agent-inspect 6.8.0 → 6.9.0

package/packages/cli/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, enrichSessionRunRecord, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, extractMetadata, filterTraces, truncateName, getTraceFilePath, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, openTrace, TraceReadError, filterMetasBySessionScope, runTraceChecks, aggregateSessionCheckResults, createBaselineRegressionRule, resolveBundleRunIds, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, buildBundleMetadata, buildBundleSummaryMarkdown, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, Redactor, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, assertBundlePathContained, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, escapeMarkdown, escapeHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, resolveRedactionProfile, applyProfileMetadataCaps, flattenTree, safeString, compactAttributes, stableJson, truncateStringForProfile } from './chunk-TO4VENHV.mjs';
+import { createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, enrichSessionRunRecord, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, extractMetadata, filterTraces, truncateName, getTraceFilePath, buildRunSummary, formatDuration, formatTimestamp, isAgentInspectTrace, openTrace, TraceReadError, filterMetasBySessionScope, runTraceChecks, aggregateSessionCheckResults, createBaselineRegressionRule, resolveBundleRunIds, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, buildBundleMetadata, buildBundleSummaryMarkdown, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, renderErrorLine, getIndent, Redactor, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, assertBundlePathContained, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, escapeMarkdown, escapeHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, resolveRedactionProfile, applyProfileMetadataCaps, flattenTree, safeString, compactAttributes, stableJson, truncateStringForProfile } from './chunk-WQ5XMFH2.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
 import path14 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
@@ -11,7 +11,7 @@ import { createServer } from 'http';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.8.0";
+var version = "6.9.0";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -3808,7 +3808,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-Z5W27YCW.mjs');
+    const mod = await import('./src-C4EUHTER.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -4309,7 +4309,12 @@ var SHARE_PROFILE_EXTRA_KEYS = [
   "organizationId",
   "traceId",
   "spanId",
-  "parentSpanId"
+  "parentSpanId",
+  "currentTask",
+  "task",
+  "userInput",
+  "requestText",
+  "conversationText"
 ];
 var STRICT_PROFILE_EXTRA_KEYS = [
   "prompt",
@@ -4377,6 +4382,61 @@ function passesLuhn(value) {
   }
   return sum % 10 === 0;
 }
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var EPOCH_MS_RE = /^1[0-9]{12}$/;
+var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
+function pathSuggestsNonCard(path25) {
+  const normalized = path25.toLowerCase().replace(/[^a-z0-9._]/g, "");
+  return /(^|\.)(tokenusage|usage)(\.|$)/.test(normalized) || /(startedat|endedat|durationms|timestamp|createdat|updatedat)(\.|$)/.test(normalized) || /(^|\.)(runid|traceid|spanid|eventid|sessionid|userid|parentid|requestid|correlationid)(\.|$)/.test(
+    normalized
+  ) || /(^|\.)ts(\.|$)/.test(normalized);
+}
+function isUuidLike(value) {
+  return UUID_RE.test(value.trim());
+}
+function isPlausibleCardCandidate(candidate, fullValue) {
+  const digits = digitsOnly(candidate);
+  if (digits.length < 13 || digits.length > 19) return false;
+  if (!passesLuhn(candidate)) return false;
+  const trimmed = fullValue.trim();
+  if (isUuidLike(trimmed)) return false;
+  if (EPOCH_MS_RE.test(digits) && digitsOnly(trimmed) === digits && /^\d+$/.test(trimmed)) {
+    return false;
+  }
+  const start = fullValue.indexOf(candidate);
+  if (start >= 0) {
+    const before = fullValue[start - 1];
+    const after = fullValue[start + candidate.length];
+    if (before && /[A-Za-z0-9_]/.test(before)) return false;
