@microsoft/opentelemetry 1.0.2 → 1.2.0

package/README.md

@@ -2,6 +2,7 @@
 
 [![npm version](https://img.shields.io/npm/v/%40microsoft%2Fopentelemetry)](https://www.npmjs.com/package/@microsoft/opentelemetry)
 [![license](https://img.shields.io/npm/l/%40microsoft%2Fopentelemetry)](https://github.com/microsoft/opentelemetry-distro-javascript/blob/main/LICENSE)
+[![API Docs](https://img.shields.io/badge/API%20Docs-TypeDoc-blue)](https://microsoft.github.io/opentelemetry-distro-javascript/)
 
 Microsoft OpenTelemetry distribution for Node.js — one import, one call, full observability across Azure Monitor, OTLP-compatible backends, and A365.
 
@@ -15,7 +16,7 @@ npm install @microsoft/opentelemetry
 
 ### ESM Support
 
-> **Note:** ESM support requires Node.js 20.6.0 or later. This package's ESM loader flow relies on `--import` and `node:module.register()`, which are not available on older Node.js releases. For background on why startup ordering matters, see the [OpenTelemetry ESM Support documentation](https://github.com/open-telemetry/opentelemetry-js/blob/main/doc/esm-support.md).
+> **Note:** This package requires Node.js 22.0.0 or later. Its ESM loader flow relies on `--import` and `node:module.register()`. For background on why startup ordering matters, see the [OpenTelemetry ESM Support documentation](https://github.com/open-telemetry/opentelemetry-js/blob/main/doc/esm-support.md).
 
 For ESM applications, instrumentation hooks must be registered before any instrumented modules (for example `http`, `express`, `axios`, or loggers) are loaded. This is a fundamental ESM constraint: modules cannot be instrumented after they are already loaded.
 
