@agent-finops/core 0.9.6 → 0.9.7

package/dist/agentEconomicsReceipt.d.ts

@@ -8,8 +8,8 @@ declare const financialEvidenceWithAmountSchema: z.ZodEnum<{
 }>;
 export declare const receiptModeValues: readonly ["local", "connected", "mixed", "sample"];
 export declare const receiptModeSchema: z.ZodEnum<{
-    mixed: "mixed";
     local: "local";
+    mixed: "mixed";
     sample: "sample";
     connected: "connected";
 }>;
@@ -26,8 +26,8 @@ export type ReceiptSourceKind = z.infer<typeof receiptSourceKindSchema>;
 export declare const receiptProvenanceOriginValues: readonly ["provider_reported", "locally_observed", "user_declared", "sample"];
 export declare const receiptProvenanceOriginSchema: z.ZodEnum<{
     provider_reported: "provider_reported";
-    sample: "sample";
     user_declared: "user_declared";
+    sample: "sample";
     locally_observed: "locally_observed";
 }>;
 export type ReceiptProvenanceOrigin = z.infer<typeof receiptProvenanceOriginSchema>;
@@ -40,9 +40,9 @@ export declare const receiptTransformationSchema: z.ZodEnum<{
 export type ReceiptTransformation = z.infer<typeof receiptTransformationSchema>;
 export declare const receiptAccountingBasisValues: readonly ["provider_billed", "api_equivalent", "user_declared"];
 export declare const receiptAccountingBasisSchema: z.ZodEnum<{
-    api_equivalent: "api_equivalent";
-    provider_billed: "provider_billed";
     user_declared: "user_declared";
+    provider_billed: "provider_billed";
+    api_equivalent: "api_equivalent";
 }>;
 export type ReceiptAccountingBasis = z.infer<typeof receiptAccountingBasisSchema>;
 export declare const receiptMappingGapCodeValues: readonly ["cost_unsplit", "cost_unpriced", "model_unmapped", "provider_unmapped", "source_record_unmapped"];
@@ -57,9 +57,9 @@ export type ReceiptMappingGapCode = z.infer<typeof receiptMappingGapCodeSchema>;
 export declare const receiptFreshnessSchema: z.ZodPipe<z.ZodObject<{
     status: z.ZodEnum<{
         error: "error";
-        not_checked: "not_checked";
-        stale: "stale";
         fresh: "fresh";
+        stale: "stale";
+        not_checked: "not_checked";
     }>;
     checkedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     latestEvidenceAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -68,9 +68,9 @@ export declare const receiptFreshnessSchema: z.ZodPipe<z.ZodObject<{
     errorCode?: string | undefined;
     latestEvidenceAt?: string | undefined;
     checkedAt?: string | undefined;
-    status: "error" | "not_checked" | "stale" | "fresh";
+    status: "error" | "fresh" | "stale" | "not_checked";
 }, {
-    status: "error" | "not_checked" | "stale" | "fresh";
+    status: "error" | "fresh" | "stale" | "not_checked";
     checkedAt?: string | undefined;
     latestEvidenceAt?: string | undefined;
     errorCode?: string | undefined;
@@ -95,9 +95,9 @@ export declare const receiptSourceSchema: z.ZodObject<{
     freshness: z.ZodPipe<z.ZodObject<{
         status: z.ZodEnum<{
             error: "error";
-            not_checked: "not_checked";
-            stale: "stale";
             fresh: "fresh";
+            stale: "stale";
+            not_checked: "not_checked";
         }>;
         checkedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
         latestEvidenceAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -106,9 +106,9 @@ export declare const receiptSourceSchema: z.ZodObject<{
         errorCode?: string | undefined;
         latestEvidenceAt?: string | undefined;
         checkedAt?: string | undefined;
-        status: "error" | "not_checked" | "stale" | "fresh";
+        status: "error" | "fresh" | "stale" | "not_checked";
     }, {
-        status: "error" | "not_checked" | "stale" | "fresh";
+        status: "error" | "fresh" | "stale" | "not_checked";
         checkedAt?: string | undefined;
         latestEvidenceAt?: string | undefined;
         errorCode?: string | undefined;
@@ -125,8 +125,8 @@ export declare function createReceiptSourceRecordReference(sourceId: string, sou
 export declare const receiptProvenanceSchema: z.ZodObject<{
     origin: z.ZodEnum<{
         provider_reported: "provider_reported";
-        sample: "sample";
         user_declared: "user_declared";
+        sample: "sample";
         locally_observed: "locally_observed";
     }>;
     transformations: z.ZodArray<z.ZodEnum<{
@@ -147,9 +147,9 @@ export declare const receiptTokenUsageLineSchema: z.ZodObject<{
     sourceId: z.ZodString;
     observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     granularity: z.ZodEnum<{