+    if (after && /[A-Za-z0-9_]/.test(after)) return false;
+  }
+  return true;
+}
+function looksLikePathOrPackageOrUrl(value) {
+  const trimmed = value.trim();
+  if (/^(?:[a-z][a-z0-9+.-]*:)?\/\//i.test(trimmed)) return true;
+  if (/^webpack:/i.test(trimmed)) return true;
+  if (/^@[A-Za-z0-9_.-]+\/[A-Za-z0-9_.@/-]+$/.test(trimmed)) return true;
+  if (/^[A-Za-z]:[\\/]/.test(trimmed) || /^[/\\]/.test(trimmed)) return true;
+  if (/[\\/]/.test(trimmed) && !/\s/.test(trimmed)) return true;
+  return false;
+}
+function emailMatchIsPathAdjacent(value, index, length) {
+  const before = value[index - 1];
+  const after = value[index + length];
+  return before === "/" || before === "\\" || after === "/" || after === "\\";
+}
+function valueContainsEmail(value) {
+  if (looksLikePathOrPackageOrUrl(value)) return false;
+  EMAIL_RE.lastIndex = 0;
+  for (const match of value.matchAll(EMAIL_RE)) {
+    const text = match[0] ?? "";
+    const index = match.index ?? 0;
+    if (emailMatchIsPathAdjacent(value, index, text.length)) continue;
+    return true;
+  }
+  return false;
+}
 var credentialDetectors = [
   patternDetector({
     id: "value.authorizationHeader",
@@ -4424,10 +4484,12 @@ var credentialDetectors = [
     matchKind: "value",
     detect(input3) {
       if (typeof input3.value !== "string") return [];
+      if (pathSuggestsNonCard(input3.path)) return [];
+      if (isUuidLike(input3.value)) return [];
       const candidatePattern = /(?:\d[ -]?){13,19}/g;
       for (const match of input3.value.matchAll(candidatePattern)) {
         const candidate = match[0] ?? "";
-        if (passesLuhn(candidate)) {
+        if (isPlausibleCardCandidate(candidate, input3.value)) {
           return [{ action: "replace", severity: "error", matchKind: "value" }];
         }
       }
@@ -4436,10 +4498,15 @@ var credentialDetectors = [
   }
 ];
 var identifierDetectors = [
-  patternDetector({
+  {
     id: "value.email",
-    pattern: /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/i
-  }),
+    severity: "warning",
+    matchKind: "value",
+    detect(input3) {
+      if (typeof input3.value !== "string") return [];
+      return valueContainsEmail(input3.value) ? [{ action: "replace", severity: "warning", matchKind: "value" }] : [];
+    }
+  },
   patternDetector({
     id: "value.phone",
     pattern: /\b(?:\+\d{1,3}[\s.-]?)?(?:\(?\d{3}\)?[\s.-])\d{3}[\s.-]\d{4}\b/
@@ -4760,6 +4827,16 @@ function redactJsonlText(content, profile) {
   };
 }
 function redactDocument(content, profile) {
+  const trimmed = content.trim();
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && ("schemaVersion" in parsed || "eventId" in parsed || "runId" in parsed)) {
+        return redactJsonlText(content, profile);
+      }
+    } catch {
+    }
+  }
   try {
     return redactJsonText(content, profile);
   } catch {
@@ -8235,8 +8312,6 @@ async function evalCommand(target, options = {}, stdin = process.stdin) {
   else if (options.markdown) console.log(renderEvalMarkdown(result).trimEnd());
   else printHuman2(result);
 }
-
-// packages/cli/src/safety.ts
 var BEST_EFFORT_NOTE = "Best-effort local safety verification only; not a compliance, privacy, security, or regulatory certification.";
 var DEFAULT_MAX_STRING_LENGTH = 16384;
 var DEFAULT_MAX_ARRAY_LENGTH = 1e3;
@@ -8294,7 +8369,7 @@ function resultFromParts(parts) {
   const diagnostics = [...parts.diagnostics ?? []];
   const warnings = [...parts.warnings ?? []];
   const unsupportedFields = [...parts.unsupportedFields ?? []];
-  const status = statusFrom(findings, diagnostics);
+  const status = parts.status ?? statusFrom(findings, diagnostics);
   return {
     ok: status === "SAFE" || status === "SAFE WITH WARNINGS",
     command: parts.command,
@@ -8310,7 +8385,17 @@ function resultFromParts(parts) {
     diagnostics,
     warnings,
     unsupportedFields,
-    note: BEST_EFFORT_NOTE
+    note: BEST_EFFORT_NOTE,
+    ...parts.sourceAssessment !== void 0 ? { sourceAssessment: parts.sourceAssessment } : {},
+    ...parts.artifactAssessment !== void 0 ? { artifactAssessment: parts.artifactAssessment } : {},