@@ -112,26 +113,25 @@ import { useMicrosoftOpenTelemetry } from "@microsoft/opentelemetry";
 useMicrosoftOpenTelemetry();
 ```
 
-
 That's it — traces, metrics, and logs are collected automatically with built-in instrumentations for HTTP, databases, and more.
 
 ## Configuration
 
 ### `MicrosoftOpenTelemetryOptions`
 
-| Option | Type | Default | Description |
-|---|---|---|---|
-| `resource` | `Resource` | auto-detected | OpenTelemetry Resource (service name, version, etc.) |
-| `samplingRatio` | `number` | `1.0` | Ratio of telemetry items to transmit (0.0–1.0) |
-| `tracesPerSecond` | `number` | `5` | Max traces per second. Set to `0` to use `samplingRatio` instead |
-| `instrumentationOptions` | `InstrumentationOptions` | all enabled | Toggle built-in instrumentations (see below) |
-| `spanProcessors` | `SpanProcessor[]` | — | Additional span processors |
-| `logRecordProcessors` | `LogRecordProcessor[]` | — | Additional log record processors |
-| `metricReaders` | `MetricReader[]` | — | Additional metric readers |
-| `views` | `ViewOptions[]` | — | Metric views |
-| `azureMonitor` | `AzureMonitorOpenTelemetryOptions` | — | Azure Monitor backend config. When provided, Azure Monitor export is enabled |
-| `a365` | `A365Options` | — | A365 observability config |
-| `enableConsoleExporters` | `boolean` | auto | Enable console exporters for traces, metrics, and logs |
+| Option                   | Type                               | Default       | Description                                                                  |
+| ------------------------ | ---------------------------------- | ------------- | ---------------------------------------------------------------------------- |
+| `resource`               | `Resource`                         | auto-detected | OpenTelemetry Resource (service name, version, etc.)                         |
+| `samplingRatio`          | `number`                           | `1.0`         | Ratio of telemetry items to transmit (0.0–1.0)                               |
+| `tracesPerSecond`        | `number`                           | `5`           | Max traces per second. Set to `0` to use `samplingRatio` instead             |
+| `instrumentationOptions` | `InstrumentationOptions`           | all enabled   | Toggle built-in instrumentations (see below)                                 |
+| `spanProcessors`         | `SpanProcessor[]`                  | —             | Additional span processors                                                   |
+| `logRecordProcessors`    | `LogRecordProcessor[]`             | —             | Additional log record processors                                             |
+| `metricReaders`          | `MetricReader[]`                   | —             | Additional metric readers                                                    |
+| `views`                  | `ViewOptions[]`                    | —             | Metric views                                                                 |
+| `azureMonitor`           | `AzureMonitorOpenTelemetryOptions` | —             | Azure Monitor backend config. When provided, Azure Monitor export is enabled |
+| `a365`                   | `A365Options`                      | —             | A365 observability config                                                    |
+| `enableConsoleExporters` | `boolean`                          | auto          | Enable console exporters for traces, metrics, and logs                       |
 
 ### `InstrumentationOptions`
 
@@ -144,19 +144,19 @@ Most instrumentations use `InstrumentationConfig` shape (`{ enabled?: boolean, .
 
 Set `enabled: true` or `enabled: false` explicitly for predictable behavior.
 
-| Key | Type | Default | Description |
-|---|---|---|---|
-| `http` | `InstrumentationConfig` | enabled | HTTP client/server instrumentation |
-| `azureSdk` | `InstrumentationConfig` | enabled | Azure SDK instrumentation |
-| `mongoDb` | `InstrumentationConfig` | enabled | MongoDB instrumentation |
-| `mySql` | `InstrumentationConfig` | enabled | MySQL instrumentation |
-| `postgreSql` | `InstrumentationConfig` | enabled | PostgreSQL instrumentation |
-| `redis` | `InstrumentationConfig` | enabled | Redis instrumentation |
-| `redis4` | `InstrumentationConfig` | enabled | Redis 4 instrumentation |
-| `bunyan` | `InstrumentationConfig` | disabled | Bunyan log instrumentation |
-| `winston` | `InstrumentationConfig` | disabled | Winston log instrumentation |
-| `openaiAgents` | `OpenAIAgentsInstrumentationConfig` | enabled | OpenAI Agents SDK instrumentation (requires `@openai/agents`) |
-| `langchain` | `LangChainInstrumentationConfig` | enabled | LangChain instrumentation (requires `@langchain/core`) |
+| Key            | Type                                | Default  | Description                                                   |
+| -------------- | ----------------------------------- | -------- | ------------------------------------------------------------- |
+| `http`         | `InstrumentationConfig`             | enabled  | HTTP client/server instrumentation                            |
+| `azureSdk`     | `InstrumentationConfig`             | enabled  | Azure SDK instrumentation                                     |
+| `mongoDb`      | `InstrumentationConfig`             | enabled  | MongoDB instrumentation                                       |
+| `mySql`        | `InstrumentationConfig`             | enabled  | MySQL instrumentation                                         |
+| `postgreSql`   | `InstrumentationConfig`             | enabled  | PostgreSQL instrumentation                                    |
+| `redis`        | `InstrumentationConfig`             | enabled  | Redis instrumentation                                         |
+| `redis4`       | `InstrumentationConfig`             | enabled  | Redis 4 instrumentation                                       |
+| `bunyan`       | `InstrumentationConfig`             | disabled | Bunyan log instrumentation                                    |
+| `winston`      | `InstrumentationConfig`             | disabled | Winston log instrumentation                                   |
+| `openaiAgents` | `OpenAIAgentsInstrumentationConfig` | enabled  | OpenAI Agents SDK instrumentation (requires `@openai/agents`) |
+| `langchain`    | `LangChainInstrumentationConfig`    | enabled  | LangChain instrumentation (requires `@langchain/core`)        |
 
 #### Turn instrumentations on/off
 
@@ -219,14 +219,14 @@ Behavior:
 
 ### `azureMonitor` options
 
-| Option | Type | Default | Description |
-|---|---|---|---|
-| `azureMonitorExporterOptions` | `AzureMonitorExporterOptions` | — | Exporter config including `connectionString`, `storageDirectory`, `disableOfflineStorage` |
-| `enableLiveMetrics` | `boolean` | `true` | Enable Live Metrics streaming |
-| `enableStandardMetrics` | `boolean` | `true` | Enable standard metrics collection |
-| `enableTraceBasedSamplingForLogs` | `boolean` | `false` | Enable log sampling based on trace |
-| `enablePerformanceCounters` | `boolean` | `true` | Enable performance counter collection |
-| `browserSdkLoaderOptions` | `BrowserSdkLoaderOptions` | disabled | Application Insights browser SDK loader config (`enabled`, `connectionString`) |
+| Option                            | Type                          | Default  | Description                                                                               |
+| --------------------------------- | ----------------------------- | -------- | ----------------------------------------------------------------------------------------- |
+| `azureMonitorExporterOptions`     | `AzureMonitorExporterOptions` | —        | Exporter config including `connectionString`, `storageDirectory`, `disableOfflineStorage` |