+        session: "session";
         call: "call";
         invocation: "invocation";
-        session: "session";
         daily_aggregate: "daily_aggregate";
         usage_bucket: "usage_bucket";
         billing_bucket: "billing_bucket";
@@ -159,8 +159,8 @@ export declare const receiptTokenUsageLineSchema: z.ZodObject<{
     provenance: z.ZodObject<{
         origin: z.ZodEnum<{
             provider_reported: "provider_reported";
-            sample: "sample";
             user_declared: "user_declared";
+            sample: "sample";
             locally_observed: "locally_observed";
         }>;
         transformations: z.ZodArray<z.ZodEnum<{
@@ -180,9 +180,9 @@ export declare const receiptFinancialCostLineSchema: z.ZodObject<{
     amountUsd: z.ZodPipe<z.ZodNumber, z.ZodTransform<number, number>>;
     currency: z.ZodLiteral<"USD">;
     accountingBasis: z.ZodEnum<{
-        api_equivalent: "api_equivalent";
-        provider_billed: "provider_billed";
         user_declared: "user_declared";
+        provider_billed: "provider_billed";
+        api_equivalent: "api_equivalent";
     }>;
     financialEvidence: z.ZodEnum<{
         estimated: "estimated";
@@ -193,9 +193,9 @@ export declare const receiptFinancialCostLineSchema: z.ZodObject<{
     sourceId: z.ZodString;
     observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     granularity: z.ZodEnum<{
+        session: "session";
         call: "call";
         invocation: "invocation";
-        session: "session";
         daily_aggregate: "daily_aggregate";
         usage_bucket: "usage_bucket";
         billing_bucket: "billing_bucket";
@@ -205,8 +205,8 @@ export declare const receiptFinancialCostLineSchema: z.ZodObject<{
     provenance: z.ZodObject<{
         origin: z.ZodEnum<{
             provider_reported: "provider_reported";
-            sample: "sample";
             user_declared: "user_declared";
+            sample: "sample";
             locally_observed: "locally_observed";
         }>;
         transformations: z.ZodArray<z.ZodEnum<{
@@ -232,9 +232,9 @@ export declare const receiptLineSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     sourceId: z.ZodString;
     observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     granularity: z.ZodEnum<{
+        session: "session";
         call: "call";
         invocation: "invocation";
-        session: "session";
         daily_aggregate: "daily_aggregate";
         usage_bucket: "usage_bucket";
         billing_bucket: "billing_bucket";
@@ -244,8 +244,8 @@ export declare const receiptLineSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     provenance: z.ZodObject<{
         origin: z.ZodEnum<{
             provider_reported: "provider_reported";
-            sample: "sample";
             user_declared: "user_declared";
+            sample: "sample";
             locally_observed: "locally_observed";
         }>;
         transformations: z.ZodArray<z.ZodEnum<{
@@ -263,9 +263,9 @@ export declare const receiptLineSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     amountUsd: z.ZodPipe<z.ZodNumber, z.ZodTransform<number, number>>;
     currency: z.ZodLiteral<"USD">;
     accountingBasis: z.ZodEnum<{
-        api_equivalent: "api_equivalent";
-        provider_billed: "provider_billed";
         user_declared: "user_declared";
+        provider_billed: "provider_billed";
+        api_equivalent: "api_equivalent";
     }>;
     financialEvidence: z.ZodEnum<{
         estimated: "estimated";
@@ -276,9 +276,9 @@ export declare const receiptLineSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     sourceId: z.ZodString;
     observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     granularity: z.ZodEnum<{
+        session: "session";
         call: "call";
         invocation: "invocation";
-        session: "session";
         daily_aggregate: "daily_aggregate";
         usage_bucket: "usage_bucket";
         billing_bucket: "billing_bucket";
@@ -288,8 +288,8 @@ export declare const receiptLineSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     provenance: z.ZodObject<{
         origin: z.ZodEnum<{
             provider_reported: "provider_reported";
-            sample: "sample";
             user_declared: "user_declared";
+            sample: "sample";
             locally_observed: "locally_observed";
         }>;
         transformations: z.ZodArray<z.ZodEnum<{
@@ -326,9 +326,9 @@ export declare const receiptMappingGapSchema: z.ZodPipe<z.ZodObject<{
