agent-inspect 6.9.0 → 6.10.0

package/packages/core/dist/advanced.d.ts

@@ -751,14 +751,345 @@ declare function bundleRunAssetRelativePath(runId: string, extension: string): s
  */
 declare function assertBundlePathContained(outputDir: string, relativePath: string): string;
 /**
- * Normalizes bundle output path. Strips a `.zip` suffix (folder-first MVP).
+ * Normalizes bundle output path.
+ * For directory/html modes, strips a trailing `.zip` suffix (folder-first).
+ * Pass `preserveZipExtension: true` for `--format zip`.
  */
-declare function normalizeBundleOutputPath(out: string): string;
+declare function normalizeBundleOutputPath(out: string, options?: {
+    preserveZipExtension?: boolean;
+}): string;
 /**
  * Default bundle directory when --out is omitted.
  */
 declare function defaultBundleOutputPath(runIds: readonly string[]): string;
 
+/** Portable Evidence v2 (`evidenceFormatVersion`) — independent of trace schema. */
+type EvidenceFormatVersion = "1.0";
+type EvidenceSafeStatus = "SAFE" | "SAFE WITH WARNINGS" | "UNSAFE" | "UNKNOWN";
+type EvidenceRedactionProfile = "local" | "share" | "strict";
+type EvidenceVerificationPolicy = "development" | "local" | "share" | "strict";
+type EvidenceFileRole = "report" | "redacted-trace" | "checks" | "redaction-report" | "summary" | "other";
+interface EvidenceSourceHash {
+    runId: string;
+    algorithm: "sha256";
+    hash: string;
+}
+interface EvidenceFileEntry {
+    path: string;
+    sha256: string;
+    role?: EvidenceFileRole;
+}
+interface EvidenceManifest {
+    evidenceFormatVersion: EvidenceFormatVersion;
+    generator: {
+        name: string;
+        version: string;
+    };
+    createdAt?: string;
+    source: {
+        runIds: string[];
+        traceSchemaVersions: string[];
+        sourceHashes: EvidenceSourceHash[];
+    };
+    policy: {
+        redactionProfile: EvidenceRedactionProfile;
+        verificationPolicy: EvidenceVerificationPolicy;
+    };
+    assessment: {
+        status: EvidenceSafeStatus;
+        sourceStatus?: EvidenceSafeStatus;
+        note?: string;
+    };
+    files: EvidenceFileEntry[];
+}
+interface EvidencePackagedFile {
+    /** Relative POSIX path inside the evidence/bundle directory. */
+    path: string;
+    /** Exact bytes that will be / were written. */
+    content: string | Uint8Array;
+    role?: EvidenceFileRole;
+}
+declare const EVIDENCE_FORMAT_VERSION: EvidenceFormatVersion;
+declare const EVIDENCE_ASSESSMENT_NOTE = "Best-effort local safety verification only; not a compliance certification.";
+declare const EVIDENCE_MANIFEST_FILENAME = "evidence.json";
+
+/**
+ * SHA-256 hex digest of exact bytes (UTF-8 when `data` is a string).
+ */
+declare function sha256Hex(data: string | Uint8Array): string;
+declare function isSha256Hex(value: string): boolean;
+/**
+ * Constant-time-ish equality for hex digests (length-checked; not for secrets).
+ */
+declare function sha256Equals(expected: string, actual: string): boolean;
+
+/**
+ * Validates a relative evidence/bundle path: no absolute paths, no `..`, POSIX separators.
+ * Returns the normalized POSIX relative path.
+ */
+declare function assertEvidenceRelativePath(relativePath: string): string;
+
+/**
+ * Deterministic JSON serialization used for evidence manifests (trailing newline).
+ */
+declare function serializeEvidenceManifest(manifest: EvidenceManifest): string;
+declare function inferEvidenceFileRole(relativePath: string): EvidenceFileRole;
+/**
+ * Hash packaged file bytes into Evidence `files[]` entries (sorted by path).
+ * Rejects `evidence.json` itself (manifest is not self-hashed).