+    ...parts.redactionSummary !== void 0 ? { redactionSummary: parts.redactionSummary } : {}
+  };
+}
+function layerFromResult(result) {
+  return {
+    status: result.status,
+    summary: result.summary,
+    findings: result.findings
   };
 }
 function readErrorResult3(command, error) {
@@ -8374,6 +8459,21 @@ function flattenNodes(nodes) {
 function detectorSeverity(finding) {
   return finding.severity;
 }
+function classifyRedactionDetector(detector) {
+  if (detector === "value.creditCard" || detector === "value.email" || detector === "value.phone") {
+    return { category: "personal-data", confidence: "high" };
+  }
+  if (detector === "value.ipv4" || detector === "value.ipv6") {
+    return { category: "identifier", confidence: "medium" };
+  }
+  if (detector.startsWith("value.") && (detector.includes("Token") || detector.includes("Key") || detector.includes("jwt") || detector.includes("authorization") || detector.includes("bearer") || detector.includes("cookie") || detector.includes("privateKey") || detector.includes("github") || detector.includes("aws") || detector.includes("provider"))) {
+    return { category: "credential", confidence: "high" };
+  }
+  if (detector.startsWith("key.")) {
+    return { category: "credential", confidence: "medium" };
+  }
+  return { category: "credential", confidence: "medium" };
+}
 function redactionDetectorFindings(read, runId) {
   const runs = runId === void 0 ? read.runs : read.runs.filter((run) => run.runId === runId);
   const out = [];
@@ -8384,6 +8484,7 @@ function redactionDetectorFindings(read, runId) {
       const result = redact(attrs, { profile: "share" });
       for (const finding of result.findings) {
         if (finding.action === "keep") continue;
+        const taxonomy = classifyRedactionDetector(finding.detector);
         out.push({
           ruleId: "safety.redactDetector",
           severity: detectorSeverity(finding),
@@ -8401,7 +8502,11 @@ function redactionDetectorFindings(read, runId) {
               ...node.event.status !== void 0 ? { status: node.event.status } : {},
               path: `attributes.${finding.path.replace(/^\$\.?/, "")}`
             }
-          ]
+          ],
+          category: taxonomy.category,
+          confidence: taxonomy.confidence,
+          detector: finding.detector,
+          action: finding.action
         });
       }
     }
@@ -8417,13 +8522,49 @@ function exitCodeFor3(result) {
   if (result.status === "UNSAFE") return 1;
   return 2;
 }
-function printJson3(result) {
-  console.log(JSON.stringify(stable4(result), null, 2));
+function explainFinding(finding, blocksBundle) {
+  const path25 = finding.evidence[0]?.path ?? "(unknown path)";
+  const category = finding.category ?? "structure";
+  const confidence = finding.confidence ?? "medium";
+  const detector = finding.detector ?? finding.ruleId;
+  const action = finding.action ?? "review";
+  const redactionHint = category === "credential" || category === "personal-data" || category === "raw-content" || action.includes("redact") ? "Usually removable by share/strict redaction before bundling." : "May require omitting the field, lowering limits, or an explicit local override.";
+  return [
+    `  Matched: detector=${detector}; path=${path25}; category=${category}`,
+    `  Why: ${finding.message}`,
+    `  Confidence: ${confidence}`,
+    `  Redaction: ${redactionHint}`,
+    `  Override: configure a custom redaction/detector rule locally (see docs/SAFETY-POLICY.md); do not weaken defaults globally.`,
+    `  Bundle gate: ${blocksBundle ? "blocks share-safe bundle unless --allow-unsafe" : "does not block by itself (warning/info)"}`
+  ];
+}
+function findingExplanation(finding) {
+  const blocks = finding.severity === "error" || finding.status === "fail";
+  return {
+    ruleId: finding.ruleId,
+    detector: finding.detector ?? finding.ruleId,
+    path: finding.evidence[0]?.path,
+    category: finding.category,
+    confidence: finding.confidence,
+    action: finding.action,
+    blocksBundle: blocks,
+    // Never include matched secret/PII values.
