if (typeof v === "string") return v;
-  if (typeof v === "number" || typeof v === "boolean") return String(v);
-  const s = JSON.stringify(v);
-  if (verbose || s.length <= 120) return s;
-  return `${s.slice(0, 117)}...`;
-}
-function renderRunDiff(result, options) {
-  const verbose = options?.verbose === true;
-  const sev = (s, level) => {
-    return s;
-  };
-  const lines = [];
-  const { summary } = result;
-  lines.push("Run diff");
-  lines.push(`Left:  ${summary.leftRunId}`);
-  lines.push(`Right: ${summary.rightRunId}`);
-  lines.push("");
-  lines.push("Summary:");
-  lines.push(`  Differences: ${summary.totalDifferences}`);
-  lines.push(`  Errors: ${summary.errors}`);
-  lines.push(`  Warnings: ${summary.warnings}`);
-  lines.push(`  Info: ${summary.info}`);
-  lines.push("");
-  const fd = summary.firstDivergence;
-  const firstKind = result.differences[0]?.kind;
-  if (fd !== void 0) {
-    lines.push("First divergence:");
-    const where = formatPath(fd.path);
-    const displayKind = firstKind ?? fd.kind;
-    lines.push(`  ${displayKind} at ${where}`);
-    if (fd.left !== void 0 || fd.right !== void 0) {
-      lines.push(`    left: ${formatValue(fd.left, verbose)}`);
-      lines.push(`    right: ${formatValue(fd.right, verbose)}`);
-    }
-    lines.push("");
-  }
-  lines.push("Differences:");
-  if (result.differences.length === 0) {
-    lines.push("  (none)");
-    return lines.join("\n");
-  }
-  const showSides = (kind) => verbose || [
-    "run-status",
-    "step-status",
-    "error",
-    "duration",
-    "step-type",
-    "structure",
-    "step-added",
-    "step-removed"
-  ].includes(kind);
-  for (const d of result.differences) {
-    const tag = sev(`[${d.severity}]`, d.severity);
-    const pathStr = d.path !== void 0 ? ` ${formatPath(d.path)}` : "";
-    lines.push(`  ${tag} ${d.kind}${pathStr}`);
-    lines.push(`    ${d.message}`);
-    if (d.left !== void 0 || d.right !== void 0) {
-      if (showSides(d.kind)) {
-        lines.push(`    left: ${formatValue(d.left, verbose)}`);
-        lines.push(`    right: ${formatValue(d.right, verbose)}`);
-      }
-    }
-  }
-  return lines.join("\n");
-}
-
-// packages/core/src/diff/index.ts
-function diffTraceEvents(leftEvents, rightEvents, options) {
-  const left = manualTraceEventsToComparableRun(leftEvents);
-  const right = manualTraceEventsToComparableRun(rightEvents);
-  return diffRuns(left, right, options);
-}
-
 // packages/cli/src/diff.ts
 function parseFocus(s) {
   const v = (s ?? "all").trim().toLowerCase();
@@ -3576,7 +3111,10 @@ Trace directory: ${traceDir}`
   }
   console.log(
     renderRunDiff(result, {
-      verbose: options.verbose === true})
+      verbose: options.verbose === true,
+      color: false,
+      json: false
+    })
   );
 }
 
@@ -3779,7 +3317,7 @@ function indexedToMetadata(row, traceDir) {
     endedAt: row.endedAt ?? void 0,
     durationMs: row.durationMs ?? void 0,
     eventCount: 0,
-    filePath: path14.join(traceDir, row.file),
+    filePath: path15.join(traceDir, row.file),
     fileSize: 0,
     createdAt: new Date(row.mtimeMs)
   };
@@ -3808,7 +3346,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-Z5W27YCW.mjs');
+    const mod = await import('./src-YFN3Q3GP.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -4257,9 +3795,9 @@ async function reportCommand(runId, options = {}) {
     ...options.section ? { section: options.section } : {}
   });
   const resolvedOutput = resolveOutputOption(options);
-  const outPath = resolvedOutput !== void 0 ? path14.resolve(resolvedOutput) : void 0;
+  const outPath = resolvedOutput !== void 0 ? path15.resolve(resolvedOutput) : void 0;
   if (outPath !== void 0) {
-    await mkdir(path14.dirname(outPath), { recursive: true });
+    await mkdir(path15.dirname(outPath), { recursive: true });
     await writeFile(outPath, result.content, "utf-8");
     console.log(`Wrote ${result.fileExtension} report to ${outPath}`);
   }
@@ -4309,7 +3847,12 @@ var SHARE_PROFILE_EXTRA_KEYS = [
   "organizationId",
   "traceId",
   "spanId",
-  "parentSpanId"
+  "parentSpanId",
+  "currentTask",
+  "task",
+  "userInput",
+  "requestText",
+  "conversationText"
 ];
 var STRICT_PROFILE_EXTRA_KEYS = [
   "prompt",
@@ -4377,6 +3920,61 @@ function passesLuhn(value) {
   }
   return sum % 10 === 0;
 }
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var EPOCH_MS_RE = /^1[0-9]{12}$/;
+var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
+function pathSuggestsNonCard(path26) {
+  const normalized = path26.toLowerCase().replace(/[^a-z0-9._]/g, "");
+  return /(^|\.)(tokenusage|usage)(\.|$)/.test(normalized) || /(startedat|endedat|durationms|timestamp|createdat|updatedat)(\.|$)/.test(normalized) || /(^|\.)(runid|traceid|spanid|eventid|sessionid|userid|parentid|requestid|correlationid)(\.|$)/.test(
+    normalized
+  ) || /(^|\.)ts(\.|$)/.test(normalized);
+}
+function isUuidLike(value) {
+  return UUID_RE.test(value.trim());
+}
+function isPlausibleCardCandidate(candidate, fullValue) {
+  const digits = digitsOnly(candidate);
+  if (digits.length < 13 || digits.length > 19) return false;
+  if (!passesLuhn(candidate)) return false;
+  const trimmed = fullValue.trim();
+  if (isUuidLike(trimmed)) return false;
+  if (EPOCH_MS_RE.test(digits) && digitsOnly(trimmed) === digits && /^\d+$/.test(trimmed)) {
+    return false;
+  }
+  const start = fullValue.indexOf(candidate);
+  if (start >= 0) {
+    const before = fullValue[start - 1];
+    const after = fullValue[start + candidate.length];
+    if (before && /[A-Za-z0-9_]/.test(before)) return false;
+    if (after && /[A-Za-z0-9_]/.test(after)) return false;
+  }
+  return true;
+}
+function looksLikePathOrPackageOrUrl(value) {
+  const trimmed = value.trim();
+  if (/^(?:[a-z][a-z0-9+.-]*:)?\/\//i.test(trimmed)) return true;
+  if (/^webpack:/i.test(trimmed)) return true;
+  if (/^@[A-Za-z0-9_.-]+\/[A-Za-z0-9_.@/-]+$/.test(trimmed)) return true;
+  if (/^[A-Za-z]:[\\/]/.test(trimmed) || /^[/\\]/.test(trimmed)) return true;
+  if (/[\\/]/.test(trimmed) && !/\s/.test(trimmed)) return true;
+  return false;
+}
+function emailMatchIsPathAdjacent(value, index, length) {
+  const before = value[index - 1];
+  const after = value[index + length];
+  return before === "/" || before === "\\" || after === "/" || after === "\\";
+}
+function valueContainsEmail(value) {
+  if (looksLikePathOrPackageOrUrl(value)) return false;
+  EMAIL_RE.lastIndex = 0;
+  for (const match of value.matchAll(EMAIL_RE)) {
+    const text = match[0] ?? "";
+    const index = match.index ?? 0;
+    if (emailMatchIsPathAdjacent(value, index, text.length)) continue;
+    return true;
+  }
+  return false;
+}
 var credentialDetectors = [
   patternDetector({
     id: "value.authorizationHeader",
@@ -4424,10 +4022,12 @@ var credentialDetectors = [
     matchKind: "value",
     detect(input3) {
       if (typeof input3.value !== "string") return [];
+      if (pathSuggestsNonCard(input3.path)) return [];
+      if (isUuidLike(input3.value)) return [];
       const candidatePattern = /(?:\d[ -]?){13,19}/g;
       for (const match of input3.value.matchAll(candidatePattern)) {
         const candidate = match[0] ?? "";
-        if (passesLuhn(candidate)) {
+        if (isPlausibleCardCandidate(candidate, input3.value)) {
           return [{ action: "replace", severity: "error", matchKind: "value" }];
         }
       }
@@ -4436,10 +4036,15 @@ var credentialDetectors = [
   }
 ];
 var identifierDetectors = [
-  patternDetector({
+  {
     id: "value.email",
-    pattern: /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/i
-  }),
+    severity: "warning",
+    matchKind: "value",
+    detect(input3) {
+      if (typeof input3.value !== "string") return [];
+      return valueContainsEmail(input3.value) ? [{ action: "replace", severity: "warning", matchKind: "value" }] : [];
+    }
+  },
   patternDetector({
     id: "value.phone",
     pattern: /\b(?:\+\d{1,3}[\s.-]?)?(?:\(?\d{3}\)?[\s.-])\d{3}[\s.-]\d{4}\b/
@@ -4506,17 +4111,17 @@ function applyRule(rule, value, replacement) {
   }
   return value;
 }
-function childPath(path25, key) {
+function childPath(path26, key) {
   if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)) {
-    return path25 ? `${path25}.${key}` : key;
+    return path26 ? `${path26}.${key}` : key;
   }
-  return `${path25 || "$"}[${JSON.stringify(key)}]`;
+  return `${path26 || "$"}[${JSON.stringify(key)}]`;
 }
-function indexPath(path25, index) {
-  return `${path25 || "$"}[${index}]`;
+function indexPath(path26, index) {
+  return `${path26 || "$"}[${index}]`;
 }
-function makeFinding(path25, detector, action, matchKind, severity = "warning", preview) {
-  return preview === void 0 ? { path: path25, detector, action, severity, matchKind } : { path: path25, detector, action, severity, matchKind, preview };
+function makeFinding(path26, detector, action, matchKind, severity = "warning", preview) {
+  return preview === void 0 ? { path: path26, detector, action, severity, matchKind } : { path: path26, detector, action, severity, matchKind, preview };
 }
 function createRedactionProfile(profile = "local") {
   switch (profile) {
@@ -4585,11 +4190,11 @@ var Redactor2 = class {
   #recordFinding(state, finding) {
     if (this.#collectFindings) state.findings.push(finding);
   }
-  #redactValue(value, key, path25, depth, state) {
+  #redactValue(value, key, path26, depth, state) {
     if (depth > this.#maxDepth) {
       this.#recordFinding(
         state,
-        makeFinding(path25, "structure.maxDepth", "truncate", "value", "warning")
+        makeFinding(path26, "structure.maxDepth", "truncate", "value", "warning")
       );
       return "[Truncated]";
     }
@@ -4598,19 +4203,19 @@ var Redactor2 = class {
       if (rule) {
         this.#recordFinding(
           state,
-          makeFinding(path25, `key.${rule.key}`, actionForRule(rule), "key", "warning")
+          makeFinding(path26, `key.${rule.key}`, actionForRule(rule), "key", "warning")