+ */
+declare function buildEvidenceFileEntries(files: readonly EvidencePackagedFile[]): EvidenceFileEntry[];
+declare function buildEvidenceManifest(parts: {
+    generatorVersion: string;
+    generatorName?: string;
+    runIds: readonly string[];
+    traceSchemaVersions: readonly string[];
+    sourceHashes: readonly EvidenceSourceHash[];
+    redactionProfile: EvidenceRedactionProfile;
+    verificationPolicy?: EvidenceVerificationPolicy;
+    assessmentStatus: EvidenceSafeStatus;
+    sourceStatus?: EvidenceSafeStatus;
+    files: readonly EvidencePackagedFile[];
+    createdAt?: string;
+    note?: string;
+}): EvidenceManifest;
+/**
+ * Minimal structural validation for a parsed evidence manifest object.
+ * Unknown fields are preserved by returning the cast value after checks.
+ */
+declare function validateEvidenceManifest(value: unknown): EvidenceManifest;
+declare function parseEvidenceManifestJson(text: string): EvidenceManifest;
+/**
+ * Collect unique `schemaVersion` values from agent-inspect JSONL text.
+ */
+declare function collectTraceSchemaVersions(jsonl: string): string[];
+
+declare const EVIDENCE_HTML_FILENAME = "evidence.html";
+/** View ids reserved for later 6.10 chunks; shell renders stubs except summary. */
+declare const EVIDENCE_VIEW_IDS: readonly ["summary", "tree", "timeline", "causal", "tools-llm", "outcomes", "contracts", "circuit", "diff", "safety", "provenance"];
+type EvidenceViewId = (typeof EVIDENCE_VIEW_IDS)[number];
+interface EvidenceHtmlShellInput {
+    title?: string;
+    runIds: readonly string[];
+    assessmentStatus: EvidenceSafeStatus;
+    sourceStatus?: EvidenceSafeStatus;
+    redactionProfile: string;
+    verificationPolicy: string;
+    generatorName: string;
+    generatorVersion: string;
+    createdAt?: string;
+    evidenceFormatVersion?: string;
+    /** Optional short summary markdown already safe for display (will be escaped). */
+    summaryText?: string;
+    /** Bounded check counts (no finding payloads / prompts). */
+    checkSummary?: {
+        aggregateStatus: EvidenceSafeStatus;
+        runs: readonly {
+            runId: string;
+            status: EvidenceSafeStatus;
+            sourceStatus?: EvidenceSafeStatus;
+            errors: number;
+            warnings: number;
+            findings: number;
+        }[];
+    };
+    /** Max chars for embedded JSON payload (default 64 KiB). */
+    maxEmbeddedJsonChars?: number;
+    /**
+     * Pre-escaped HTML bodies for views. Missing ids keep the stub panel.
+     * Callers must pass only trusted, escaped fragments (use evidence view builders).
+     */
+    viewBodies?: Partial<Record<EvidenceViewId, string>>;
+}
+/**
+ * Encode JSON for embedding in HTML without breaking out of a script/pre context.
+ * Escapes `<` so `</script>` cannot appear in payload text.
+ */
+declare function encodeEmbeddedEvidenceJson(value: unknown): string;
+/**
+ * Build a self-contained offline `evidence.html` shell (no external assets/network).
+ * View panels beyond Summary are stubs filled in later 6.10 chunks.
+ */
+declare function buildEvidenceHtmlShell(input: EvidenceHtmlShellInput): string;
+/**
+ * Convenience: build shell fields from an EvidenceManifest (views still stubbed).
+ */
+declare function buildEvidenceHtmlShellFromManifest(manifest: EvidenceManifest, extras?: Partial<Pick<EvidenceHtmlShellInput, "summaryText" | "checkSummary" | "title" | "viewBodies">>): string;
+
+/**
+ * Execution-tree HTML fragment for the Evidence Tree view (already escaped).
+ */
+declare function buildEvidenceTreeViewHtml(trees: readonly InspectRunTree[]): string;
+/**
+ * Timeline / waterfall HTML fragment (escaped; no external assets).