 export type ReceiptMappingGap = z.infer<typeof receiptMappingGapSchema>;
 export declare const receiptCostTotalSchema: z.ZodObject<{
     accountingBasis: z.ZodEnum<{
-        api_equivalent: "api_equivalent";
-        provider_billed: "provider_billed";
         user_declared: "user_declared";
+        provider_billed: "provider_billed";
+        api_equivalent: "api_equivalent";
     }>;
     financialEvidence: z.ZodEnum<{
         estimated: "estimated";
@@ -345,8 +345,8 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<"0.1.0">;
     generatedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     mode: z.ZodEnum<{
-        mixed: "mixed";
         local: "local";
+        mixed: "mixed";
         sample: "sample";
         connected: "connected";
     }>;
@@ -374,9 +374,9 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
         freshness: z.ZodPipe<z.ZodObject<{
             status: z.ZodEnum<{
                 error: "error";
-                not_checked: "not_checked";
-                stale: "stale";
                 fresh: "fresh";
+                stale: "stale";
+                not_checked: "not_checked";
             }>;
             checkedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
             latestEvidenceAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -385,9 +385,9 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
             errorCode?: string | undefined;
             latestEvidenceAt?: string | undefined;
             checkedAt?: string | undefined;
-            status: "error" | "not_checked" | "stale" | "fresh";
+            status: "error" | "fresh" | "stale" | "not_checked";
         }, {
-            status: "error" | "not_checked" | "stale" | "fresh";
+            status: "error" | "fresh" | "stale" | "not_checked";
             checkedAt?: string | undefined;
             latestEvidenceAt?: string | undefined;
             errorCode?: string | undefined;
@@ -404,9 +404,9 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
         sourceId: z.ZodString;
         observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         granularity: z.ZodEnum<{
+            session: "session";
             call: "call";
             invocation: "invocation";
-            session: "session";
             daily_aggregate: "daily_aggregate";
             usage_bucket: "usage_bucket";
             billing_bucket: "billing_bucket";
@@ -416,8 +416,8 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
         provenance: z.ZodObject<{
             origin: z.ZodEnum<{
                 provider_reported: "provider_reported";
-                sample: "sample";
                 user_declared: "user_declared";
+                sample: "sample";
                 locally_observed: "locally_observed";
             }>;
             transformations: z.ZodArray<z.ZodEnum<{
@@ -435,9 +435,9 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
         amountUsd: z.ZodPipe<z.ZodNumber, z.ZodTransform<number, number>>;
         currency: z.ZodLiteral<"USD">;
         accountingBasis: z.ZodEnum<{
-            api_equivalent: "api_equivalent";
-            provider_billed: "provider_billed";
             user_declared: "user_declared";
+            provider_billed: "provider_billed";
+            api_equivalent: "api_equivalent";
         }>;
         financialEvidence: z.ZodEnum<{
             estimated: "estimated";
@@ -448,9 +448,9 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
         sourceId: z.ZodString;
         observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         granularity: z.ZodEnum<{
+            session: "session";
             call: "call";
             invocation: "invocation";
-            session: "session";
             daily_aggregate: "daily_aggregate";
             usage_bucket: "usage_bucket";
             billing_bucket: "billing_bucket";
@@ -460,8 +460,8 @@ declare const receiptBodyObjectSchema: z.ZodObject<{
         provenance: z.ZodObject<{
             origin: z.ZodEnum<{
                 provider_reported: "provider_reported";
-                sample: "sample";
                 user_declared: "user_declared";
+                sample: "sample";
                 locally_observed: "locally_observed";
             }>;
             transformations: z.ZodArray<z.ZodEnum<{
@@ -500,8 +500,8 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<"0.1.0">;
     generatedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     mode: z.ZodEnum<{
-        mixed: "mixed";
         local: "local";
+        mixed: "mixed";