+    message: finding.message
+  };
 }
-function printHuman3(result) {
+function printHuman3(result, explain = false) {
   console.log(`Safety status: ${result.status}`);
   console.log(`Format: ${result.format}`);
   if (result.runId !== void 0) console.log(`Run: ${result.runId}`);
+  if (result.sourceAssessment !== void 0 && result.artifactAssessment !== void 0) {
+    console.log(`Source assessment: ${result.sourceAssessment.status}`);
+    console.log(`Artifact assessment: ${result.artifactAssessment.status}`);
+    if (result.redactionSummary !== void 0) {
+      console.log(
+        `Redaction: profile=${result.redactionSummary.profile}, findings=${result.redactionSummary.findings}`
+      );
+    }
+  }
   console.log(
     `Summary: ${result.summary.findings} finding(s), ${result.summary.warnings} warning(s), ${result.summary.errors} error(s)`
   );
@@ -8432,45 +8573,82 @@ function printHuman3(result) {
   }
   for (const finding of result.findings) {
     const path25 = finding.evidence[0]?.path;
-    console.log(`- ${finding.ruleId}: ${finding.message}${path25 ? ` (${path25})` : ""}`);
+    const taxonomy = finding.category !== void 0 || finding.confidence !== void 0 ? ` [${[finding.category, finding.confidence].filter(Boolean).join("/")}]` : "";
+    console.log(`- ${finding.ruleId}: ${finding.message}${path25 ? ` (${path25})` : ""}${taxonomy}`);
+    if (explain) {
+      const blocks = finding.severity === "error" || finding.status === "fail";
+      for (const line of explainFinding(finding, blocks)) {
+        console.log(line);
+      }
+    }
   }
   console.log(`Note: ${result.note}`);
 }
+function printJson3(result, explain = false) {
+  const payload = explain === true ? { ...result, explanations: result.findings.map(findingExplanation) } : result;
+  console.log(JSON.stringify(stable4(payload), null, 2));
+}
 async function safetyCommand(command, target, options, stdin) {
   let result;
   try {
-    const rules = buildSafetyRules(options);
     const input3 = await inputFromTarget(target, options, stdin);
     const read = await openTrace(input3, {
       ...options.format !== void 0 ? { format: options.format } : {}
     });
-    const checkResult = runTraceChecks(
-      { read },
-      {
-        rules,
-        ...options.run !== void 0 ? { runId: options.run } : {}
-      }
-    );
-    const detectorFindings = checkResult.diagnostics.length === 0 ? redactionDetectorFindings(read, checkResult.runId) : [];
-    result = resultFromParts({
-      command,
-      format: checkResult.format,
-      runId: checkResult.runId,
-      findings: [...checkResult.findings, ...detectorFindings],
-      diagnostics: [
-        ...checkResult.diagnostics.map(diagnosticFromCheck),
-        ...warningDiagnostics(read.warnings, read.unsupportedFields)
-      ],
-      warnings: read.warnings,
-      unsupportedFields: read.unsupportedFields
+    const source = assessOpenedTrace(read, {
+      ...options,
+      ...options.run !== void 0 ? { runId: options.run } : {}
     });
+    if (command === "scan") {
+      result = { ...source, command: "scan" };
+    } else {
+      const profile = options.redactionProfile ?? "share";
+      const rawContent = input3.type === "string" ? input3.content : input3.type === "file" ? await readFile(input3.path, "utf-8") : void 0;
+      if (rawContent === void 0) {
+        result = {
+          ...source,
+          command: "verify-safe",
+          sourceAssessment: layerFromResult(source)
+        };
+      } else {
+        const redacted = redactTraceContent(rawContent, profile);
+        const artifactRead = await openTrace(
+          { type: "string", content: redacted.content },
+          { format: options.format ?? "agent-inspect-jsonl" }
+        );
+        const artifact = assessOpenedTrace(artifactRead, {
+          ...options,
+          ...options.run !== void 0 ? { runId: options.run } : {}
+        });
+        const detectors = [
+          ...new Set(redacted.findings.map((finding) => finding.detector))
+        ].sort((a, b) => a.localeCompare(b));
+        result = resultFromParts({
+          command: "verify-safe",
+          format: artifact.format,
+          runId: artifact.runId ?? source.runId,
+          findings: artifact.findings,
+          diagnostics: artifact.diagnostics,
+          warnings: artifact.warnings,
+          unsupportedFields: artifact.unsupportedFields,
+          status: artifact.status,
+          sourceAssessment: layerFromResult(source),
+          artifactAssessment: layerFromResult(artifact),
+          redactionSummary: {
+            profile,
+            findings: redacted.findings.length,
+            detectors
+          }
+        });
+      }
+    }