+ */
+declare function buildEvidenceTimelineViewHtml(trees: readonly InspectRunTree[]): string;
+/**
+ * First causal failure view: earliest error by timestamp, with parent chain.
+ * Does not invent relationships; if no parentId chain exists, shows the error alone.
+ */
+declare function buildEvidenceCausalFailureViewHtml(trees: readonly InspectRunTree[]): string;
+/** Extra CSS for tree / timeline / causal panels (inlined into evidence shell). */
+declare const EVIDENCE_VIEW_CSS: string;
+
+interface EvidenceCheckFindingSummary {
+    runId: string;
+    ruleId: string;
+    severity: string;
+    message: string;
+    category?: string;
+    detector?: string;
+    confidence?: string;
+    action?: string;
+}
+interface EvidenceContractsViewInput {
+    aggregateStatus: string;
+    runs: readonly {
+        runId: string;
+        status: string;
+        sourceStatus?: string;
+        errors: number;
+        warnings: number;
+        findings: number;
+    }[];
+    findingSummaries?: readonly EvidenceCheckFindingSummary[];
+}
+/**
+ * Contracts / checks HTML: aggregate status + bounded finding taxonomy (no evidence payloads).
+ */
+declare function buildEvidenceContractsViewHtml(input: EvidenceContractsViewInput): string;
+/**
+ * Observed outcomes view from persisted inspect events (redacted artifact).
+ */
+declare function buildEvidenceOutcomesViewHtml(runs: readonly {
+    runId: string;
+    events: readonly PersistedInspectEvent[];
+}[]): string;
+/**
+ * Diff view: when two event sets are supplied, render a local run diff.
+ * Otherwise show an empty-state explaining baseline/candidate is optional.
+ */
+declare function buildEvidenceDiffViewHtml(parts?: {
+    leftRunId: string;
+    rightRunId: string;
+    leftEvents: readonly PersistedInspectEvent[];
+    rightEvents: readonly PersistedInspectEvent[];
+}): string;
+
+interface EvidenceSafetyViewInput {
+    artifactStatus: EvidenceSafeStatus | string;
+    sourceStatus?: EvidenceSafeStatus | string;
+    redactionProfile: string;
+    verificationPolicy: string;
+    redaction?: {
+        totalFindings: number;
+        runs: readonly {
+            runId: string;
+            findings: number;
+            detectors: string[];
+        }[];
+    };
+    findingSummaries?: readonly EvidenceCheckFindingSummary[];
+}
+interface EvidenceProvenanceViewInput {
+    generatorName: string;
+    generatorVersion: string;
+    evidenceFormatVersion: string;
+    createdAt?: string;
+    runIds: readonly string[];
+    traceSchemaVersions: readonly string[];
+    sourceHashes: readonly EvidenceSourceHash[];
+    packagedFiles: readonly {
+        path: string;
+        role?: string;
+    }[];
+    note?: string;
+}
+/**
+ * Safety / redaction view: artifact vs source status + detector summary (no raw secrets).
+ */
+declare function buildEvidenceSafetyViewHtml(input: EvidenceSafetyViewInput): string;
+/**
+ * Provenance / mapping view: generator, schema versions, source hashes, packaged roles.
+ */
+declare function buildEvidenceProvenanceViewHtml(input: EvidenceProvenanceViewInput): string;
+/**
+ * Tools / LLM metadata view: names, kinds, statuses, durations — no prompts/outputs.
+ */
+declare function buildEvidenceToolsLlmViewHtml(trees: readonly InspectRunTree[]): string;
+/**
+ * Circuit / guardrails placeholder filled with conservative empty state unless findings supplied.
+ */
+declare function buildEvidenceCircuitViewHtml(parts?: {
+    findings?: readonly {
+        runId: string;
+        name: string;
+        status: string;
+        detail?: string;
+    }[];
+}): string;
+
+interface ZipEntry {
+    path: string;
+    content: string | Uint8Array;
+}
+/**
+ * Build a minimal ZIP archive (STORE method) with traversal-safe relative paths.