         sample: "sample";
         connected: "connected";
     }>;
@@ -529,9 +529,9 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
         freshness: z.ZodPipe<z.ZodObject<{
             status: z.ZodEnum<{
                 error: "error";
-                not_checked: "not_checked";
-                stale: "stale";
                 fresh: "fresh";
+                stale: "stale";
+                not_checked: "not_checked";
             }>;
             checkedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
             latestEvidenceAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -540,9 +540,9 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
             errorCode?: string | undefined;
             latestEvidenceAt?: string | undefined;
             checkedAt?: string | undefined;
-            status: "error" | "not_checked" | "stale" | "fresh";
+            status: "error" | "fresh" | "stale" | "not_checked";
         }, {
-            status: "error" | "not_checked" | "stale" | "fresh";
+            status: "error" | "fresh" | "stale" | "not_checked";
             checkedAt?: string | undefined;
             latestEvidenceAt?: string | undefined;
             errorCode?: string | undefined;
@@ -559,9 +559,9 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
         sourceId: z.ZodString;
         observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         granularity: z.ZodEnum<{
+            session: "session";
             call: "call";
             invocation: "invocation";
-            session: "session";
             daily_aggregate: "daily_aggregate";
             usage_bucket: "usage_bucket";
             billing_bucket: "billing_bucket";
@@ -571,8 +571,8 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
         provenance: z.ZodObject<{
             origin: z.ZodEnum<{
                 provider_reported: "provider_reported";
-                sample: "sample";
                 user_declared: "user_declared";
+                sample: "sample";
                 locally_observed: "locally_observed";
             }>;
             transformations: z.ZodArray<z.ZodEnum<{
@@ -590,9 +590,9 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
         amountUsd: z.ZodPipe<z.ZodNumber, z.ZodTransform<number, number>>;
         currency: z.ZodLiteral<"USD">;
         accountingBasis: z.ZodEnum<{
-            api_equivalent: "api_equivalent";
-            provider_billed: "provider_billed";
             user_declared: "user_declared";
+            provider_billed: "provider_billed";
+            api_equivalent: "api_equivalent";
         }>;
         financialEvidence: z.ZodEnum<{
             estimated: "estimated";
@@ -603,9 +603,9 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
         sourceId: z.ZodString;
         observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         granularity: z.ZodEnum<{
+            session: "session";
             call: "call";
             invocation: "invocation";
-            session: "session";
             daily_aggregate: "daily_aggregate";
             usage_bucket: "usage_bucket";
             billing_bucket: "billing_bucket";
@@ -615,8 +615,8 @@ export declare const agentEconomicsReceiptV0DraftSchema: z.ZodObject<{
         provenance: z.ZodObject<{
             origin: z.ZodEnum<{
                 provider_reported: "provider_reported";
-                sample: "sample";
                 user_declared: "user_declared";
+                sample: "sample";
                 locally_observed: "locally_observed";
             }>;
             transformations: z.ZodArray<z.ZodEnum<{
@@ -657,8 +657,8 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<"0.1.0">;
     generatedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     mode: z.ZodEnum<{
-        mixed: "mixed";
         local: "local";
+        mixed: "mixed";
         sample: "sample";
         connected: "connected";
     }>;
@@ -686,9 +686,9 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
         freshness: z.ZodPipe<z.ZodObject<{
             status: z.ZodEnum<{
                 error: "error";
-                not_checked: "not_checked";
-                stale: "stale";
                 fresh: "fresh";
+                stale: "stale";
+                not_checked: "not_checked";
             }>;
             checkedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
             latestEvidenceAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -697,9 +697,9 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