+| `enableLiveMetrics`               | `boolean`                     | `true`   | Enable Live Metrics streaming                                                             |
+| `enableStandardMetrics`           | `boolean`                     | `true`   | Enable standard metrics collection                                                        |
+| `enableTraceBasedSamplingForLogs` | `boolean`                     | `false`  | Enable log sampling based on trace                                                        |
+| `enablePerformanceCounters`       | `boolean`                     | `true`   | Enable performance counter collection                                                     |
+| `browserSdkLoaderOptions`         | `BrowserSdkLoaderOptions`     | disabled | Application Insights browser SDK loader config (`enabled`, `connectionString`)            |
 
 ### OTLP via environment variables
 
@@ -236,19 +236,20 @@ See the [OpenTelemetry OTLP Exporter specification](https://opentelemetry.io/doc
 
 ### `a365` options
 
-| Option | Type | Default | Description |
-|---|---|---|---|
-| `enabled` | `boolean` | `false` | Enable A365 observability. Registers the `A365SpanProcessor` for baggage/attribute enrichment of downstream exporters (Azure Monitor, OTLP, console). Does **not** send data to the A365 service on its own — set `enableObservabilityExporter` for that |
-| `enableObservabilityExporter` | `boolean` | `false` | Enable the A365 HTTP exporter (`Agent365Exporter`) to send spans to the A365 observability service. Requires `enabled: true`. Equivalent to `ENABLE_A365_OBSERVABILITY_EXPORTER` env var |
-| `tokenResolver` | `(agentId, tenantId, authScopes?) => string \| Promise<string>` | — | Token resolver for A365 service authentication |
-| `clusterCategory` | `ClusterCategory` | `"prod"` | Cluster category for endpoint resolution (`local`, `dev`, `test`, `preprod`, `firstrelease`, `prod`, `gov`, `high`, `dod`, `mooncake`, `ex`, `rx`) |
-| `domainOverride` | `string` | — | Override the A365 observability service domain |
-| `authScopes` | `string[]` | `["api://9b975845-388f-4429-889e-eab1ef63949c/.default"]` | OAuth scopes for A365 service authentication |
-| `observabilityScopeOverride` | `string` | — | Single-string scope override (highest precedence). Equivalent to `A365_OBSERVABILITY_SCOPES_OVERRIDE` env var |
-| `logLevel` | `string` | `"none"` | A365 internal log level: `none`, `info`, `warn`, `error`, or pipe-separated combination. Overrides `A365_OBSERVABILITY_LOG_LEVEL` env var |
-| `useS2SEndpoint` | `boolean` | `false` | Use the S2S (service-to-service) endpoint path for export |
-
-When A365 export is enabled, the distro defaults to GenAI-focused telemetry. To opt back into non-GenAI auto-instrumentation, set explicit overrides:
+| Option                        | Type                                                                           | Default                                                   | Description                                                                                                                                                                                                                                              |
+| ----------------------------- | ------------------------------------------------------------------------------ | --------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `enabled`                     | `boolean`                                                                      | `false`                                                   | Enable A365 observability. Registers the `A365SpanProcessor` for baggage/attribute enrichment of downstream exporters (Azure Monitor, OTLP, console). Does **not** send data to the A365 service on its own — set `enableObservabilityExporter` for that |
+| `enableObservabilityExporter` | `boolean`                                                                      | `false`                                                   | Enable the A365 HTTP exporter (`Agent365Exporter`) to send spans to the A365 observability service. Requires `enabled: true`. Equivalent to `ENABLE_A365_OBSERVABILITY_EXPORTER` env var                                                                 |
+| `tokenResolver`               | `(agentId, tenantId, authScopes?) => string \| Promise<string>`                | —                                                         | Token resolver for A365 service authentication. When both this and `contextualTokenResolver` are set, `contextualTokenResolver` takes precedence                                                                                                         |
+| `contextualTokenResolver`     | `(context: TokenResolverContext) => string \| null \| Promise<string \| null>` | —                                                         | Contextual token resolver with rich context including the agentic user ID. Takes precedence over `tokenResolver` when set                                                                                                                                |
+| `clusterCategory`             | `ClusterCategory`                                                              | `"prod"`                                                  | Cluster category for endpoint resolution (`local`, `dev`, `test`, `preprod`, `firstrelease`, `prod`, `gov`, `high`, `dod`, `mooncake`, `ex`, `rx`)                                                                                                       |
+| `domainOverride`              | `string`                                                                       | —                                                         | Override the A365 observability service domain                                                                                                                                                                                                           |
+| `authScopes`                  | `string[]`                                                                     | `["api://9b975845-388f-4429-889e-eab1ef63949c/.default"]` | OAuth scopes for A365 service authentication                                                                                                                                                                                                             |
+| `observabilityScopeOverride`  | `string`                                                                       | —                                                         | Single-string scope override (highest precedence). Equivalent to `A365_OBSERVABILITY_SCOPES_OVERRIDE` env var                                                                                                                                            |
+| `logLevel`                    | `string`                                                                       | `"none"`                                                  | A365 internal log level: `none`, `info`, `warn`, `error`, or pipe-separated combination. Overrides `A365_OBSERVABILITY_LOG_LEVEL` env var                                                                                                                |
+| `useS2SEndpoint`              | `boolean`                                                                      | `false`                                                   | Use the S2S (service-to-service) endpoint path for export                                                                                                                                                                                                |
+
+When A365 export is enabled, Microsoft OpenTelemetry defaults to GenAI-focused telemetry. To opt back into non-GenAI auto-instrumentation, set explicit overrides:
 