+ * No external dependencies — suitable for Evidence `--format zip`.
+ */
+declare function buildZipArchive(entries: readonly ZipEntry[]): Buffer;
+
+type EvidenceVerifyStatus = "pass" | "fail";
+interface EvidenceVerifyIssue {
+    code: "manifest_missing" | "manifest_invalid" | "file_missing" | "file_unexpected" | "hash_mismatch" | "assessment_missing" | "provenance_missing" | "path_unsafe" | "io_error";
+    severity: "error" | "warning";
+    message: string;
+    path?: string;
+}
+interface EvidenceVerifyResult {
+    ok: boolean;
+    status: EvidenceVerifyStatus;
+    root: string;
+    manifest?: EvidenceManifest;
+    issues: EvidenceVerifyIssue[];
+    checkedFiles: number;
+}
+interface EvidenceVerifyOptions {
+    /** Unexpected files: default fail for share/strict-style verification. */
+    unexpectedFiles?: "fail" | "warn" | "ignore";
+}
+/**
+ * Verify an Evidence v2 directory (contains `evidence.json`).
+ * Does not extract ZIP archives — callers should unpack first when needed.
+ */
+declare function verifyEvidenceDirectory(rootPath: string, options?: EvidenceVerifyOptions): Promise<EvidenceVerifyResult>;
+
+interface EvidenceCiPackageInput {
+    generatorVersion: string;
+    runIds: readonly string[];
+    /** Pre-redaction source bytes keyed by run id (for sourceHashes). */
+    sourceContents: ReadonlyMap<string, string> | Record<string, string>;
+    /** Redacted combined JSONL written as trace.jsonl. */
+    redactedTraceJsonl: string;
+    redactionProfile: "local" | "share" | "strict";
+    assessmentStatus: EvidenceSafeStatus;
+    sourceStatus?: EvidenceSafeStatus;
+    checkResultsJson: string;
+    createdAt?: string;
+    summaryText?: string;
+}
+interface EvidenceCiPackageFiles {
+    "evidence.html": string;
+    "evidence.json": string;
+    "check-results.json": string;
+    "trace.jsonl": string;
+    manifest: EvidenceManifest;
+}
+/**
+ * Build the four standard CI evidence files (in memory) using Evidence v2 helpers.
+ */
+declare function buildEvidenceCiPackage(input: EvidenceCiPackageInput): EvidenceCiPackageFiles;
+
 type SuiteCaseStatus = "pass" | "fail" | "error" | "skipped";
 type SuiteDiagnosticCode = "AI_SUITE_CONFIG_INVALID" | "AI_SUITE_CONFIG_LOAD_FAILED" | "AI_SUITE_CASE_TRACE_MISSING" | "AI_SUITE_CASE_CHECK_FAILED" | "AI_SUITE_CASE_EVAL_FAILED" | "AI_SUITE_CASE_OBSERVATION_FAILED" | "AI_SUITE_TRACE_UNREADABLE";
 interface SuiteDiagnostic {
@@ -1043,4 +1374,4 @@ declare function renderGateGithubStepSummary(result: GateResult): string;
 declare function renderGateJUnit(result: GateResult): string;
 declare function renderGateReport(result: GateResult, options?: RenderGateReportOptions): string;
 
-export { type ActivityEntry, type ActivitySummary, type AnalyzeCohortOptions, type BuildActivitySummaryOptions, type BuildSessionIndexOptions, type BundleCheckResults, type BundleCheckRunResult, type BundleMetadata, type BundlePlaceholderArtifact, type BundleRedactionProfile, type BundleRedactionReport, type BundleRedactionReportRun, type BundleResolveOptions, type BundleResolveResult, type BundleSafeStatus, type BundleSafeStatusMetadata, COHORT_METRIC_IDS, type CohortAggregateMetrics, type CohortAnalysisResult, type CohortMetricComparison, type CohortMetricId, type CohortRunMetrics, type CriticalPathStep, DEFAULT_SUITE_ARTIFACTS_DIR, DEFAULT_SUITE_CONFIG_NAMES, DEFAULT_TRACE_DIR_NAME, type