             errorCode?: string | undefined;
             latestEvidenceAt?: string | undefined;
             checkedAt?: string | undefined;
-            status: "error" | "not_checked" | "stale" | "fresh";
+            status: "error" | "fresh" | "stale" | "not_checked";
         }, {
-            status: "error" | "not_checked" | "stale" | "fresh";
+            status: "error" | "fresh" | "stale" | "not_checked";
             checkedAt?: string | undefined;
             latestEvidenceAt?: string | undefined;
             errorCode?: string | undefined;
@@ -716,9 +716,9 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
         sourceId: z.ZodString;
         observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         granularity: z.ZodEnum<{
+            session: "session";
             call: "call";
             invocation: "invocation";
-            session: "session";
             daily_aggregate: "daily_aggregate";
             usage_bucket: "usage_bucket";
             billing_bucket: "billing_bucket";
@@ -728,8 +728,8 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
         provenance: z.ZodObject<{
             origin: z.ZodEnum<{
                 provider_reported: "provider_reported";
-                sample: "sample";
                 user_declared: "user_declared";
+                sample: "sample";
                 locally_observed: "locally_observed";
             }>;
             transformations: z.ZodArray<z.ZodEnum<{
@@ -747,9 +747,9 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
         amountUsd: z.ZodPipe<z.ZodNumber, z.ZodTransform<number, number>>;
         currency: z.ZodLiteral<"USD">;
         accountingBasis: z.ZodEnum<{
-            api_equivalent: "api_equivalent";
-            provider_billed: "provider_billed";
             user_declared: "user_declared";
+            provider_billed: "provider_billed";
+            api_equivalent: "api_equivalent";
         }>;
         financialEvidence: z.ZodEnum<{
             estimated: "estimated";
@@ -760,9 +760,9 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
         sourceId: z.ZodString;
         observedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         granularity: z.ZodEnum<{
+            session: "session";
             call: "call";
             invocation: "invocation";
-            session: "session";
             daily_aggregate: "daily_aggregate";
             usage_bucket: "usage_bucket";
             billing_bucket: "billing_bucket";
@@ -772,8 +772,8 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
         provenance: z.ZodObject<{
             origin: z.ZodEnum<{
                 provider_reported: "provider_reported";
-                sample: "sample";
                 user_declared: "user_declared";
+                sample: "sample";
                 locally_observed: "locally_observed";
             }>;
             transformations: z.ZodArray<z.ZodEnum<{
@@ -809,9 +809,9 @@ export declare const agentEconomicsReceiptV0Schema: z.ZodObject<{
     id: z.ZodString;
     costTotals: z.ZodArray<z.ZodObject<{
         accountingBasis: z.ZodEnum<{
-            api_equivalent: "api_equivalent";
-            provider_billed: "provider_billed";
             user_declared: "user_declared";
+            provider_billed: "provider_billed";
+            api_equivalent: "api_equivalent";
         }>;
         financialEvidence: z.ZodEnum<{
             estimated: "estimated";

package/dist/analyze.js

@@ -1,4 +1,5 @@
 import { generateSpendInsights } from "./insights.js";
+import { safeUntrustedLabel, safeUntrustedLabels, WITHHELD_AGENT_LABEL, WITHHELD_ENTITY_LABEL, WITHHELD_OPERATION_LABEL } from "./untrustedLabel.js";
 import { costConfidenceValues, hasModeledWorkloadEvidence, hasPricedEvidence, spendComparisonKey, spendSummarySchema } from "./schema.js";
 const confidenceRank = {
     verified: 0,
@@ -154,11 +155,27 @@ export function generateWorkflowWatch(records) {
         const hasRunLevelEvidence = groupRecords.every(hasModeledWorkloadEvidence);
         const suggestedOptimization = workflowDiagnosticFor(workflowKey, agentId, hasRunLevelEvidence);
         return {
-            id: slugify(["workflow", clientId, projectId, workflowKey].join("-")),
-            clientId,
-            projectId,
-            workflowKey,
-            agentId,
+            // The id is a STRUCTURED field beside the neutralized prose and it is
+            // rendered. Slug the neutralized forms, not the raw grouping keys.