 ```typescript
 useMicrosoftOpenTelemetry({
@@ -316,14 +317,14 @@ new ObservabilityHostingManager().configure(adapter as unknown as { use(...m: un
 
 #### A365 exporter tuning
 
-| Option | Type | Default | Description |
-|---|---|---|---|
-| `maxQueueSize` | `number` | `2048` | Maximum span queue size before drops occur |
-| `scheduledDelayMilliseconds` | `number` | `5000` | Delay (ms) between automatic batch flush attempts |
-| `exporterTimeoutMilliseconds` | `number` | `90000` | Maximum time (ms) for the entire export call |
+| Option                           | Type     | Default | Description                                                  |
+| -------------------------------- | -------- | ------- | ------------------------------------------------------------ |
+| `maxQueueSize`                   | `number` | `2048`  | Maximum span queue size before drops occur                   |
+| `scheduledDelayMilliseconds`     | `number` | `5000`  | Delay (ms) between automatic batch flush attempts            |
+| `exporterTimeoutMilliseconds`    | `number` | `90000` | Maximum time (ms) for the entire export call                 |
 | `httpRequestTimeoutMilliseconds` | `number` | `30000` | HTTP request timeout (ms) when sending spans to A365 service |
-| `maxExportBatchSize` | `number` | `512` | Maximum number of spans per export batch |
-| `maxPayloadBytes` | `number` | — | Maximum estimated payload size (bytes) per HTTP chunk |
+| `maxExportBatchSize`             | `number` | `512`   | Maximum number of spans per export batch                     |
+| `maxPayloadBytes`                | `number` | —       | Maximum estimated payload size (bytes) per HTTP chunk        |
 
 Example:
 
@@ -344,24 +345,27 @@ useMicrosoftOpenTelemetry({
 
 A365 options can also be set via environment variables (highest precedence):
 