         );
         return applyRule(rule, value, this.#replacement);
       }
     }
     for (const detector of this.#detectors) {
-      const detections = detector.detect({ path: path25, key, value });
+      const detections = detector.detect({ path: path26, key, value });
       for (const detection of detections) {
         const action = detection.action ?? "replace";
         this.#recordFinding(
           state,
           makeFinding(
-            path25,
+            path26,
             detector.id,
             action,
             detection.matchKind ?? detector.matchKind ?? "custom",
@@ -4628,7 +4233,7 @@ var Redactor2 = class {
       const out = [];
       state.seen.set(value, out);
       value.forEach((item, index) => {
-        out[index] = this.#redactValue(item, void 0, indexPath(path25, index), depth + 1, state);
+        out[index] = this.#redactValue(item, void 0, indexPath(path26, index), depth + 1, state);
       });
       return out;
     }
@@ -4640,7 +4245,7 @@ var Redactor2 = class {
         out[entryKey] = this.#redactValue(
           entryValue,
           entryKey,
-          childPath(path25 === "$" ? "" : path25, entryKey),
+          childPath(path26 === "$" ? "" : path26, entryKey),
           depth + 1,
           state
         );
@@ -4760,6 +4365,16 @@ function redactJsonlText(content, profile) {
   };
 }
 function redactDocument(content, profile) {
+  const trimmed = content.trim();
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed)) {
+        return redactJsonlText(content, profile);
+      }
+    } catch {
+    }
+  }
   try {
     return redactJsonText(content, profile);
   } catch {
@@ -5091,14 +4706,14 @@ function uniqueSorted(values) {
   return [...new Set(values)].sort();
 }
 function isWithinDirectory(child, parent) {
-  const relative = path14.relative(parent, child);
-  return relative === "" || !relative.startsWith("..") && !path14.isAbsolute(relative);
+  const relative = path15.relative(parent, child);
+  return relative === "" || !relative.startsWith("..") && !path15.isAbsolute(relative);
 }
 async function resolveOutputPath(inputPath, output2, force) {
   if (output2 === void 0 || output2.trim() === "") return void 0;
-  const inputAbs = path14.resolve(inputPath);
-  const outputAbs = path14.resolve(output2.trim());
-  const inputDir = path14.dirname(inputAbs);
+  const inputAbs = path15.resolve(inputPath);
+  const outputAbs = path15.resolve(output2.trim());
+  const inputDir = path15.dirname(inputAbs);
   if (!isWithinDirectory(outputAbs, inputDir)) {
     throw new Error("Refusing to write migrated output outside the input directory.");
   }
@@ -5219,7 +4834,7 @@ async function migrateCommand(input3, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const inputPath = path14.resolve(input3.trim());
+  const inputPath = path15.resolve(input3.trim());
   const dryRun = options.dryRun === true;
   if (!dryRun && (options.output === void 0 || options.output.trim() === "")) {
     console.error("migrate requires --dry-run or --output <path>.");
@@ -5238,7 +4853,7 @@ async function migrateCommand(input3, options = {}) {
     );
     const result = await buildMigration(inputPath, outputPath);
     if (!dryRun && outputPath !== void 0) {
-      await mkdir(path14.dirname(outputPath), { recursive: true });
+      await mkdir(path15.dirname(outputPath), { recursive: true });
       await writeFile(outputPath, result.content, "utf-8");
     }
     printSummary2(result, dryRun);
@@ -5568,23 +5183,23 @@ function evaluatePromptInjection(text, options = {}) {
   }
   return fail(ruleId, `Matched ${evidence.length} injection pattern(s).`, evidence, "warning");
 }
-function validateSchemaField(value, field, path25, evidence) {
+function validateSchemaField(value, field, path26, evidence) {
   const ruleId = "guardrail.structured-output";
   if (field.type) {
     const actual = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
     if (actual !== field.type) {
-      evidence.push({ ruleId, path: path25, preview: `expected ${field.type}, got ${actual}` });
+      evidence.push({ ruleId, path: path26, preview: `expected ${field.type}, got ${actual}` });
       return;
     }
   }
   if (field.enum && !field.enum.some((item) => Object.is(item, value))) {
-    evidence.push({ ruleId, path: path25, preview: "value not in enum" });
+    evidence.push({ ruleId, path: path26, preview: "value not in enum" });
   }
   if (field.type === "object" && field.required && value && typeof value === "object" && !Array.isArray(value)) {
     const record = value;
     for (const key of field.required) {
       if (!(key in record)) {
-        evidence.push({ ruleId, path: `${path25}.${key}`, preview: "missing required key" });
+        evidence.push({ ruleId, path: `${path26}.${key}`, preview: "missing required key" });
       }
     }
   }
@@ -5911,7 +5526,7 @@ function asConfig(value) {
 }
 async function loadConfig(configPath) {
   if (configPath === void 0) return {};
-  const extension = path14.extname(configPath);
+  const extension = path15.extname(configPath);
   if (TS_CONFIG_EXTENSIONS.has(extension)) {
     throw new Error(
       "TypeScript check configs require an explicit precompiled JavaScript config or future --config-loader support."
@@ -5920,7 +5535,7 @@ async function loadConfig(configPath) {
   if (!CONFIG_EXTENSIONS.has(extension)) {
     throw new Error("Unsupported check config extension. Use .json, .js, .mjs, or .cjs.");
   }
-  const absolute = path14.resolve(configPath);
+  const absolute = path15.resolve(configPath);
   if (extension === ".json") {
     const raw = await readFile(absolute, "utf-8");
     return asConfig(JSON.parse(raw));
@@ -6096,10 +5711,10 @@ function printHuman(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path25 = finding.evidence[0]?.path;
+    const path26 = finding.evidence[0]?.path;
     const run = finding.evidence[0]?.runId;
     const runPrefix = run ? `[${run}] ` : "";
-    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path25 ? ` (${path25})` : ""}`);
+    console.log(`- ${runPrefix}${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}`);
   }
 }
 function readErrorResult(error) {
@@ -6361,7 +5976,7 @@ async function loadSuiteViewerData(options) {
   for (const suiteCase of result.cases) {
     cases.push(await enrichCase(suiteCase, baselinePath));
   }
-  const artifactsDir = path14.join(path14.dirname(result.configPath), ".agent-inspect/suite-runs");
+  const artifactsDir = path15.join(path15.dirname(result.configPath), ".agent-inspect/suite-runs");
   return {
     suiteName: result.suiteName,
     configPath: result.configPath,
@@ -6554,19 +6169,19 @@ function serializeWorkspaceManifest(manifest) {
 }
 var INDEX_DIR_NAME = "index";
 function resolveWorkspaceLocation(cwd = process.cwd()) {
-  const projectRoot = path14.resolve(cwd);
-  const workspaceDir = path14.join(projectRoot, WORKSPACE_DIR_NAME);
+  const projectRoot = path15.resolve(cwd);
+  const workspaceDir = path15.join(projectRoot, WORKSPACE_DIR_NAME);
   return {
     projectRoot,
     workspaceDir,
-    manifestPath: path14.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
+    manifestPath: path15.join(workspaceDir, WORKSPACE_MANIFEST_FILENAME)
   };
 }
 function resolveInsideWorkspace(workspaceDir, relative) {
-  const base = path14.resolve(workspaceDir);
-  const resolved = path14.resolve(base, relative);
-  const rel = path14.relative(base, resolved);
-  if (rel === "" || rel === "." || !rel.startsWith("..") && !path14.isAbsolute(rel)) {
+  const base = path15.resolve(workspaceDir);
+  const resolved = path15.resolve(base, relative);
+  const rel = path15.relative(base, resolved);
+  if (rel === "" || rel === "." || !rel.startsWith("..") && !path15.isAbsolute(rel)) {
     return resolved;
   }
   throw new Error(
@@ -6635,7 +6250,7 @@ async function createWorkspace(options = {}) {
     created = false;
     adopted = true;
   } else {
-    const project = options.project?.trim() || path14.basename(location.projectRoot) || "workspace";
+    const project = options.project?.trim() || path15.basename(location.projectRoot) || "workspace";
     const traceDirs = detectedExistingTraces ? ["runs", "."] : ["runs"];
     manifest = createDefaultWorkspaceManifest({
       project,
@@ -6774,7 +6389,7 @@ async function doctorWorkspace(location) {
     const abs = resolveInsideWorkspace(location.workspaceDir, rel);
     for (const file of await listJsonl(abs)) {
       try {
-        const s = await stat(path14.join(abs, file));
+        const s = await stat(path15.join(abs, file));
         newestTraceMtime = Math.max(newestTraceMtime, s.mtimeMs);
       } catch {
         checks2.push({ id: "trace-readability", status: "warn", message: `cannot stat ${rel}/${file}` });
@@ -6822,7 +6437,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
       const relPath = `${rel}/${entry}`;
       removed.push(relPath);
       if (!dryRun) {
-        await rm(path14.join(abs, entry), { recursive: true, force: true });
+        await rm(path15.join(abs, entry), { recursive: true, force: true });
       }
     }
   }
@@ -6831,7 +6446,7 @@ async function cleanWorkspace(location, manifest, options = {}) {
 
 // packages/viewer/src/workspace-data.ts
 async function loadWorkspaceViewerData(options) {
-  const cwd = path14.resolve(options.cwd ?? process.cwd());
+  const cwd = path15.resolve(options.cwd ?? process.cwd());
   const location = resolveWorkspaceLocation(cwd);
   const manifestRead = await readWorkspaceManifestFile(location);
   if (!manifestRead.ok || manifestRead.manifest === void 0) {
@@ -6844,7 +6459,7 @@ async function loadWorkspaceViewerData(options) {
   const runs = [];
   for (const rel of manifestRead.manifest.traceDirs) {
     const traceDir = resolveTraceDir({
-      dir: path14.join(location.workspaceDir, rel)
+      dir: path15.join(location.workspaceDir, rel)
     });
     const td = new TraceDirectory({ dir: traceDir });
     const files = await td.list();