DurationStats, type EnrichSessionSummaryOptions, ErrorInfo, type ExplainFact, type ExplainInference, type ExplainMode, type ExplainOptions, type ExplainResult, FALLBACK_TRACE_DIR, type GateCheckId, type GateCheckResult, type GateExitCode, type GateResult, type GroupSessionCohortsOptions, type HandoffEdge, InspectRunTree, type LoadSuiteConfigOptions, MAX_NAME_LENGTH, MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, ObservedOutcome, type ParseTraceJsonlOptions, type ParseTraceJsonlResult, type ParsedDurationFilter, RUNS_DIR_NAME, RedactionProfile, type RenderCohortReportOptions, type RenderGateReportOptions, type RenderSuiteReportOptions, type RenderTimelineOptions, type RenderWhatOptions, type ResolvedRedactionProfile, type ResolvedSuiteCase, type RetryLink, type RunGateOptions, RunStatus, type RunSuiteOptions, RunSummary, type RunTimeline, type RunWhatSummary, SESSION_WORKFLOW_KEYS, SUITE_TEMPLATE_IDS, type SessionCheckSummary, type SessionCohort, type SessionCohortKind, type SessionConfidence, type SessionEdgeSource, type SessionGroup, type SessionIndex, type SessionLastError, type SessionRunRecord, type SessionScopeOptions, type SessionScopeResult, type SessionStatus, type SessionSummary, type SessionWarning, type SessionWorkflowKey, type SessionWorkflowMetadata, StepStatus, StepType, type SuiteArtifactsConfig, type SuiteCaseConfig, type SuiteCaseResult, type SuiteCaseStatus, type SuiteChecksConfig, type SuiteConfig, type SuiteDiagnostic, type SuiteDiagnosticCode, type SuiteEvalConfig, type SuiteRunResult, type SuiteRunSummary, type SuiteTemplateId, TERMINAL_INDENT, type TimelineEntry, type TimelineFocus, type TimelineOptions, TraceCorrelationMetadata, TraceDirectory, type TraceDirectoryOptions, TraceEvent, type TraceFilterOptions, type TraceJsonlFormat, TraceMetadata, TraceMetadataStatus, type TraceSearchOptions, type TraceSearchResult, type TraceSessionCheckResult, type TraceStats, type TraceStatsOptions, type TraceStatsRankedRun, type TraceStatsRankedStep, type ValidateSuiteConfigResult, aggregateBundleSafeStatus, aggregateSessionCheckResults, analyzeCohort, assertBundlePathContained, buildActivitySummary, buildBundleMetadata, buildBundleSummaryMarkdown, buildLocalExplanation, buildPlaceholderArtifact, buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildSessionIndex, buildTraceStats, bundleFailsOnSafety, bundleRunAssetRelativePath, compareCohortAggregates, createRunId, createStepId, defaultBundleOutputPath, defaultSuiteConfigTemplate, deriveSessionStatus, enrichSessionRunRecord, enrichSessionSummary, ensureTraceDir, extractMetadata, extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents, extractSessionWorkflowMetadata, filterMetasBySessionScope, filterTraces, formatDuration, formatError, formatTerminalName, formatTimestamp, gateHasThresholds, getDefaultTraceDir, getIndent, getRunIdFromTraceFileName, getSuiteTemplate, getTraceFilePath, groupSessionCohorts, initializeTraceFile, isAgentInspectTrace, listSuiteTemplates, listTraceFiles, loadSessionRunRecords, loadSuiteConfig, loadTraceMetadataList, normalizeBundleOutputPath, normalizeSuiteConfig, parseCohortMetricList, parseDuration, parseDurationFilter, parseGateList, parseGateNumber, parseGroupBySpec, parseTraceJsonl, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, readTraceEvents, readTraceFile, renderActivitySummaryHuman, renderCohortReport, renderCohortSummaryMarkdown, renderErrorLine, renderGateGithubStepSummary, renderGateJUnit, renderGateReport, renderGateSummaryMarkdown, renderRunSummary, renderRunWhat, renderStepLine, renderSuiteReport, renderSuiteReportMarkdown, renderTimeline, renderTraceStats, resolveBundleRunIds, resolveRedactionProfile, resolveSuiteCaseTrace, resolveSuiteConfigPath, resolveSuiteTemplate, resolveTraceDir, runGate, runSuite, sanitizeBundleRunId, searchTraces, serializeEvent, sessionKeyForRun, toMetadataSafeStatus, traceMetasToSessionRunRecords, truncateName, unknownTraceFormatMessage, validateEvent, validateSuiteConfig, warn, writeTraceEvent };
+export { type ActivityEntry, type ActivitySummary, type AnalyzeCohortOptions, type BuildActivitySummaryOptions, type BuildSessionIndexOptions, type BundleCheckResults, type BundleCheckRunResult, type BundleMetadata, type BundlePlaceholderArtifact, type BundleRedactionProfile, type BundleRedactionReport, type BundleRedactionReportRun, type BundleResolveOptions, type BundleResolveResult, type BundleSafeStatus, type BundleSafeStatusMetadata, COHORT_METRIC_IDS, type CohortAggregateMetrics, type CohortAnalysisResult, type CohortMetricComparison, type CohortMetricId, type CohortRunMetrics, type CriticalPathStep, DEFAULT_SUITE_ARTIFACTS_DIR, DEFAULT_SUITE_CONFIG_NAMES, DEFAULT_TRACE_DIR_NAME, type DurationStats, EVIDENCE_ASSESSMENT_NOTE, EVIDENCE_FORMAT_VERSION, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, EVIDENCE_VIEW_CSS, EVIDENCE_VIEW_IDS, type EnrichSessionSummaryOptions, ErrorInfo, type EvidenceCheckFindingSummary, type EvidenceCiPackageFiles, type EvidenceCiPackageInput, type EvidenceContractsViewInput, type EvidenceFileEntry, type EvidenceFileRole, type EvidenceFormatVersion, type EvidenceHtmlShellInput, type EvidenceManifest, type EvidencePackagedFile, type EvidenceProvenanceViewInput, type EvidenceRedactionProfile, type EvidenceSafeStatus, type EvidenceSafetyViewInput, type EvidenceSourceHash, type EvidenceVerificationPolicy, type EvidenceVerifyIssue, type EvidenceVerifyOptions, type EvidenceVerifyResult, type EvidenceVerifyStatus, type EvidenceViewId, type ExplainFact, type ExplainInference, type ExplainMode, type ExplainOptions, type ExplainResult, FALLBACK_TRACE_DIR, type GateCheckId, type GateCheckResult, type GateExitCode, type GateResult, type GroupSessionCohortsOptions, type HandoffEdge, InspectRunTree, type LoadSuiteConfigOptions, MAX_NAME_LENGTH, MAX_TERMINAL_DEPTH, MAX_TERMINAL_NAME_LENGTH, ObservedOutcome, type ParseTraceJsonlOptions, type ParseTraceJsonlResult, type ParsedDurationFilter, RUNS_DIR_NAME, RedactionProfile, type RenderCohortReportOptions, type RenderGateReportOptions, type RenderSuiteReportOptions, type RenderTimelineOptions, type RenderWhatOptions, type ResolvedRedactionProfile, type ResolvedSuiteCase, type RetryLink, type RunGateOptions, RunStatus, type RunSuiteOptions, RunSummary, type RunTimeline, type RunWhatSummary, SESSION_WORKFLOW_KEYS, SUITE_TEMPLATE_IDS, type SessionCheckSummary, type SessionCohort, type SessionCohortKind, type SessionConfidence, type SessionEdgeSource, type SessionGroup, type SessionIndex, type SessionLastError, type SessionRunRecord, type SessionScopeOptions, type SessionScopeResult, type SessionStatus, type SessionSummary, type SessionWarning, type SessionWorkflowKey, type SessionWorkflowMetadata, StepStatus, StepType, type SuiteArtifactsConfig, type SuiteCaseConfig, type