-| Environment Variable | Description |
-|---|---|
-| `ENABLE_A365_OBSERVABILITY_EXPORTER` | `"true"` / `"false"` — override `enabled` |
-| `A365_OBSERVABILITY_SCOPES_OVERRIDE` | Space-separated list of OAuth scopes |
-| `A365_OBSERVABILITY_DOMAIN_OVERRIDE` | Override service domain |
-| `CLUSTER_CATEGORY` | Override cluster category |
-| `A365_OBSERVABILITY_LOG_LEVEL` | A365 internal logger filter level (`none`, `info`, `warn`, `error`, or pipe-delimited combination) — overrides `observabilityLogLevel` |
-| `A365_PER_REQUEST_MAX_TRACES` | Max buffered traces (default: `1000`) |
-| `A365_PER_REQUEST_MAX_SPANS_PER_TRACE` | Max spans per trace (default: `5000`) |
-| `A365_PER_REQUEST_MAX_CONCURRENT_EXPORTS` | Max concurrent exports (default: `20`) |
-| `A365_PER_REQUEST_FLUSH_GRACE_MS` | Grace period after root span ends (default: `250`) |
-| `A365_PER_REQUEST_MAX_TRACE_AGE_MS` | Max trace age before forced flush (default: `1800000`) |
-
+| Environment Variable                           | Description                                                                                                                            |
+| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------- |
+| `ENABLE_A365_OBSERVABILITY_EXPORTER`           | `"true"` / `"false"` — override `enabled`                                                                                              |
+| `A365_OBSERVABILITY_SCOPES_OVERRIDE`           | Space-separated list of OAuth scopes                                                                                                   |
+| `A365_OBSERVABILITY_DOMAIN_OVERRIDE`           | Override service domain                                                                                                                |
+| `CLUSTER_CATEGORY`                             | Override cluster category                                                                                                              |
+| `A365_OBSERVABILITY_LOG_LEVEL`                 | A365 internal logger filter level (`none`, `info`, `warn`, `error`, or pipe-delimited combination) — overrides `observabilityLogLevel` |
+| `A365_PER_REQUEST_MAX_TRACES`                  | Max buffered traces (default: `1000`)                                                                                                  |
+| `A365_PER_REQUEST_MAX_SPANS_PER_TRACE`         | Max spans per trace (default: `5000`)                                                                                                  |
+| `A365_PER_REQUEST_MAX_CONCURRENT_EXPORTS`      | Max concurrent exports (default: `20`)                                                                                                 |
+| `A365_PER_REQUEST_FLUSH_GRACE_MS`              | Grace period after root span ends (default: `250`)                                                                                     |
+| `A365_PER_REQUEST_MAX_TRACE_AGE_MS`            | Max trace age before forced flush (default: `1800000`)                                                                                 |
+| `A365_OBSERVABILITY_TOKEN_EXCHANGE_TIMEOUT_MS` | Per-attempt timeout (ms) for agentic token exchange; `0` or negative disables (default: `30000`)                                       |
 