@@ -6858,7 +6473,7 @@ async function loadWorkspaceViewerData(options) {
         runId: meta.runId,
         ...meta.name !== void 0 ? { name: meta.name } : {},
         status: meta.status,
-        file: path14.basename(meta.filePath)
+        file: path15.basename(meta.filePath)
       });
     }
   }
@@ -6869,8 +6484,8 @@ async function loadWorkspaceViewerData(options) {
     doctor,
     runs,
     bundleDirs: [
-      path14.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
-      path14.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
+      path15.join(location.workspaceDir, manifestRead.manifest.bundlesDir),
+      path15.join(location.workspaceDir, manifestRead.manifest.artifactsDir)
     ]
   };
 }
@@ -6933,7 +6548,7 @@ function createViewerServer(options = {}) {
           ok: true,
           readOnly: true,
           mode,
-          traceDir: path14.resolve(traceDir)
+          traceDir: path15.resolve(traceDir)
         });
       }
       if (pathname === "/api/suite" && mode === "suite") {
@@ -6962,7 +6577,7 @@ function createViewerServer(options = {}) {
             runId: meta.runId,
             name: meta.name,
             status: meta.status,
-            file: path14.basename(meta.filePath),
+            file: path15.basename(meta.filePath),
             startedAt: meta.startedAt,
             durationMs: meta.durationMs
           }))
@@ -7079,7 +6694,7 @@ function startViewerServer(options = {}) {
       resolve({
         host,
         port: resolvedPort,
-        traceDir: path14.resolve(traceDir),
+        traceDir: path15.resolve(traceDir),
         url: `http://${host}:${resolvedPort}/${modeQuery}`,
         mode
       });
@@ -7450,10 +7065,10 @@ async function evalRun(input3, options = {}) {
     diagnostics: []
   };
 }
-function evidenceForRun(run, path25) {
-  return [{ runId: run.runId, ...path25 !== void 0 ? { path: path25 } : {} }];
+function evidenceForRun(run, path26) {
+  return [{ runId: run.runId, ...path26 !== void 0 ? { path: path26 } : {} }];
 }
-function evidenceForEvent(event, path25) {
+function evidenceForEvent(event, path26) {
   return [
     {
       runId: event.runId,
@@ -7461,7 +7076,7 @@ function evidenceForEvent(event, path25) {
       ...event.parentId !== void 0 ? { parentId: event.parentId } : {},
       kind: event.kind,
       name: event.name,
-      ...path25 !== void 0 ? { path: path25 } : {}
+      ...path26 !== void 0 ? { path: path26 } : {}
     }
   ];
 }
@@ -7619,9 +7234,9 @@ function collectTextFields(nodes, keys, preferredKinds = []) {
 function tokenize(text) {
   return [...text.toLowerCase().matchAll(/[a-z0-9][a-z0-9'-]{2,}/g)].map((match) => match[0].replace(/^['-]+|['-]+$/g, "")).filter((token) => token.length > 2 && !STOP_WORDS.has(token));
 }
-function firstEvidence(fields, run, path25) {
+function firstEvidence(fields, run, path26) {
   const first = fields[0];
-  return first === void 0 ? evidenceForRun(run, path25) : evidenceForEvent(first.node.event, first.path);
+  return first === void 0 ? evidenceForRun(run, path26) : evidenceForEvent(first.node.event, first.path);
 }
 function collectSourceIds(nodes, keys) {
   const wanted = keySet(keys);
@@ -7998,8 +7613,8 @@ function renderEvalMarkdown(result) {
   if (result.findings.length > 0) {
     lines.push("", "## Findings");
     for (const finding of result.findings) {
-      const path25 = finding.evidence[0]?.path;
-      lines.push(`- ${finding.ruleId}: ${finding.message}${path25 ? ` (${path25})` : ""}`);
+      const path26 = finding.evidence[0]?.path;
+      lines.push(`- ${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}`);
     }
   }
   return `${lines.join("\n")}
@@ -8046,7 +7661,7 @@ function asConfig2(value) {
 }
 async function loadConfig2(configPath) {
   if (configPath === void 0) return {};
-  const extension = path14.extname(configPath);
+  const extension = path15.extname(configPath);
   if (TS_CONFIG_EXTENSIONS2.has(extension)) {
     throw new Error(
       "TypeScript eval configs require an explicit precompiled JavaScript config or future --config-loader support."
@@ -8055,7 +7670,7 @@ async function loadConfig2(configPath) {
   if (!CONFIG_EXTENSIONS2.has(extension)) {
     throw new Error("Unsupported eval config extension. Use .json, .js, .mjs, or .cjs.");
   }
-  const absolute = path14.resolve(configPath);
+  const absolute = path15.resolve(configPath);
   if (extension === ".json") {
     const raw = await readFile(absolute, "utf-8");
     return asConfig2(JSON.parse(raw));
@@ -8192,8 +7807,8 @@ function printHuman2(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path25 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path25 ? ` (${path25})` : ""}`);
+    const path26 = finding.evidence[0]?.path;
+    console.log(`- ${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}`);
   }
 }
 function readErrorResult2(error) {
@@ -8235,8 +7850,6 @@ async function evalCommand(target, options = {}, stdin = process.stdin) {
   else if (options.markdown) console.log(renderEvalMarkdown(result).trimEnd());
   else printHuman2(result);
 }
-
-// packages/cli/src/safety.ts
 var BEST_EFFORT_NOTE = "Best-effort local safety verification only; not a compliance, privacy, security, or regulatory certification.";
 var DEFAULT_MAX_STRING_LENGTH = 16384;
 var DEFAULT_MAX_ARRAY_LENGTH = 1e3;
@@ -8294,7 +7907,7 @@ function resultFromParts(parts) {
   const diagnostics = [...parts.diagnostics ?? []];
   const warnings = [...parts.warnings ?? []];
   const unsupportedFields = [...parts.unsupportedFields ?? []];
-  const status = statusFrom(findings, diagnostics);
+  const status = parts.status ?? statusFrom(findings, diagnostics);
   return {
     ok: status === "SAFE" || status === "SAFE WITH WARNINGS",
     command: parts.command,
@@ -8310,7 +7923,17 @@ function resultFromParts(parts) {
     diagnostics,
     warnings,
     unsupportedFields,
-    note: BEST_EFFORT_NOTE
+    note: BEST_EFFORT_NOTE,
+    ...parts.sourceAssessment !== void 0 ? { sourceAssessment: parts.sourceAssessment } : {},
+    ...parts.artifactAssessment !== void 0 ? { artifactAssessment: parts.artifactAssessment } : {},
+    ...parts.redactionSummary !== void 0 ? { redactionSummary: parts.redactionSummary } : {}
+  };
+}
+function layerFromResult(result) {
+  return {
+    status: result.status,
+    summary: result.summary,
+    findings: result.findings
   };
 }
 function readErrorResult3(command, error) {
@@ -8374,6 +7997,21 @@ function flattenNodes(nodes) {
 function detectorSeverity(finding) {
   return finding.severity;
 }
+function classifyRedactionDetector(detector) {
+  if (detector === "value.creditCard" || detector === "value.email" || detector === "value.phone") {
+    return { category: "personal-data", confidence: "high" };
+  }
+  if (detector === "value.ipv4" || detector === "value.ipv6") {
+    return { category: "identifier", confidence: "medium" };
+  }
+  if (detector.startsWith("value.") && (detector.includes("Token") || detector.includes("Key") || detector.includes("jwt") || detector.includes("authorization") || detector.includes("bearer") || detector.includes("cookie") || detector.includes("privateKey") || detector.includes("github") || detector.includes("aws") || detector.includes("provider"))) {
+    return { category: "credential", confidence: "high" };
+  }
+  if (detector.startsWith("key.")) {
+    return { category: "credential", confidence: "medium" };
+  }
+  return { category: "credential", confidence: "medium" };
+}
 function redactionDetectorFindings(read, runId) {
   const runs = runId === void 0 ? read.runs : read.runs.filter((run) => run.runId === runId);
   const out = [];
@@ -8384,6 +8022,7 @@ function redactionDetectorFindings(read, runId) {
       const result = redact(attrs, { profile: "share" });
       for (const finding of result.findings) {
         if (finding.action === "keep") continue;
+        const taxonomy = classifyRedactionDetector(finding.detector);
         out.push({
           ruleId: "safety.redactDetector",
           severity: detectorSeverity(finding),
@@ -8401,7 +8040,11 @@ function redactionDetectorFindings(read, runId) {
               ...node.event.status !== void 0 ? { status: node.event.status } : {},
               path: `attributes.${finding.path.replace(/^\$\.?/, "")}`
             }
-          ]
+          ],
+          category: taxonomy.category,
+          confidence: taxonomy.confidence,
+          detector: finding.detector,
+          action: finding.action
         });
       }
     }
@@ -8417,13 +8060,49 @@ function exitCodeFor3(result) {
   if (result.status === "UNSAFE") return 1;
   return 2;
 }
-function printJson3(result) {
-  console.log(JSON.stringify(stable4(result), null, 2));
+function explainFinding(finding, blocksBundle) {
+  const path26 = finding.evidence[0]?.path ?? "(unknown path)";
+  const category = finding.category ?? "structure";
+  const confidence = finding.confidence ?? "medium";
+  const detector = finding.detector ?? finding.ruleId;
+  const action = finding.action ?? "review";
+  const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
+  return [
+    `  Matched: detector=${detector}; path=${path26}; category=${category}`,
+    `  Why: ${finding.message}`,
+    `  Confidence: ${confidence}`,
+    `  Redaction: ${redactionHint}`,
+    `  Override: configure a custom redaction/detector rule locally (see docs/SAFETY-POLICY.md); do not weaken defaults globally.`,
+    `  Bundle gate: ${blocksBundle ? "blocks share-safe bundle unless --allow-unsafe" : "does not block by itself (warning/info)"}`
+  ];
+}
+function findingExplanation(finding) {
+  const blocks = finding.severity === "error" || finding.status === "fail";
+  return {
+    ruleId: finding.ruleId,
+    detector: finding.detector ?? finding.ruleId,
+    path: finding.evidence[0]?.path,
+    category: finding.category,
+    confidence: finding.confidence,
+    action: finding.action,
+    blocksBundle: blocks,
+    // Never include matched secret/PII values.