SuiteCaseResult, type SuiteCaseStatus, type SuiteChecksConfig, type SuiteConfig, type SuiteDiagnostic, type SuiteDiagnosticCode, type SuiteEvalConfig, type SuiteRunResult, type SuiteRunSummary, type SuiteTemplateId, TERMINAL_INDENT, type TimelineEntry, type TimelineFocus, type TimelineOptions, TraceCorrelationMetadata, TraceDirectory, type TraceDirectoryOptions, TraceEvent, type TraceFilterOptions, type TraceJsonlFormat, TraceMetadata, TraceMetadataStatus, type TraceSearchOptions, type TraceSearchResult, type TraceSessionCheckResult, type TraceStats, type TraceStatsOptions, type TraceStatsRankedRun, type TraceStatsRankedStep, type ValidateSuiteConfigResult, type ZipEntry, aggregateBundleSafeStatus, aggregateSessionCheckResults, analyzeCohort, assertBundlePathContained, assertEvidenceRelativePath, buildActivitySummary, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceCausalFailureViewHtml, buildEvidenceCiPackage, buildEvidenceCircuitViewHtml, buildEvidenceContractsViewHtml, buildEvidenceDiffViewHtml, buildEvidenceFileEntries, buildEvidenceHtmlShell, buildEvidenceHtmlShellFromManifest, buildEvidenceManifest, buildEvidenceOutcomesViewHtml, buildEvidenceProvenanceViewHtml, buildEvidenceSafetyViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceTreeViewHtml, buildLocalExplanation, buildPlaceholderArtifact, buildRunSummary, buildRunTimeline, buildRunWhatSummary, buildSessionIndex, buildTraceStats, buildZipArchive, bundleFailsOnSafety, bundleRunAssetRelativePath, collectTraceSchemaVersions, compareCohortAggregates, createRunId, createStepId, defaultBundleOutputPath, defaultSuiteConfigTemplate, deriveSessionStatus, encodeEmbeddedEvidenceJson, enrichSessionRunRecord, enrichSessionSummary, ensureTraceDir, extractMetadata, extractOutcomesFromPersistedEvents, extractOutcomesFromTraceEvents, extractSessionWorkflowMetadata, filterMetasBySessionScope, filterTraces, formatDuration, formatError, formatTerminalName, formatTimestamp, gateHasThresholds, getDefaultTraceDir, getIndent, getRunIdFromTraceFileName, getSuiteTemplate, getTraceFilePath, groupSessionCohorts, inferEvidenceFileRole, initializeTraceFile, isAgentInspectTrace, isSha256Hex, listSuiteTemplates, listTraceFiles, loadSessionRunRecords, loadSuiteConfig, loadTraceMetadataList, normalizeBundleOutputPath, normalizeSuiteConfig, parseCohortMetricList, parseDuration, parseDurationFilter, parseEvidenceManifestJson, parseGateList, parseGateNumber, parseGroupBySpec, parseTraceJsonl, printError, printFailedAt, printRunComplete, printRunStart, printStepComplete, printStepStart, readTraceEvents, readTraceFile, renderActivitySummaryHuman, renderCohortReport, renderCohortSummaryMarkdown, renderErrorLine, renderGateGithubStepSummary, renderGateJUnit, renderGateReport, renderGateSummaryMarkdown, renderRunSummary, renderRunWhat, renderStepLine, renderSuiteReport, renderSuiteReportMarkdown, renderTimeline, renderTraceStats, resolveBundleRunIds, resolveRedactionProfile, resolveSuiteCaseTrace, resolveSuiteConfigPath, resolveSuiteTemplate, resolveTraceDir, runGate, runSuite, sanitizeBundleRunId, searchTraces, serializeEvent, serializeEvidenceManifest, sessionKeyForRun, sha256Equals, sha256Hex, toMetadataSafeStatus, traceMetasToSessionRunRecords, truncateName, unknownTraceFormatMessage, validateEvent, validateEvidenceManifest, validateSuiteConfig, verifyEvidenceDirectory, warn, writeTraceEvent };