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     result = message.startsWith("--") ? invalidArgumentResult(command, error) : readErrorResult3(command, error);
   }
   process.exitCode = exitCodeFor3(result);
-  if (options.json) printJson3(result);
-  else printHuman3(result);
+  if (options.json) printJson3(result, options.explain === true);
+  else printHuman3(result, options.explain === true);
 }
 function scanCommand(target, options = {}, stdin = process.stdin) {
   return safetyCommand("scan", target, options, stdin);
@@ -8949,15 +9127,8 @@ async function bundleCommand(runIdArg, options = {}) {
       process.exitCode = 1;
       return;
     }
-    const safety = assessOpenedTrace(read, { run: runId });
-    const status = safetyStatusFromAssess(safety.status);
-    checkRuns.push({
-      runId,
-      status,
-      errors: safety.summary.errors,
-      warnings: safety.summary.warnings,
-      findings: safety.summary.findings
-    });
+    const sourceSafety = assessOpenedTrace(read, { run: runId });
+    const sourceStatus = safetyStatusFromAssess(sourceSafety.status);
     const redacted = redactTraceContent(rawContent, toReportProfile(profile));
     redactedJsonlByRun.set(runId, redacted.content);
     combinedJsonl += redacted.content.endsWith("\n") ? redacted.content : `${redacted.content}
@@ -8970,6 +9141,34 @@ async function bundleCommand(runIdArg, options = {}) {
       findings: redacted.findings.length,
       detectors
     });
+    let artifactSafety = sourceSafety;
+    try {
+      const artifactRead = await openTrace(
+        { type: "string", content: redacted.content },
+        { format: "agent-inspect-jsonl" }
+      );
+      artifactSafety = assessOpenedTrace(artifactRead, { run: runId });
+    } catch {
+      artifactSafety = {
+        ...sourceSafety,
+        status: "UNKNOWN",
+        ok: false,
+        summary: {
+          findings: sourceSafety.summary.findings,
+          warnings: sourceSafety.summary.warnings,
+          errors: Math.max(1, sourceSafety.summary.errors)
+        }
+      };
+    }
+    const status = safetyStatusFromAssess(artifactSafety.status);
+    checkRuns.push({
+      runId,
+      status,
+      sourceStatus,
+      errors: artifactSafety.summary.errors,
+      warnings: artifactSafety.summary.warnings,
+      findings: artifactSafety.summary.findings
+    });
     const selected = read.runs.find((run) => run.runId === runId);
     const runReport = exportRunTree(selected ?? read.runs[0], {
       format: "html",
@@ -8998,13 +9197,13 @@ async function bundleCommand(runIdArg, options = {}) {
       console.log(
         writeJson4({
           ok: false,
-          error: `Bundle safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`,
+          error: `Bundle artifact safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`,
           checks: checks2
         }).trimEnd()
       );
     } else {
       console.error(
-        `[AgentInspect] bundle refused: safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`
+        `[AgentInspect] bundle refused: artifact safety status is ${checks2.aggregateStatus}. Pass --allow-unsafe to override.`
       );
     }
     process.exitCode = 1;
@@ -10423,7 +10622,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-Z5W27YCW.mjs');
+    return await import('./src-C4EUHTER.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(
@@ -11335,7 +11534,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
     runCommand(() => scanCommand(target, opts));
   });
   program.command("verify-safe").description("Best-effort local trace safety verification").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
@@ -11344,7 +11543,7 @@ function createCliProgram() {
       "openinference-json",
       "otlp-json"
     ])
-  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
+  ).option("--run <run-id>", "select a run when the trace contains multiple runs").option("--json", "print deterministic JSON safety result").option("--explain", "explain each finding (path, confidence, redaction, override, bundle gate)").option("--max-string-length <number>", "unsafe threshold for string values").option("--max-array-length <number>", "unsafe threshold for array values").option("--max-object-keys <number>", "unsafe threshold for object key counts").option("--max-serialized-bytes <number>", "unsafe threshold for serialized values").action((target, opts) => {
     runCommand(() => verifySafeCommand(target, opts));
   });
   program.command("artifacts").description("Create safe local CI trace artifacts").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").requiredOption("--output-dir <path>", "directory for generated artifacts").option("--dir <path>", "trace directory for run-id lookup").addOption(