+    message: finding.message
+  };
 }
-function printHuman3(result) {
+function printHuman3(result, explain = false) {
   console.log(`Safety status: ${result.status}`);
   console.log(`Format: ${result.format}`);
   if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
+  if (result.sourceAssessment !== void 0 && result.artifactAssessment !== void 0) {
+    console.log(`Source assessment: ${result.sourceAssessment.status}`);
+    console.log(`Artifact assessment: ${result.artifactAssessment.status}`);
+    if (result.redactionSummary !== void 0) {
+      console.log(
+        `Redaction: profile=${result.redactionSummary.profile}, findings=${result.redactionSummary.findings}`
+      );
+    }
+  }
   console.log(
     `Summary: ${result.summary.findings} finding(s), ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
   );
@@ -8431,46 +8110,83 @@ function printHuman3(result) {
     console.log(`- ${diagnostic3.code}: ${diagnostic3.message}`);
   }
   for (const finding of result.findings) {
-    const path25 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path25 ? ` (${path25})` : ""}`);
+    const path26 = finding.evidence[0]?.path;
+    const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
+    console.log(`- ${finding.ruleId}: ${finding.message}${path26 ? ` (${path26})` : ""}${taxonomy}`);
+    if (explain) {
+      const blocks = finding.severity === "error" || finding.status === "fail";
+      for (const line of explainFinding(finding, blocks)) {
+        console.log(line);
+      }
+    }
   }
   console.log(`Note: ${result.note}`);
 }
+function printJson3(result, explain = false) {
+  const payload = explain === true ? { ...result, explanations: result.findings.map(findingExplanation) } : result;
+  console.log(JSON.stringify(stable4(payload), null, 2));
+}
 async function safetyCommand(command, target, options, stdin) {
   let result;
   try {
-    const rules = buildSafetyRules(options);
     const input3 = await inputFromTarget(target, options, stdin);
     const read = await openTrace(input3, {
       ...options.format !== void 0 ? { format: options.format } : {}
     });
-    const checkResult = runTraceChecks(
-      { read },
-      {
-        rules,
-        ...options.run !== void 0 ? { runId: options.run } : {}
-      }
-    );
-    const detectorFindings = checkResult.diagnostics.length === 0 ? redactionDetectorFindings(read, checkResult.runId) : [];
-    result = resultFromParts({
-      command,
-      format: checkResult.format,
-      runId: checkResult.runId,
-      findings: [...checkResult.findings, ...detectorFindings],
-      diagnostics: [
-        ...checkResult.diagnostics.map(diagnosticFromCheck),
-        ...warningDiagnostics(read.warnings, read.unsupportedFields)
-      ],
-      warnings: read.warnings,
-      unsupportedFields: read.unsupportedFields
+    const source = assessOpenedTrace(read, {
+      ...options,
+      ...options.run !== void 0 ? { runId: options.run } : {}
     });
+    if (command === "scan") {
+      result = { ...source, command: "scan" };
+    } else {
+      const profile = options.redactionProfile ?? "share";
+      const rawContent = input3.type === "string" ? input3.content : input3.type === "file" ? await readFile(input3.path, "utf-8") : void 0;
+      if (rawContent === void 0) {
+        result = {
+          ...source,
+          command: "verify-safe",
+          sourceAssessment: layerFromResult(source)
+        };
+      } else {
+        const redacted = redactTraceContent(rawContent, profile);
+        const artifactRead = await openTrace(
+          { type: "string", content: redacted.content },
+          { format: options.format ?? "agent-inspect-jsonl" }
+        );
+        const artifact = assessOpenedTrace(artifactRead, {
+          ...options,
+          ...options.run !== void 0 ? { runId: options.run } : {}
+        });
+        const detectors = [
+          ...new Set(redacted.findings.map((finding) => finding.detector))
+        ].sort((a, b) => a.localeCompare(b));
+        result = resultFromParts({
+          command: "verify-safe",
+          format: artifact.format,
+          runId: artifact.runId ?? source.runId,
+          findings: artifact.findings,
+          diagnostics: artifact.diagnostics,
+          warnings: artifact.warnings,
+          unsupportedFields: artifact.unsupportedFields,
+          status: artifact.status,
+          sourceAssessment: layerFromResult(source),
+          artifactAssessment: layerFromResult(artifact),
+          redactionSummary: {
+            profile,
+            findings: redacted.findings.length,
+            detectors
+          }
+        });
+      }
+    }
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     result = message.startsWith("--") ? invalidArgumentResult(command, error) : readErrorResult3(command, error);
   }
   process.exitCode = exitCodeFor3(result);
-  if (options.json) printJson3(result);
-  else printHuman3(result);
+  if (options.json) printJson3(result, options.explain === true);
+  else printHuman3(result, options.explain === true);
 }
 function scanCommand(target, options = {}, stdin = process.stdin) {
   return safetyCommand("scan", target, options, stdin);
@@ -8510,6 +8226,91 @@ function messageStartsWithDash(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.startsWith("--");
 }
+function validateReporterArtifactPath(options) {
+  const outputDir = path15.resolve(options.outputDir);
+  const diagnostics = [];
+  const rawPath = options.relativePath;
+  if (rawPath.length === 0) {
+    diagnostics.push({
+      code: "artifact_path_empty",
+      severity: "error",
+      message: "Reporter artifact path must not be empty."
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  if (rawPath.includes("\0")) {
+    diagnostics.push({
+      code: "invalid_artifact_path",
+      severity: "error",
+      message: "Reporter artifact path must not contain null bytes.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  if (path15.isAbsolute(rawPath) || path15.win32.isAbsolute(rawPath)) {
+    diagnostics.push({
+      code: "artifact_path_absolute",
+      severity: "error",
+      message: "Reporter artifact path must be relative.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  const normalized = path15.posix.normalize(rawPath.replace(/\\/g, "/"));
+  const segments = normalized.split("/");
+  if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
+    diagnostics.push({
+      code: "artifact_path_escape",
+      severity: "error",
+      message: "Reporter artifact path must stay under the output directory.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  const absolutePath = path15.resolve(outputDir, normalized);
+  const relFromOutput = path15.relative(outputDir, absolutePath);
+  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path15.isAbsolute(relFromOutput)) {
+    diagnostics.push({
+      code: "artifact_path_escape",
+      severity: "error",
+      message: "Reporter artifact path resolved outside the output directory.",
+      target: rawPath
+    });
+    return { ok: false, outputDir, diagnostics };
+  }
+  return {
+    ok: true,
+    outputDir,
+    relativePath: normalized,
+    absolutePath,
+    diagnostics
+  };
+}
+var EVIDENCE_CI_ARTIFACT_FILES = [
+  "evidence.html",
+  "evidence.json",
+  "check-results.json",
+  "trace.jsonl"
+];
+function createEvidenceCiArtifacts(options) {
+  const profile = options.redactionProfile;
+  const prefix = options.relativeDir !== void 0 && options.relativeDir.trim() !== "" ? options.relativeDir.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "") : "";
+  const join = (name) => prefix === "" ? name : path15.posix.join(prefix, name);
+  const formatFor = (name) => {
+    if (name.endsWith(".html")) return "html";
+    if (name.endsWith(".jsonl")) return "jsonl";
+    return "json";
+  };
+  return EVIDENCE_CI_ARTIFACT_FILES.map((name) => ({
+    kind: "evidence",
+    path: join(name),
+    format: formatFor(name),
+    redactionProfile: profile,
+    title: `Evidence v2 ${name}`
+  }));
+}
+
+// packages/cli/src/artifacts.ts
 var NOTE = "Generated locally by AgentInspect. Artifacts are best-effort summaries, not compliance or security certification.";
 var SAFETY_RULES = [
   createSafetyRawContentRule(),
@@ -8583,8 +8384,8 @@ function renderCheckSection(result) {
     `Diagnostics: ${result.diagnostics.length}`
   ];
   for (const finding of result.findings.slice(0, 10)) {
-    const path25 = finding.evidence[0]?.path ?? "(run)";
-    lines.push(`- ${finding.ruleId}: ${finding.message} (${path25})`);
+    const path26 = finding.evidence[0]?.path ?? "(run)";
+    lines.push(`- ${finding.ruleId}: ${finding.message} (${path26})`);
   }
   for (const diagnostic3 of result.diagnostics.slice(0, 10)) {
     lines.push(`- ${diagnostic3.code}: ${diagnostic3.message}`);
@@ -8662,8 +8463,8 @@ function renderHtml(trace, check, diff) {
 `;
 }
 async function writeArtifact(outputDir, relativePath, content, files) {
-  const outPath = path14.join(outputDir, relativePath);
-  await mkdir(path14.dirname(outPath), { recursive: true });
+  const outPath = path15.join(outputDir, relativePath);
+  await mkdir(path15.dirname(outPath), { recursive: true });
   await writeFile(outPath, content, "utf-8");
   files.push(relativePath);
 }
@@ -8678,8 +8479,21 @@ function manifestStatus(check, diff) {
   if (check.summary.warnings > 0 || (diff?.summary.warnings ?? 0) > 0) return "warning";
   return "ok";
 }
+function toEvidenceStatus(status) {
+  if (status === "ok") return "SAFE";
+  if (status === "warning") return "SAFE WITH WARNINGS";
+  if (status === "unsafe" || status === "regression") return "UNSAFE";
+  return "UNKNOWN";
+}
+function shouldWriteEvidence(options, status) {
+  if (options.alwaysEvidence === true) return true;
+  if (options.evidence === false) return false;
+  const onFailureOnly = options.onFailureOnly !== false;
+  if (!onFailureOnly) return true;
+  return status === "unsafe" || status === "regression" || status === "unknown" || status === "warning";
+}
 async function artifactsCommand(target, options = {}, stdin = process.stdin) {
-  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path14.resolve(options.outputDir.trim()) : "";
+  const outputDir = options.outputDir !== void 0 && options.outputDir.trim() !== "" ? path15.resolve(options.outputDir.trim()) : "";
   if (outputDir === "") {
     console.error("--output-dir is required.");
     process.exitCode = 1;
@@ -8743,15 +8557,77 @@ async function artifactsCommand(target, options = {}, stdin = process.stdin) {
   );
   await writeArtifact(outputDir, "summary.md", renderMarkdown(trace, check, diff), files);