+            id: slugify([
+                "workflow",
+                safeEntity(clientId),
+                safeEntity(projectId),
+                safeWorkflowLabel(workflowKey)
+            ].join("-")),
+            // Neutralized, not raw. These fields ship inside the SpendSummary that
+            // the MCP tools hand to an agent, so leaving them raw beside neutralized
+            // prose is the same inversion as the repeated-read array: the human sees
+            // the redaction and the agent gets the payload.
+            //
+            // workflowWatchAmount re-matches these against the records to recompute
+            // a display amount. An ordinary name is byte-identical, so that match is
+            // unaffected; a name that reads like an instruction loses its amount,
+            // which is the right way round.
+            clientId: safeEntity(clientId),
+            projectId: safeEntity(projectId),
+            workflowKey: safeWorkflowLabel(workflowKey),
+            agentId: safeUntrustedLabel(agentId, WITHHELD_AGENT_LABEL),
             amountUsd,
             shareOfSpend,
             recordCount: groupRecords.length,
@@ -168,8 +185,8 @@ export function generateWorkflowWatch(records) {
             suggestedOptimization,
             applyArtifact: `Before changing this workload: ${suggestedOptimization}`,
             verificationPlan: hasRunLevelEvidence
-                ? `Reconcile ${workflowKey} to its owner and budget, then define one reversible candidate and compare matched future accepted outcomes plus provider-reported cost.`
-                : `Reconcile ${workflowKey} to its owner and budget, then collect call-level workload evidence before modeling or applying a cost change.`
+                ? `Reconcile ${safeWorkflowLabel(workflowKey)} to its owner and budget, then define one reversible candidate and compare matched future accepted outcomes plus provider-reported cost.`
+                : `Reconcile ${safeWorkflowLabel(workflowKey)} to its owner and budget, then collect call-level workload evidence before modeling or applying a cost change.`
         };
     })
         .filter((entry) => entry.amountUsd > 0)
@@ -186,16 +203,16 @@ export function generateRecommendations(records) {
         recommendations.push({
             id: "model-downgrade",
             title: "Review expensive model workloads for downgrade candidates",
-            rationale: `${topModel.key} is the largest cost driver in the current local sample.`,
+            rationale: `${safeEntity(topModel.key)} is the largest cost driver in the current local sample.`,
             whyItMatters: "Premium model usage tends to become invisible once agents are running in the background. Spend owners need a clear rule for which jobs deserve the expensive model.",
-            nextAction: `Audit the top ${topModel.key} operations and move low-risk summarization, extraction, and draft work to a cheaper model tier first.`,
+            nextAction: `Audit the top ${safeEntity(topModel.key)} operations and move low-risk summarization, extraction, and draft work to a cheaper model tier first.`,
             priority: "high",
             // The high-level recommendation does not know which model-specific rule
             // will pass quality verification. Dollar math lives in the exact cut
             // candidate; concentration alone earns no flat percentage.