 ### Example
 
 ```typescript
-import { useMicrosoftOpenTelemetry, shutdownMicrosoftOpenTelemetry } from "@microsoft/opentelemetry";
+import {
+  useMicrosoftOpenTelemetry,
+  shutdownMicrosoftOpenTelemetry,
+} from "@microsoft/opentelemetry";
 import { resourceFromAttributes } from "@opentelemetry/resources";
 
 useMicrosoftOpenTelemetry({
@@ -386,7 +390,6 @@ await shutdownMicrosoftOpenTelemetry();
 
 See the [samples/](./samples/) directory for working TypeScript examples covering connection setup, custom metrics, custom traces, sampling, OTLP dual-export, and more.
 
-
 ## Contributing
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md).

package/dist/commonjs/a365/configuration/A365Configuration.d.ts

@@ -1,4 +1,5 @@
 import type { A365Options, ClusterCategory } from "./A365ConfigurationOptions.js";
+import type { ContextualTokenResolver } from "../exporter/Agent365ExporterOptions.js";
 /**
  * Environment variable names for A365 configuration.
  * These match the upstream Agent365-nodejs conventions.
@@ -23,6 +24,8 @@ export declare class A365Configuration {
     readonly enabled: boolean;
     /** Token resolver callback for A365 service authentication. */
     readonly tokenResolver?: (agentId: string, tenantId: string, authScopes?: string[]) => string | Promise<string>;
+    /** Contextual token resolver with rich context including the agentic user ID. */
+    readonly contextualTokenResolver?: ContextualTokenResolver;
     /** Cluster category. */
     readonly clusterCategory: ClusterCategory;
     /** Domain override for the A365 observability service. */

package/dist/commonjs/a365/configuration/A365Configuration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"A365Configuration.d.ts","sourceRoot":"","sources":["../../../../src/a365/configuration/A365Configuration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAuBlF;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAmBX;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,6CAA6C;IAC7C,SAAgB,OAAO,EAAE,OAAO,CAAC;IAEjC,+DAA+D;IAC/D,SAAgB,aAAa,CAAC,EAAE,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EAAE,KAClB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9B,wBAAwB;IACxB,SAAgB,eAAe,EAAE,eAAe,CAAC;IAEjD,0DAA0D;IAC1D,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExC,oDAAoD;IACpD,SAAgB,UAAU,EAAE,MAAM,EAAE,CAAC;IAErC;;;;;;;;OAQG;IACH,SAAgB,2BAA2B,EAAE,OAAO,CAAC;IAErD;;;;;;OAMG;IACH,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElC,uDAAuD;IACvD,SAAgB,cAAc,EAAE,OAAO,CAAC;IAExC,kDAAkD;IAClD,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtC,yDAAyD;IACzD,SAAgB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpD,sDAAsD;IACtD,SAAgB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErD,gDAAgD;IAChD,SAAgB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExD,gDAAgD;IAChD,SAAgB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5C,6DAA6D;IAC7D,SAAgB,eAAe,CAAC,EAAE,MAAM,CAAC;gBAE7B,OAAO,CAAC,EAAE,WAAW;IA2FjC,OAAO,CAAC,4BAA4B;CAcrC"}
+{"version":3,"file":"A365Configuration.d.ts","sourceRoot":"","sources":["../../../../src/a365/configuration/A365Configuration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAuBtF;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAmBX;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,6CAA6C;IAC7C,SAAgB,OAAO,EAAE,OAAO,CAAC;IAEjC,+DAA+D;IAC/D,SAAgB,aAAa,CAAC,EAAE,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EAAE,KAClB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9B,iFAAiF;IACjF,SAAgB,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAElE,wBAAwB;IACxB,SAAgB,eAAe,EAAE,eAAe,CAAC;IAEjD,0DAA0D;IAC1D,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExC,oDAAoD;IACpD,SAAgB,UAAU,EAAE,MAAM,EAAE,CAAC;IAErC;;;;;;;;OAQG;IACH,SAAgB,2BAA2B,EAAE,OAAO,CAAC;IAErD;;;;;;OAMG;IACH,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElC,uDAAuD;IACvD,SAAgB,cAAc,EAAE,OAAO,CAAC;IAExC,kDAAkD;IAClD,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtC,yDAAyD;IACzD,SAAgB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpD,sDAAsD;IACtD,SAAgB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErD,gDAAgD;IAChD,SAAgB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExD,gDAAgD;IAChD,SAAgB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5C,6DAA6D;IAC7D,SAAgB,eAAe,CAAC,EAAE,MAAM,CAAC;gBAE7B,OAAO,CAAC,EAAE,WAAW;IA4FjC,OAAO,CAAC,4BAA4B;CAgBrC"}