   await writeArtifact(outputDir, "report.html", renderHtml(trace, check, diff), files);
+  const status = manifestStatus(check, diff);
+  if (shouldWriteEvidence(options, status)) {
+    try {
+      const runIds = selectedRun !== void 0 ? [selectedRun.runId] : read.runs.map((run) => run.runId);
+      const traceDir = resolveTraceDir({ dir: options.dir });
+      const sourceContents = /* @__PURE__ */ new Map();
+      let combined = "";
+      for (const runId of runIds) {
+        const tracePath = getTraceFilePath(runId, traceDir);
+        let raw = "";
+        try {
+          raw = await readFile(tracePath, "utf-8");
+        } catch {
+          raw = `${read.events.filter((event) => event.runId === runId).map((event) => JSON.stringify(event)).join("\n")}
+`;
+        }
+        sourceContents.set(runId, raw);
+        const redacted = redactTraceContent(raw, "strict");
+        combined += redacted.content.endsWith("\n") ? redacted.content : `${redacted.content}
+`;
+      }
+      const checkResultsJson = writeJson3({
+        aggregateStatus: toEvidenceStatus(status),
+        runs: runIds.map((runId) => ({
+          runId,
+          status: toEvidenceStatus(status),
+          errors: check.summary.errors,
+          warnings: check.summary.warnings,
+          findings: check.findings.length
+        }))
+      });
+      const evidencePackage = buildEvidenceCiPackage({
+        generatorVersion: version,
+        runIds,
+        sourceContents,
+        redactedTraceJsonl: combined,
+        redactionProfile: "strict",
+        assessmentStatus: toEvidenceStatus(status),
+        checkResultsJson,
+        summaryText: renderMarkdown(trace, check, diff)
+      });
+      await writeArtifact(outputDir, "evidence.html", evidencePackage["evidence.html"], files);
+      await writeArtifact(outputDir, "evidence.json", evidencePackage["evidence.json"], files);
+      await writeArtifact(
+        outputDir,
+        "check-results.json",
+        evidencePackage["check-results.json"],
+        files
+      );
+      await writeArtifact(outputDir, "trace.jsonl", evidencePackage["trace.jsonl"], files);
+      const expected = createEvidenceCiArtifacts({ redactionProfile: "strict" }).map((a) => a.path);
+      for (const name of expected) {
+        if (!files.includes(name)) {
+          throw new Error(`Evidence CI package missing expected file: ${name}`);
+        }
+      }
+    } catch (error) {
+      console.error(
+        `[AgentInspect] evidence package skipped: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    await mkdir(path14.dirname(path14.resolve(summaryTarget)), { recursive: true });
-    await appendFile(path14.resolve(summaryTarget), `
+    await mkdir(path15.dirname(path15.resolve(summaryTarget)), { recursive: true });
+    await appendFile(path15.resolve(summaryTarget), `
 ${renderMarkdown(trace, check, diff)}`, "utf-8");
   }
   const manifestFiles = [...files, "manifest.json"].sort((a, b) => a.localeCompare(b));
   const manifest = {
-    status: manifestStatus(check, diff),
+    status,
     outputDir,
     files: manifestFiles,
     trace,
@@ -8765,10 +8641,10 @@ ${renderMarkdown(trace, check, diff)}`, "utf-8");
       findings: diff?.findings.length ?? 0,
       diagnostics: diff?.diagnostics.length ?? 0
     },
-    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path14.resolve(summaryTarget) } : {},
+    ...summaryTarget !== void 0 && summaryTarget.trim() !== "" ? { githubSummary: path15.resolve(summaryTarget) } : {},
     note: NOTE
   };
-  await writeFile(path14.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
+  await writeFile(path15.join(outputDir, "manifest.json"), writeJson3(manifest), "utf-8");
   if (options.json === true) {
     console.log(writeJson3(manifest).trimEnd());
   } else {
@@ -8810,16 +8686,24 @@ function safetyStatusFromAssess(status) {
   }
   return "UNKNOWN";
 }
-async function resolveOutputDir(options, runIds, cwd) {
+function parseBundleFormat(value) {
+  if (value === void 0 || value === "directory" || value === "html" || value === "zip") {
+    return value ?? "directory";
+  }
+  throw new Error(`Unsupported --format "${value}". Use directory, html, or zip.`);
+}
+async function resolveOutputDir(options, runIds, cwd, format) {
   const out = resolveOutputOption(options);
   if (out !== void 0) {
-    const normalized = normalizeBundleOutputPath(out);
+    const normalized = normalizeBundleOutputPath(out, {
+      preserveZipExtension: format === "zip"
+    });
     try {
       const location = resolveWorkspaceLocation(cwd);
       const manifest = await readWorkspaceManifestFile(location);
       if (manifest.ok && manifest.manifest) {
-        const rel = path14.relative(location.workspaceDir, normalized);
-        if (!rel.startsWith("..") && !path14.isAbsolute(rel)) {
+        const rel = path15.relative(location.workspaceDir, normalized);
+        if (!rel.startsWith("..") && !path15.isAbsolute(rel)) {
           return resolveInsideWorkspace(location.workspaceDir, rel);
         }
       }
@@ -8833,20 +8717,21 @@ async function resolveOutputDir(options, runIds, cwd) {
     if (manifest.ok && manifest.manifest) {
       const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
       const label = runIds.length === 1 ? sanitizeBundleRunId(runIds[0]) : `multi-${runIds.length}`;
-      return resolveInsideWorkspace(
+      const base2 = resolveInsideWorkspace(
         location.workspaceDir,
-        path14.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
+        path15.join(manifest.manifest.bundlesDir, `bundle-${label}-${stamp}`)
       );
+      return format === "zip" ? `${base2}.zip` : base2;
     }
   } catch {
   }
-  return defaultBundleOutputPath(runIds);
+  const base = defaultBundleOutputPath(runIds);
+  return format === "zip" ? `${base}.zip` : base;
 }
-async function writeBundleFile(outputDir, relativePath, content, files) {
-  const outPath = assertBundlePathContained(outputDir, relativePath);
-  await mkdir(path14.dirname(outPath), { recursive: true });
-  await writeFile(outPath, content, "utf-8");
-  files.push(relativePath);
+function stageBundleFile(relativePath, content, files, packaged) {
+  const safe = assertEvidenceRelativePath(relativePath);
+  if (!files.includes(safe)) files.push(safe);
+  packaged.set(safe, content);
 }
 function renderBundleIndexHtml(parts) {
   const links = parts.runIds.map(
@@ -8884,6 +8769,7 @@ function extractHtmlBody(content) {
 }
 async function bundleCommand(runIdArg, options = {}) {
   const profile = parseBundleProfile(resolveRedactionProfileOption(options));
+  const format = parseBundleFormat(options.format);
   const traceDir = resolveTraceDir({ dir: options.dir });
   const cwd = process.cwd();
   let resolveResult;
@@ -8909,12 +8795,18 @@ async function bundleCommand(runIdArg, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const outputDir = await resolveOutputDir(options, resolveResult.runIds, cwd);
+  const outputDir = await resolveOutputDir(options, resolveResult.runIds, cwd, format);
   const files = [];
+  const packaged = /* @__PURE__ */ new Map();
   const checkRuns = [];
   const redactionRuns = [];
   const htmlByRun = /* @__PURE__ */ new Map();
   const redactedJsonlByRun = /* @__PURE__ */ new Map();
+  const artifactTrees = [];
+  const artifactEventsByRun = /* @__PURE__ */ new Map();
+  const findingSummaries = [];
+  const sourceHashes = [];
+  const schemaVersions = /* @__PURE__ */ new Set();
   let combinedJsonl = "";
   for (const runId of resolveResult.runIds) {
     const tracePath = getTraceFilePath(runId, traceDir);
@@ -8949,15 +8841,16 @@ async function bundleCommand(runIdArg, options = {}) {
       process.exitCode = 1;
       return;
     }
-    const safety = assessOpenedTrace(read, { run: runId });
-    const status = safetyStatusFromAssess(safety.status);
-    checkRuns.push({
+    const sourceSafety = assessOpenedTrace(read, { run: runId });
+    const sourceStatus = safetyStatusFromAssess(sourceSafety.status);
+    sourceHashes.push({
       runId,
-      status,
-      errors: safety.summary.errors,
-      warnings: safety.summary.warnings,
-      findings: safety.summary.findings
+      algorithm: "sha256",
+      hash: sha256Hex(rawContent)
     });
+    for (const version2 of collectTraceSchemaVersions(rawContent)) {
+      schemaVersions.add(version2);
+    }
     const redacted = redactTraceContent(rawContent, toReportProfile(profile));
     redactedJsonlByRun.set(runId, redacted.content);
     combinedJsonl += redacted.content.endsWith("\n") ? redacted.content : `${redacted.content}
@@ -8970,6 +8863,58 @@ async function bundleCommand(runIdArg, options = {}) {
       findings: redacted.findings.length,
       detectors
     });
+    let artifactSafety = sourceSafety;
+    let artifactTree;
+    try {
+      const artifactRead = await openTrace(
+        { type: "string", content: redacted.content },
+        { format: "agent-inspect-jsonl" }
+      );
+      artifactSafety = assessOpenedTrace(artifactRead, { run: runId });
+      artifactTree = artifactRead.runs.find((run) => run.runId === runId) ?? artifactRead.runs[0];
+      artifactEventsByRun.set(
+        runId,
+        artifactRead.events.filter((event) => event.runId === runId)
+      );
+    } catch {
+      artifactSafety = {
+        ...sourceSafety,
+        status: "UNKNOWN",
+        ok: false,
+        summary: {
+          findings: sourceSafety.summary.findings,
+          warnings: sourceSafety.summary.warnings,
+          errors: Math.max(1, sourceSafety.summary.errors)
+        }
+      };
+    }
+    for (const finding of artifactSafety.findings) {
+      findingSummaries.push({
+        runId,
+        ruleId: finding.ruleId,
+        severity: finding.severity,
+        message: finding.message,
+        ...finding.category !== void 0 ? { category: finding.category } : {},
+        ...finding.detector !== void 0 ? { detector: finding.detector } : {},
+        ...finding.confidence !== void 0 ? { confidence: finding.confidence } : {},
+        ...finding.action !== void 0 ? { action: finding.action } : {}
+      });
+    }
+    if (artifactTree) {
+      artifactTrees.push(artifactTree);
+    } else {
+      const selected2 = read.runs.find((run) => run.runId === runId);
+      if (selected2) artifactTrees.push(selected2);
+    }
+    const status = safetyStatusFromAssess(artifactSafety.status);
+    checkRuns.push({
+      runId,
+      status,
+      sourceStatus,
+      errors: artifactSafety.summary.errors,
+      warnings: artifactSafety.summary.warnings,
+      findings: artifactSafety.summary.findings
+    });
     const selected = read.runs.find((run) => run.runId === runId);