             estimatedImpactUsd: 0,
             confidence: topModel.confidence,
-            relatedKeys: [topModel.key]
+            relatedKeys: [safeEntity(topModel.key)]
         });
     }
     const highInputTokenRecords = decisionRecords.filter((record) => record.inputTokens >= 100_000);
@@ -209,7 +226,7 @@ export function generateRecommendations(records) {
             priority: "high",
             estimatedImpactUsd: 0,
             confidence: combinedConfidence(highInputTokenRecords.map((record) => record.costConfidence)),
-            relatedKeys: unique(highInputTokenRecords.map((record) => record.model))
+            relatedKeys: safeUntrustedLabels(unique(highInputTokenRecords.map((record) => record.model)))
         });
     }
     // An operation label alone does not prove identical inputs. Require an
@@ -229,7 +246,7 @@ export function generateRecommendations(records) {
             priority: "medium",
             estimatedImpactUsd: roundMoney(sumRecords(cacheableRecords)),
             confidence: combinedConfidence(cacheableRecords.map((record) => record.costConfidence)),
-            relatedKeys: repeatedOperations
+            relatedKeys: safeUntrustedLabels(repeatedOperations, WITHHELD_OPERATION_LABEL)
         });
     }
     const agentSpend = breakdown(decisionRecords, (record) => record.agentId);
@@ -238,13 +255,13 @@ export function generateRecommendations(records) {
         recommendations.push({
             id: "agent-caps",
             title: "Confirm the owner and budget for the highest-cost agent",
-            rationale: `${topAgent.key} accounts for a material share of sampled usage.`,
+            rationale: `${safeEntity(topAgent.key)} accounts for a material share of sampled usage.`,
             whyItMatters: "Concentration is an accountability signal, but it does not by itself prove abnormal behavior or an avoidable dollar amount.",
-            nextAction: `Confirm ${topAgent.key}'s owner and approved range, then collect run-level evidence before proposing a warning threshold or hard cap.`,
+            nextAction: `Confirm ${safeEntity(topAgent.key)}'s owner and approved range, then collect run-level evidence before proposing a warning threshold or hard cap.`,
             priority: "high",
             estimatedImpactUsd: 0,
             confidence: topAgent.confidence,
-            relatedKeys: [topAgent.key]
+            relatedKeys: [safeEntity(topAgent.key)]
         });
     }
     const batchableRecords = decisionRecords.filter((record) => record.workloadSemantics?.batchEligible === true &&
@@ -262,7 +279,7 @@ export function generateRecommendations(records) {
                 return total + (record.amountUsd ?? 0) * (1 - retained);
             }, 0)),
             confidence: combinedConfidence(batchableRecords.map((record) => record.costConfidence)),
-            relatedKeys: unique(batchableRecords.map((record) => record.operation).filter(isPresent))
+            relatedKeys: safeUntrustedLabels(unique(batchableRecords.map((record) => record.operation).filter(isPresent)), WITHHELD_OPERATION_LABEL)
         });
     }
     return recommendations;
@@ -335,9 +352,33 @@ function isLocalAgentRecord(record) {
     return record.providerCostType === "local_agent_logs";
 }
 function workflowDiagnosticFor(workflowKey, agentId, hasRunLevelEvidence) {
+    const workflow = safeWorkflowLabel(workflowKey);
+    const agent = safeUntrustedLabel(agentId, WITHHELD_AGENT_LABEL);
     return hasRunLevelEvidence
-        ? `Confirm the owner and approved budget for ${workflowKey} (${agentId}), reconcile the observed spend, and define one reversible candidate with an accepted-outcome quality bar before approval.`
-        : `Confirm the owner and approved budget for ${workflowKey} (${agentId}), reconcile the observed spend, and collect call-level provenance before proposing a reversible optimization.`;
+        ? `Confirm the owner and approved budget for ${workflow} (${agent}), reconcile the observed spend, and define one reversible candidate with an accepted-outcome quality bar before approval.`
+        : `Confirm the owner and approved budget for ${workflow} (${agent}), reconcile the observed spend, and collect call-level provenance before proposing a reversible optimization.`;
+}
+/**
+ * The workflow key IS `record.operation` — a provider/adapter string, untrusted
+ * end to end. It reaches `suggestedOptimization`, `applyArtifact` and
+ * `verificationPlan`, and those three are rendered as product prose that the
+ * report layer deliberately never blanks. So it is neutralized here, at the
+ * interpolation point, exactly as the cut-list builders do.
+ *
+ * The ENTRY's own identity fields are neutralized too: they travel inside the
+ * SpendSummary that the MCP tools return, so a raw field sitting beside
+ * neutralized prose hands an agent exactly what the human was protected from.
+ */
+function safeWorkflowLabel(workflowKey) {
+    return safeUntrustedLabel(workflowKey, WITHHELD_OPERATION_LABEL);
+}
+/**
+ * A breakdown key rendered for a HUMAN — a model id, an agent id, an
+ * operation label. Display only: the raw key is still what the record filters
+ * match on, and rewriting a matching key would empty the cohort.
+ */
+function safeEntity(value) {
+    return safeUntrustedLabel(value, WITHHELD_ENTITY_LABEL);
 }
 function slugify(value) {
     return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");