package/dist/commonjs/a365/configuration/A365Configuration.js

@@ -64,6 +64,8 @@ class A365Configuration {
     enabled;
     /** Token resolver callback for A365 service authentication. */
     tokenResolver;
+    /** Contextual token resolver with rich context including the agentic user ID. */
+    contextualTokenResolver;
     /** Cluster category. */
     clusterCategory;
     /** Domain override for the A365 observability service. */
@@ -120,7 +122,7 @@ class A365Configuration {
         // ENABLE_A365_OBSERVABILITY_EXPORTER controls just the HTTP exporter, not
         // the master `enabled` toggle. It is a secondary toggle that only takes
         // effect when A365 is configured in code (options provided), matching the
-        // Python distro behavior (see microsoft/opentelemetry-distro-python#87).
+        // Python package behavior (see microsoft/opentelemetry-distro-python#87).
         const envExporter = parseEnvBoolean(process.env[exports.A365_ENV_VARS.EXPORTER_ENABLED]);
         if (envExporter !== undefined &&
             options !== undefined &&
@@ -133,7 +135,7 @@ class A365Configuration {
         }
         // observabilityScopeOverride wins over authScopes / env var so callers can
         // narrow the resolved scope set to a single explicit value (mirrors the
-        // Python distro's a365_observability_scope_override kwarg).
+        // Python package's a365_observability_scope_override kwarg).
         const scopeOverride = options?.observabilityScopeOverride?.trim();
         if (scopeOverride) {
             authScopes = [scopeOverride];
@@ -164,6 +166,7 @@ class A365Configuration {
         this.enabled = enabled;
         this.enableObservabilityExporter = enableObservabilityExporter;
         this.tokenResolver = options?.tokenResolver;
+        this.contextualTokenResolver = options?.contextualTokenResolver;
         this.clusterCategory = clusterCategory;
         this.domainOverride = domainOverride;
         this.authScopes = authScopes;
@@ -183,7 +186,9 @@ class A365Configuration {
     _warnIfOptionsSetButDisabled(options) {
         if (!options)
             return;
-        const hasNonTrivialOptions = options.tokenResolver !== undefined || options.domainOverride !== undefined;
+        const hasNonTrivialOptions = options.tokenResolver !== undefined ||
+            options.contextualTokenResolver !== undefined ||
+            options.domainOverride !== undefined;
         if (hasNonTrivialOptions) {
             (0, logging_js_1.getA365Logger)().warn("A365 configuration options are set but A365 is not enabled. " +
                 "Set `a365.enabled: true` or set `ENABLE_A365_OBSERVABILITY_EXPORTER=true` " +

package/dist/commonjs/a365/configuration/A365Configuration.js.map

@@ -1 +1 @@
-{"version":3,"file":"A365Configuration.js","sourceRoot":"","sources":["../../../../src/a365/configuration/A365Configuration.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAGlC,8CAA8C;AAE9C;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,QAA4B;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACU,QAAA,aAAa,GAAG;IAC3B,gBAAgB,EAAE,oCAAoC;IACtD,WAAW,EAAE,oCAAoC;IACjD,MAAM,EAAE,oCAAoC;IAC5C,gBAAgB,EAAE,kBAAkB;IACpC,SAAS,EAAE,8BAA8B;CACjC,CAAC;AAEX,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AAEjF,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,OAAO;IACP,KAAK;IACL,MAAM;IACN,SAAS;IACT,cAAc;IACd,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,UAAU;IACV,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAa,iBAAiB;IAC5B,6CAA6C;IAC7B,OAAO,CAAU;IAEjC,+DAA+D;IAC/C,aAAa,CAIC;IAE9B,wBAAwB;IACR,eAAe,CAAkB;IAEjD,0DAA0D;IAC1C,cAAc,CAAU;IAExC,oDAAoD;IACpC,UAAU,CAAW;IAErC;;;;;;;;OAQG;IACa,2BAA2B,CAAU;IAErD;;;;;;OAMG;IACa,QAAQ,CAAU;IAElC,uDAAuD;IACvC,cAAc,CAAU;IAExC,kDAAkD;IAClC,YAAY,CAAU;IAEtC,yDAAyD;IACzC,0BAA0B,CAAU;IAEpD,sDAAsD;IACtC,2BAA2B,CAAU;IAErD,gDAAgD;IAChC,8BAA8B,CAAU;IAExD,gDAAgD;IAChC,kBAAkB,CAAU;IAE5C,6DAA6D;IAC7C,eAAe,CAAU;IAEzC,YAAY,OAAqB;QAC/B,kBAAkB;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