     const runReport = exportRunTree(selected ?? read.runs[0], {
       format: "html",
@@ -8998,13 +8943,13 @@ async function bundleCommand(runIdArg, options = {}) {
       console.log(
         writeJson4({
           ok: false,
-          error: `Bundle safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`,
+          error: `Bundle artifact safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`,
           checks: checks2
         }).trimEnd()
       );
     } else {
       console.error(
-        `[AgentInspect] bundle refused: safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`
+        `[AgentInspect] bundle refused: artifact safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`
       );
     }
     process.exitCode = 1;
@@ -9015,80 +8960,223 @@ async function bundleCommand(runIdArg, options = {}) {
     totalFindings: redactionRuns.reduce((sum, run) => sum + run.findings, 0),
     runs: redactionRuns
   };
-  await mkdir(outputDir, { recursive: true });
   for (const runId of resolveResult.runIds) {
     const jsonl = redactedJsonlByRun.get(runId) ?? "";
-    await writeBundleFile(
-      outputDir,
+    stageBundleFile(
       bundleRunAssetRelativePath(runId, ".jsonl"),
       jsonl,
-      files
+      files,
+      packaged
     );
     const html = htmlByRun.get(runId) ?? "";
-    await writeBundleFile(
-      outputDir,
+    stageBundleFile(
       bundleRunAssetRelativePath(runId, ".html"),
       runReportWrap(html, runId),
-      files
+      files,
+      packaged
     );
   }
   const primaryRunId = resolveResult.runIds[0];
   const traceHtml = resolveResult.runIds.length === 1 ? runReportWrap(htmlByRun.get(primaryRunId) ?? "", primaryRunId) : renderBundleIndexHtml({ runIds: resolveResult.runIds, reports: htmlByRun });
-  await writeBundleFile(outputDir, "trace.jsonl", combinedJsonl, files);
-  await writeBundleFile(outputDir, "trace.html", traceHtml, files);
-  await writeBundleFile(
-    outputDir,
-    "check-results.json",
-    writeJson4(checks2),
-    files
-  );
-  await writeBundleFile(
-    outputDir,
+  stageBundleFile("trace.jsonl", combinedJsonl, files, packaged);
+  stageBundleFile("trace.html", traceHtml, files, packaged);
+  stageBundleFile("check-results.json", writeJson4(checks2), files, packaged);
+  stageBundleFile(
     "eval-results.json",
     writeJson4(buildPlaceholderArtifact()),
-    files
+    files,
+    packaged
   );
-  await writeBundleFile(
-    outputDir,
+  stageBundleFile(
     "redaction-report.json",
     writeJson4(redactionReport),
-    files
+    files,
+    packaged
   );
-  await writeBundleFile(
-    outputDir,
+  stageBundleFile(
     "performance-summary.json",
     writeJson4(buildPlaceholderArtifact()),
-    files
+    files,
+    packaged
   );
+  const summaryPath = "summary.md";
+  const metadataPath = "metadata.json";
+  const aggregateSourceStatus = aggregateBundleSafeStatus(
+    checkRuns.map((run) => run.sourceStatus ?? run.status)
+  );
+  const metadataFileList = [
+    ...files,
+    summaryPath,
+    EVIDENCE_HTML_FILENAME,
+    metadataPath,
+    EVIDENCE_MANIFEST_FILENAME
+  ].filter((name, index, all) => all.indexOf(name) === index).sort((a, b) => a.localeCompare(b));
   const metadata = buildBundleMetadata({
     agentInspectVersion: version,
     profile,
     resolve: resolveResult,
     checks: checks2,
-    files: [...files]
+    files: metadataFileList
   });
-  await writeBundleFile(outputDir, "metadata.json", writeJson4(metadata), files);
-  await writeBundleFile(
-    outputDir,
-    "summary.md",
-    buildBundleSummaryMarkdown({ metadata, checks: checks2, redaction: redactionReport }),
-    files
+  const summaryMd = buildBundleSummaryMarkdown({
+    metadata,
+    checks: checks2,
+    redaction: redactionReport
+  });
+  const evidenceHtml = buildEvidenceHtmlShell({
+    title: "AgentInspect evidence",
+    runIds: resolveResult.runIds,
+    assessmentStatus: checks2.aggregateStatus,
+    sourceStatus: aggregateSourceStatus,
+    redactionProfile: profile,
+    verificationPolicy: profile,
+    generatorName: "agent-inspect",
+    generatorVersion: version,
+    createdAt: metadata.createdAt,
+    summaryText: summaryMd,
+    checkSummary: {
+      aggregateStatus: checks2.aggregateStatus,
+      runs: checkRuns
+    },
+    viewBodies: {
+      tree: buildEvidenceTreeViewHtml(artifactTrees),
+      timeline: buildEvidenceTimelineViewHtml(artifactTrees),
+      causal: buildEvidenceCausalFailureViewHtml(artifactTrees),
+      "tools-llm": buildEvidenceToolsLlmViewHtml(artifactTrees),
+      contracts: buildEvidenceContractsViewHtml({
+        aggregateStatus: checks2.aggregateStatus,
+        runs: checkRuns,
+        findingSummaries
+      }),
+      outcomes: buildEvidenceOutcomesViewHtml(
+        resolveResult.runIds.map((id) => ({
+          runId: id,
+          events: artifactEventsByRun.get(id) ?? []
+        }))
+      ),
+      circuit: buildEvidenceCircuitViewHtml(),
+      diff: resolveResult.runIds.length >= 2 ? buildEvidenceDiffViewHtml({
+        leftRunId: resolveResult.runIds[0],
+        rightRunId: resolveResult.runIds[1],
+        leftEvents: artifactEventsByRun.get(resolveResult.runIds[0]) ?? [],
+        rightEvents: artifactEventsByRun.get(resolveResult.runIds[1]) ?? []
+      }) : buildEvidenceDiffViewHtml(),
+      safety: buildEvidenceSafetyViewHtml({
+        artifactStatus: checks2.aggregateStatus,
+        sourceStatus: aggregateSourceStatus,
+        redactionProfile: profile,
+        verificationPolicy: profile,
+        redaction: redactionReport,
+        findingSummaries
+      }),
+      provenance: buildEvidenceProvenanceViewHtml({
+        generatorName: "agent-inspect",
+        generatorVersion: version,
+        evidenceFormatVersion: EVIDENCE_FORMAT_VERSION,
+        createdAt: metadata.createdAt,
+        runIds: resolveResult.runIds,
+        traceSchemaVersions: [...schemaVersions].sort((a, b) => a.localeCompare(b)),
+        sourceHashes,
+        packagedFiles: metadataFileList.filter((name) => name !== EVIDENCE_MANIFEST_FILENAME).map((name) => ({ path: name, role: inferEvidenceFileRole(name) }))
+      })
+    }
+  });
+  stageBundleFile(EVIDENCE_HTML_FILENAME, evidenceHtml, files, packaged);
+  stageBundleFile(summaryPath, summaryMd, files, packaged);
+  const metadataJson = writeJson4(metadata);
+  packaged.set(metadataPath, metadataJson);
+  if (!files.includes(metadataPath)) {
+    files.push(metadataPath);
+  }
+  const evidenceFiles = [...packaged.entries()].map(
+    ([relativePath, content]) => ({ path: relativePath, content })
   );
-  metadata.files = [...files].sort((a, b) => a.localeCompare(b));
-  await writeFile(path14.join(outputDir, "metadata.json"), writeJson4(metadata), "utf-8");
+  const evidence = buildEvidenceManifest({
+    generatorVersion: version,
+    runIds: resolveResult.runIds,
+    traceSchemaVersions: [...schemaVersions].sort((a, b) => a.localeCompare(b)),
+    sourceHashes,
+    redactionProfile: profile,
+    verificationPolicy: profile,
+    assessmentStatus: checks2.aggregateStatus,
+    sourceStatus: aggregateSourceStatus,
+    files: evidenceFiles,
+    createdAt: metadata.createdAt
+  });
+  let evidenceJson = serializeEvidenceManifest(evidence);
+  let outputPath = outputDir;
+  if (format === "html") {
+    const htmlContent = packaged.get(EVIDENCE_HTML_FILENAME) ?? evidenceHtml;
+    const htmlEvidence = buildEvidenceManifest({
+      generatorVersion: version,
+      runIds: resolveResult.runIds,
+      traceSchemaVersions: [...schemaVersions].sort((a, b) => a.localeCompare(b)),
+      sourceHashes,
+      redactionProfile: profile,
+      verificationPolicy: profile,
+      assessmentStatus: checks2.aggregateStatus,
+      sourceStatus: aggregateSourceStatus,
+      files: [{ path: EVIDENCE_HTML_FILENAME, content: htmlContent }],
+      createdAt: metadata.createdAt
+    });
+    evidenceJson = serializeEvidenceManifest(htmlEvidence);
+    let htmlPath = outputDir;
+    let sidecarDir = outputDir;
+    if (outputDir.toLowerCase().endsWith(".html")) {
+      htmlPath = outputDir;
+      sidecarDir = path15.dirname(outputDir);
+    } else {
+      await mkdir(outputDir, { recursive: true });
+      htmlPath = path15.join(outputDir, EVIDENCE_HTML_FILENAME);
+      sidecarDir = outputDir;
+    }
+    await mkdir(sidecarDir, { recursive: true });
+    await writeFile(htmlPath, htmlContent, "utf-8");
+    await writeFile(path15.join(sidecarDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    outputPath = htmlPath;
+  } else if (format === "zip") {
+    const zipPath = outputDir.toLowerCase().endsWith(".zip") ? outputDir : `${outputDir}.zip`;
+    const zipParent = path15.dirname(zipPath);
+    await mkdir(zipParent, { recursive: true });
+    const entries = [
+      ...[...packaged.entries()].map(([relativePath, content]) => ({
+        path: relativePath,
+        content
+      })),
+      { path: EVIDENCE_MANIFEST_FILENAME, content: evidenceJson }
+    ];
+    const archive = buildZipArchive(entries);
+    await writeFile(zipPath, archive);
+    outputPath = zipPath;
+  } else {
+    await mkdir(outputDir, { recursive: true });
+    for (const [relativePath, content] of packaged.entries()) {
+      const outPath = assertBundlePathContained(outputDir, relativePath);
+      await mkdir(path15.dirname(outPath), { recursive: true });
+      await writeFile(outPath, content, "utf-8");
+    }
+    await writeFile(path15.join(outputDir, EVIDENCE_MANIFEST_FILENAME), evidenceJson, "utf-8");
+    if (!files.includes(EVIDENCE_MANIFEST_FILENAME)) {
+      files.push(EVIDENCE_MANIFEST_FILENAME);
+    }
+    outputPath = outputDir;
+  }
   if (options.json) {
     console.log(
       writeJson4({
         ok: true,
-        outputDir,
+        format,
+        outputDir: outputPath,
         metadata,
+        evidence: format === "html" ? JSON.parse(evidenceJson) : evidence,
         checks: checks2,
         redaction: redactionReport
       }).trimEnd()
     );
     return;
   }
-  console.log(`Bundle written to ${outputDir}`);
+  console.log(`Bundle written to ${outputPath}`);
+  console.log(`Format: ${format}`);
   console.log(`Safe status: ${metadata.safeStatus}`);
   console.log(`Runs: ${resolveResult.runIds.join(", ")}`);
   console.log(`Files: ${metadata.files.length}`);
@@ -9108,68 +9196,44 @@ ${body}
 </html>
 `;
 }
-function validateReporterArtifactPath(options) {
-  const outputDir = path14.resolve(options.outputDir);
-  const diagnostics = [];
-  const rawPath = options.relativePath;
-  if (rawPath.length === 0) {
-    diagnostics.push({
-      code: "artifact_path_empty",
-      severity: "error",
-      message: "Reporter artifact path must not be empty."
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  if (rawPath.includes("\0")) {
-    diagnostics.push({
-      code: "invalid_artifact_path",
-      severity: "error",
-      message: "Reporter artifact path must not contain null bytes.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  if (path14.isAbsolute(rawPath) || path14.win32.isAbsolute(rawPath)) {
-    diagnostics.push({
-      code: "artifact_path_absolute",
-      severity: "error",
-      message: "Reporter artifact path must be relative.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
-  }
-  const normalized = path14.posix.normalize(rawPath.replace(/\\/g, "/"));
-  const segments = normalized.split("/");
-  if (normalized === "." || normalized.startsWith("../") || segments.some((segment) => segment === "..")) {
-    diagnostics.push({
-      code: "artifact_path_escape",
-      severity: "error",
-      message: "Reporter artifact path must stay under the output directory.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
+function writeJson5(value) {
+  return `${JSON.stringify(value, null, 2)}
+`;
+}
+async function bundleVerifyCommand(targetPath, options = {}) {
+  const root = path15.resolve(targetPath.trim() || ".");
+  const result = await verifyEvidenceDirectory(root, {
+    unexpectedFiles: options.unexpected ?? "fail"
+  });
+  if (options.json) {
+    console.log(
+      writeJson5({
+        ok: result.ok,
+        status: result.status,
+        root: result.root,
+        checkedFiles: result.checkedFiles,
+        issues: result.issues,
+        assessment: result.manifest?.assessment,
+        generator: result.manifest?.generator
+      }).trimEnd()
+    );
+  } else if (result.ok) {
+    console.log(`Evidence verify: pass (${result.checkedFiles} file(s) checked)`);
+    console.log(`Root: ${result.root}`);
+    if (result.manifest?.assessment?.status) {
+      console.log(`Assessment: ${result.manifest.assessment.status}`);
+    }
+  } else {
+    console.error(`Evidence verify: fail (${result.issues.length} issue(s))`);
+    console.error(`Root: ${result.root}`);
+    for (const issue of result.issues) {
+      console.error(`- [${issue.severity}] ${issue.code}: ${issue.message}`);
+    }
   }
-  const absolutePath = path14.resolve(outputDir, normalized);
-  const relFromOutput = path14.relative(outputDir, absolutePath);
-  if (relFromOutput.length === 0 || relFromOutput.startsWith("..") || path14.isAbsolute(relFromOutput)) {
-    diagnostics.push({
-      code: "artifact_path_escape",
-      severity: "error",
-      message: "Reporter artifact path resolved outside the output directory.",
-      target: rawPath
-    });
-    return { ok: false, outputDir, diagnostics };
+  if (!result.ok) {
+    process.exitCode = 1;
   }
-  return {
-    ok: true,
-    outputDir,
-    relativePath: normalized,
-    absolutePath,
-    diagnostics
-  };
 }
-
-// packages/cli/src/ci-summary.ts
 var NOTE2 = "Generated locally by AgentInspect from reporter artifact manifests. Trace contents are not embedded.";
 var MAX_TEXT = 180;
 var FRAMEWORKS = /* @__PURE__ */ new Set(["vitest", "jest", "manual"]);
@@ -9185,7 +9249,7 @@ function stable7(value) {
     Object.keys(record).sort((a, b) => a.localeCompare(b)).map((key) => [key, stable7(record[key])])
   );
 }
-function writeJson5(value) {
+function writeJson6(value) {
   return `${JSON.stringify(stable7(value), null, 2)}
 `;
 }
@@ -9297,23 +9361,23 @@ function readManifestDocument(value) {
   };
 }
 function cwdRelative(filePath) {
-  const relative = path14.relative(process.cwd(), path14.resolve(filePath)).replace(/\\/g, "/");
-  if (relative === "" || relative.startsWith("../") || path14.isAbsolute(relative)) {
-    return path14.basename(filePath);
+  const relative = path15.relative(process.cwd(), path15.resolve(filePath)).replace(/\\/g, "/");
+  if (relative === "" || relative.startsWith("../") || path15.isAbsolute(relative)) {
+    return path15.basename(filePath);
   }
   return relative;
 }
 async function readReporterManifest(filePath) {
-  const absolute = path14.resolve(filePath);
+  const absolute = path15.resolve(filePath);
   const raw = await readFile(absolute, "utf-8");
   const document = readManifestDocument(JSON.parse(raw));
   const manifest = document.manifest;
   const results = manifest.results.map((result) => ({
     testId: safeText(result.testId),
     name: safeText(result.name),
-    ...result.file === void 0 ? {} : { file: safeText(path14.basename(result.file)) },
+    ...result.file === void 0 ? {} : { file: safeText(path15.basename(result.file)) },
     status: result.status,
-    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path14.basename(result.tracePath)) },
+    ...result.tracePath === void 0 ? {} : { tracePath: safeText(path15.basename(result.tracePath)) },
     artifacts: result.artifacts,
     diagnostics: result.diagnostics
   }));
@@ -9452,20 +9516,20 @@ async function ciSummaryCommand(manifestPaths, options = {}) {
     return;
   }
   const markdown = renderMarkdown2(result);
-  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path14.resolve(options.output.trim()) : void 0;
+  const outputPath = options.output !== void 0 && options.output.trim() !== "" ? path15.resolve(options.output.trim()) : void 0;
   if (outputPath !== void 0) {
-    await mkdir(path14.dirname(outputPath), { recursive: true });
+    await mkdir(path15.dirname(outputPath), { recursive: true });
     await writeFile(outputPath, markdown, "utf-8");
   }
   const summaryTarget = options.githubSummary ?? process.env.GITHUB_STEP_SUMMARY;
   if (summaryTarget !== void 0 && summaryTarget.trim() !== "") {
-    const summaryPath = path14.resolve(summaryTarget);
-    await mkdir(path14.dirname(summaryPath), { recursive: true });
+    const summaryPath = path15.resolve(summaryTarget);
+    await mkdir(path15.dirname(summaryPath), { recursive: true });
     await appendFile(summaryPath, `
 ${markdown}`, "utf-8");
   }
   if (options.json === true) {
-    console.log(writeJson5(result).trimEnd());
+    console.log(writeJson6(result).trimEnd());
   } else if (outputPath !== void 0) {
     console.log(`Wrote AgentInspect CI summary to ${outputPath}`);
     console.log(`Status: ${result.status}`);
@@ -9608,7 +9672,7 @@ jobs:
 }
 async function planInit(options = {}) {
   const framework = normalizeFramework(options.framework);
-  const cwd = path14.resolve(options.cwd ?? process.cwd());
+  const cwd = path15.resolve(options.cwd ?? process.cwd());
   const demoPath = framework === "custom" ? "examples/agent-inspect-demo.mjs" : `examples/agent-inspect-${framework}-demo.mjs`;
   const candidates = [
     { rel: CONFIG_FILE, content: configTemplate(framework) },
@@ -9623,7 +9687,7 @@ async function planInit(options = {}) {
   }
   const files = [];
   for (const candidate of candidates) {
-    const abs = path14.join(cwd, candidate.rel);
+    const abs = path15.join(cwd, candidate.rel);
     try {
       await access(abs);
       files.push({
@@ -9644,12 +9708,12 @@ async function writePlannedFiles(plan, cwd, options) {
     if (entry.action === "skip") {
       continue;
     }
-    const abs = path14.join(cwd, entry.path);
+    const abs = path15.join(cwd, entry.path);
     if (options.dryRun) {
       written.push(entry.path);
       continue;
     }
-    await mkdir(path14.dirname(abs), { recursive: true });
+    await mkdir(path15.dirname(abs), { recursive: true });
     const content = entry.path === CONFIG_FILE ? configTemplate(plan.framework) : entry.path === GITKEEP ? "" : entry.path.endsWith(".yml") ? githubWorkflowTemplate() : demoTemplate(plan.framework);
     await writeFile(abs, content, "utf-8");
     written.push(entry.path);
@@ -9657,7 +9721,7 @@ async function writePlannedFiles(plan, cwd, options) {
   return written;
 }
 async function initCommand(options = {}) {
-  const cwd = path14.resolve(options.cwd ?? process.cwd());
+  const cwd = path15.resolve(options.cwd ?? process.cwd());
   try {
     const plan = await planInit({ ...options, cwd });
     const toWrite = plan.files.filter((file) => file.action === "create").map((f) => f.path);
@@ -9748,7 +9812,7 @@ function envCheck(name, optional = true) {
   };
 }
 async function traceDirWritable(traceDir) {
-  const resolved = path14.resolve(traceDir);
+  const resolved = path15.resolve(traceDir);
   try {
     await mkdir(resolved, { recursive: true });
     await access(resolved, constants.W_OK);
@@ -9769,10 +9833,10 @@ async function traceDirWritable(traceDir) {
   }
 }
 function readPackageVersionNearEntry(entryPath, packageName) {
-  let dir = path14.dirname(path14.resolve(entryPath));
-  const { root } = path14.parse(dir);
+  let dir = path15.dirname(path15.resolve(entryPath));
+  const { root } = path15.parse(dir);
   while (true) {
-    const candidate = path14.join(dir, "package.json");
+    const candidate = path15.join(dir, "package.json");
     if (existsSync(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync(candidate, "utf8"));
@@ -9783,14 +9847,14 @@ function readPackageVersionNearEntry(entryPath, packageName) {
       }
     }
     if (dir === root) break;
-    const parent = path14.dirname(dir);
+    const parent = path15.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return void 0;
 }
 function resolveInstalledPackage(cwd, name) {
-  const require2 = createRequire(path14.join(cwd, "package.json"));
+  const require2 = createRequire(path15.join(cwd, "package.json"));
   try {
     const entry = require2.resolve(name);
     let version2;
@@ -9888,7 +9952,7 @@ function versionMismatchCheck(cwd) {
   };
 }
 async function runDoctorChecks(options = {}) {
-  const cwd = path14.resolve(options.cwd ?? process2.cwd());
+  const cwd = path15.resolve(options.cwd ?? process2.cwd());
   const traceDir = options.traceDir?.trim() || process2.env.AGENT_INSPECT_TRACE_DIR?.trim() || ".agent-inspect";
   const checks2 = [
     nodeVersionCheck(),
@@ -10128,7 +10192,7 @@ function parsePluginManifest(input3) {
   };
 }
 async function readPluginManifestFile(packageDir) {
-  const manifestPath = path14.join(packageDir, PLUGIN_MANIFEST_FILENAME);
+  const manifestPath = path15.join(packageDir, PLUGIN_MANIFEST_FILENAME);
   try {
     const raw = await readFile(manifestPath, "utf8");
     const parsed = parsePluginManifest(JSON.parse(raw));
@@ -10154,7 +10218,7 @@ async function indexIsStale(snapshot, traceDir) {
   const files = await td.list();
   for (const file of files) {
     const stats = await td.getFileStats(file);
-    if (stats.mtimeMs > builtMs) return true;
+    if (Math.floor(stats.mtimeMs) > builtMs) return true;
   }
   return false;
 }
@@ -10202,7 +10266,7 @@ function createTraceDirectoryIndexer() {
 // packages/cli/src/plugins.ts
 async function readPackageName(packageDir) {
   try {
-    const raw = await readFile(path14.join(packageDir, "package.json"), "utf8");
+    const raw = await readFile(path15.join(packageDir, "package.json"), "utf8");
     const parsed = JSON.parse(raw);
     return typeof parsed.name === "string" ? parsed.name : void 0;
   } catch {
@@ -10210,7 +10274,7 @@ async function readPackageName(packageDir) {
   }
 }
 async function discoverPlugins(cwd = process.cwd()) {
-  const nodeModules = path14.join(cwd, "node_modules");
+  const nodeModules = path15.join(cwd, "node_modules");
   const found = [];
   let entries;
   try {
@@ -10221,7 +10285,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   for (const entry of entries.sort()) {
     if (entry.startsWith("@")) continue;
     if (!isPluginPackageName(entry)) continue;
-    const packageDir = path14.join(nodeModules, entry);
+    const packageDir = path15.join(nodeModules, entry);
     const manifestRead = await readPluginManifestFile(packageDir);
     found.push({
       packageName: entry,
@@ -10234,7 +10298,7 @@ async function discoverPlugins(cwd = process.cwd()) {
   return found;
 }
 async function validatePluginPackage(packageRef, cwd = process.cwd()) {
-  const packageDir = path14.isAbsolute(packageRef) ? packageRef : path14.join(cwd, "node_modules", packageRef);
+  const packageDir = path15.isAbsolute(packageRef) ? packageRef : path15.join(cwd, "node_modules", packageRef);
   const packageName = await readPackageName(packageDir) ?? packageRef;
   const errors = [];
   const warnings = [];
@@ -10310,7 +10374,7 @@ async function pluginsValidateCommand(packageRef, cwd) {
 }
 var INDEX_FILENAME = ".agent-inspect-index.json";
 function traceIndexPath(traceDir) {
-  return path14.join(traceDir, INDEX_FILENAME);
+  return path15.join(traceDir, INDEX_FILENAME);
 }
 function parseMaxEntries(raw) {
   if (raw === void 0 || raw.trim() === "") return void 0;
@@ -10423,7 +10487,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-Z5W27YCW.mjs');
+    return await import('./src-YFN3Q3GP.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(
@@ -10453,7 +10517,7 @@ async function newestTraceMtimeMs2(traceDir) {
     for (const file of files) {
       if (!file.endsWith(".jsonl")) continue;
       try {
-        const s = await stat(path14.join(traceDir, file));
+        const s = await stat(path15.join(traceDir, file));
         if (s.mtimeMs > newest) newest = s.mtimeMs;
       } catch {
       }
@@ -10705,11 +10769,11 @@ function printJson5(value) {
   console.log(JSON.stringify(value, null, 2));
 }
 function resolveCwd(options) {
-  return path14.resolve(options.cwd ?? process.cwd());
+  return path15.resolve(options.cwd ?? process.cwd());
 }
 async function suiteInitCommand(options = {}) {
   const cwd = resolveCwd(options);
-  const configPath = path14.join(cwd, DEFAULT_CONFIG_FILENAME);
+  const configPath = path15.join(cwd, DEFAULT_CONFIG_FILENAME);
   const template = options.template?.trim();
   const suiteConfig = template !== void 0 && template !== "" ? resolveSuiteTemplate(template) : defaultSuiteConfigTemplate();
   if (options.dryRun) {
@@ -10828,13 +10892,13 @@ async function suiteListCommand(options = {}) {
 }
 async function writeSuiteArtifact(result, configOutputDir, options) {
   const cwd = resolveCwd(options);
-  const outputDir = path14.resolve(
+  const outputDir = path15.resolve(
     cwd,
     options.output ?? configOutputDir ?? DEFAULT_SUITE_ARTIFACTS_DIR
   );
   await mkdir(outputDir, { recursive: true });
   const stamp = result.startedAt.replace(/[:.]/g, "-");
-  const filePath = path14.join(outputDir, `${result.suiteName}-${stamp}.json`);
+  const filePath = path15.join(outputDir, `${result.suiteName}-${stamp}.json`);
   await writeFile(filePath, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
   return filePath;
@@ -10892,7 +10956,7 @@ async function loadSuiteResultFromInput(options) {
   if (options.input === void 0 || options.input.trim() === "") {
     throw new Error("Pass --input <suite-run.json> from a prior suite run.");
   }
-  const inputPath = path14.resolve(cwd, options.input.trim());
+  const inputPath = path15.resolve(cwd, options.input.trim());
   const raw = await readFile(inputPath, "utf-8");
   return JSON.parse(raw);
 }
@@ -10926,9 +10990,9 @@ function normalizeMetrics(raw) {
 }
 async function writeArtifacts(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
-  const jsonPath = path14.join(outputDir, "cohort-results.json");
-  const markdownPath = path14.join(outputDir, "cohort-summary.md");
-  const htmlPath = path14.join(outputDir, "cohort-report.html");
+  const jsonPath = path15.join(outputDir, "cohort-results.json");
+  const markdownPath = path15.join(outputDir, "cohort-summary.md");
+  const htmlPath = path15.join(outputDir, "cohort-report.html");
   await writeFile(jsonPath, `${renderCohortReport(result, { format: "json" })}
 `, "utf-8");
   await writeFile(
@@ -10956,7 +11020,7 @@ async function cohortCommand(options = {}) {
     const format = options.format ?? (options.json ? "json" : "markdown");
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts(result, path14.resolve(options.output.trim()));
+      artifacts = await writeArtifacts(result, path15.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(
@@ -11026,11 +11090,11 @@ function parseDuration2(value) {
 async function writeArtifacts2(result, outputDir) {
   await mkdir(outputDir, { recursive: true });
   const paths = {
-    jsonPath: path14.join(outputDir, "gate-results.json"),
-    markdownPath: path14.join(outputDir, "gate-summary.md"),
-    htmlPath: path14.join(outputDir, "gate-report.html"),
-    junitPath: path14.join(outputDir, "junit.xml"),
-    githubPath: path14.join(outputDir, "github-step-summary.md")
+    jsonPath: path15.join(outputDir, "gate-results.json"),
+    markdownPath: path15.join(outputDir, "gate-summary.md"),
+    htmlPath: path15.join(outputDir, "gate-report.html"),
+    junitPath: path15.join(outputDir, "junit.xml"),
+    githubPath: path15.join(outputDir, "github-step-summary.md")
   };
   await writeFile(
     paths.jsonPath,
@@ -11098,7 +11162,7 @@ async function gateCommand(options = {}) {
     const result = await runGate(runs, gateOptions);
     let artifacts;
     if (options.output !== void 0 && options.output.trim() !== "") {
-      artifacts = await writeArtifacts2(result, path14.resolve(options.output.trim()));
+      artifacts = await writeArtifacts2(result, path15.resolve(options.output.trim()));
     }
     if (options.json || format === "json") {
       console.log(JSON.stringify({ ...result, artifacts: artifacts ?? null }, null, 2));
@@ -11335,7 +11399,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
     runCommand(() => scanCommand(target, opts));
   });
   program.command("verify-safe").description("Best-effort local trace safety verification").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -11344,7 +11408,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
     runCommand(() => verifySafeCommand(target, opts));
   });
   program.command("artifacts").description("Create safe local CI trace artifacts").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").requiredOption("--output-dir <path>", "directory for generated artifacts").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -11353,19 +11417,26 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--baseline <trace-path-or-run-id>", "optional baseline trace for diff artifacts").option("--baseline-run <run-id>", "select a run from the baseline trace").option("--github-summary <path>", "append a safe summary to this file, e.g. GITHUB_STEP_SUMMARY").option("--json", "print deterministic JSON manifest").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--baseline <trace-path-or-run-id>", "optional baseline trace for diff artifacts").option("--baseline-run <run-id>", "select a run from the baseline trace").option("--github-summary <path>", "append a safe summary to this file, e.g. GITHUB_STEP_SUMMARY").option("--evidence", "write Evidence v2 package on failure (default behavior when omitted)").option("--no-evidence", "skip Evidence v2 package").option("--always-evidence", "write Evidence v2 package even when checks pass").option("--json", "print deterministic JSON manifest").action((target, opts) => {
     runCommand(() => artifactsCommand(target, opts));
   });
-  program.command("bundle").description("Create a share-safe offline trace bundle (local folder)").argument("[run-id]", "run id to bundle (optional with --session or --since)").option("--dir <path>", "trace directory for run/session lookup").option("--session <session-id>", "bundle all runs in a session").option("--since <duration>", "bundle runs with activity since a duration (e.g. 24h)").addOption(
+  const bundleCmd = program.command("bundle").description("Create or verify share-safe offline evidence bundles").argument("[run-id]", "run id to bundle (optional with --session or --since)").option("--dir <path>", "trace directory for run/session lookup").option("--session <session-id>", "bundle all runs in a session").option("--since <duration>", "bundle runs with activity since a duration (e.g. 24h)").addOption(
     new Option("--profile <profile>", "redaction profile for exported copies").choices(["local", "share", "strict"]).default("share")
   ).addOption(
     new Option(
       "--redaction-profile <profile>",
       "alias for --profile (canonical spelling)"
     ).choices(["local", "share", "strict"])
-  ).option("--out <path>", "output directory (folder; .zip suffix is stripped)").option("--output <path>", "alias for --out (canonical spelling)").option("--allow-unsafe", "write bundle even when verify-safe reports UNSAFE").option("--json", "print deterministic JSON manifest").action((runId, opts) => {
+  ).option("--out <path>", "output directory, .html path, or .zip path").option("--output <path>", "alias for --out (canonical spelling)").addOption(
+    new Option("--format <format>", "bundle output format").choices(["directory", "html", "zip"]).default("directory")
+  ).option("--allow-unsafe", "write bundle even when verify-safe reports UNSAFE").option("--json", "print deterministic JSON manifest").action((runId, opts) => {
     runCommand(() => bundleCommand(runId, opts));
   });
+  bundleCmd.command("verify").description("Verify Evidence v2 integrity (manifest, hashes, presence)").argument("<path>", "evidence/bundle directory containing evidence.json").addOption(
+    new Option("--unexpected <mode>", "policy for files not listed in the manifest").choices(["fail", "warn", "ignore"]).default("fail")
+  ).option("--json", "print deterministic JSON verify result").action((targetPath, opts) => {
+    runCommand(() => bundleVerifyCommand(targetPath, opts));
+  });
   program.command("ci-summary").description("Summarize local reporter artifact manifests for CI").argument("<manifest...>", "reporter artifact manifest JSON files").option("-o, --output <path>", "write Markdown summary to a local file").option("--github-summary <path>", "append Markdown summary to this local file, e.g. GITHUB_STEP_SUMMARY").option("--json", "print deterministic JSON summary").action((manifest, opts) => {
     runCommand(() => ciSummaryCommand(manifest, opts));
   });
@@ -11639,9 +11710,9 @@ function isPrimaryModule() {
   if (!entry) return false;
   const selfPath = fileURLToPath(import.meta.url);
   try {
-    return realpathSync(path14.resolve(entry)) === realpathSync(path14.resolve(selfPath));
+    return realpathSync(path15.resolve(entry)) === realpathSync(path15.resolve(selfPath));
   } catch {
-    return path14.resolve(entry) === path14.resolve(selfPath);
+    return path15.resolve(entry) === path15.resolve(selfPath);
   }
 }
 if (isPrimaryModule()) {