,2BAA2B,GAAG,KAAK,CAAC;QACxC,IAAI,eAAe,GAAoB,MAAM,CAAC;QAC9C,IAAI,cAAc,GAAuB,OAAO,EAAE,cAAc,CAAC;QACjE,IAAI,UAAU,GAAa,OAAO,EAAE,UAAU,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEvE,gCAAgC;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;YACrC,2BAA2B;gBACzB,OAAO,CAAC,2BAA2B,IAAI,2BAA2B,CAAC;YACrE,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC;QAC/D,CAAC;QAED,+DAA+D;QAC/D,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjF,IACE,WAAW,KAAK,SAAS;YACzB,OAAO,KAAK,SAAS;YACrB,OAAO,CAAC,2BAA2B,KAAK,SAAS,EACjD,CAAC;YACD,2BAA2B,GAAG,WAAW,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,aAAa,GAAG,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;QAClE,IAAI,aAAa,EAAE,CAAC;YAClB,UAAU,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5D,IAAI,SAAS,EAAE,CAAC;YACd,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC;QAC9E,IAAI,UAAU,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,eAAe,GAAG,UAA6B,CAAC;QAClD,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,IAAA,0BAAa,GAAE,CAAC,IAAI,CAClB,WAAW,qBAAa,CAAC,gBAAgB,WAAW,UAAU,oCAAoC,CACnG,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,QAAQ,GAAuB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC1E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;YACjE,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;QAC1C,IAAI,CAAC,0BAA0B,GAAG,OAAO,EAAE,0BAA0B,CAAC;QACtE,IAAI,CAAC,2BAA2B,GAAG,OAAO,EAAE,2BAA2B,CAAC;QACxE,IAAI,CAAC,8BAA8B,GAAG,OAAO,EAAE,8BAA8B,CAAC;QAC9E,IAAI,CAAC,kBAAkB,GAAG,OAAO,EAAE,kBAAkB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,CAAC;QAEhD,gEAAgE;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,4BAA4B,CAAC,OAAqB;QACxD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;QAE9E,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAA,0BAAa,GAAE,CAAC,IAAI,CAClB,8DAA8D;gBAC5D,4EAA4E;gBAC5E,yEAAyE,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAtKD,8CAsKC"}
+{"version":3,"file":"A365Configuration.js","sourceRoot":"","sources":["../../../../src/a365/configuration/A365Configuration.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAIlC,8CAA8C;AAE9C;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,QAA4B;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACU,QAAA,aAAa,GAAG;IAC3B,gBAAgB,EAAE,oCAAoC;IACtD,WAAW,EAAE,oCAAoC;IACjD,MAAM,EAAE,oCAAoC;IAC5C,gBAAgB,EAAE,kBAAkB;IACpC,SAAS,EAAE,8BAA8B;CACjC,CAAC;AAEX,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AAEjF,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,OAAO;IACP,KAAK;IACL,MAAM;IACN,SAAS;IACT,cAAc;IACd,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,UAAU;IACV,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAa,iBAAiB;IAC5B,6CAA6C;IAC7B,OAAO,CAAU;IAEjC,+DAA+D;IAC/C,aAAa,CAIC;IAE9B,iFAAiF;IACjE,uBAAuB,CAA2B;IAElE,wBAAwB;IACR,eAAe,CAAkB;IAEjD,0DAA0D;IAC1C,cAAc,CAAU;IAExC,oDAAoD;IACpC,UAAU,CAAW;IAErC;;;;;;;;OAQG;IACa,2BAA2B,CAAU;IAErD;;;;;;OAMG;IACa,QAAQ,CAAU;IAElC,uDAAuD;IACvC,cAAc,CAAU;IAExC,kDAAkD;IAClC,YAAY,CAAU;IAEtC,yDAAyD;IACzC,0BAA0B,CAAU;IAEpD,sDAAsD;IACtC,2BAA2B,CAAU;IAErD,gDAAgD;IAChC,8BAA8B,CAAU;IAExD,gDAAgD;IAChC,kBAAkB,CAAU;IAE5C,6DAA6D;IAC7C,eAAe,CAAU;IAEzC,YAAY,OAAqB;QAC/B,kBAAkB;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,2BAA2B,GAAG,KAAK,CAAC;QACxC,IAAI,eAAe,GAAoB,MAAM,CAAC;QAC9C,IAAI,cAAc,GAAuB,OAAO,EAAE,cAAc,CAAC;QACjE,IAAI,UAAU,GAAa,OAAO,EAAE,UAAU,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEvE,gCAAgC;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;YACrC,2BAA2B;gBACzB,OAAO,CAAC,2BAA2B,IAAI,2BAA2B,CAAC;YACrE,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC;QAC/D,CAAC;QAED,+DAA+D;QAC/D,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjF,IACE,WAAW,KAAK,SAAS;YACzB,OAAO,KAAK,SAAS;YACrB,OAAO,CAAC,2BAA2B,KAAK,SAAS,EACjD,CAAC;YACD,2BAA2B,GAAG,WAAW,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,aAAa,GAAG,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;QAClE,IAAI,aAAa,EAAE,CAAC;YAClB,UAAU,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5D,IAAI,SAAS,EAAE,CAAC;YACd,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC;QAC9E,IAAI,UAAU,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,eAAe,GAAG,UAA6B,CAAC;QAClD,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,IAAA,0BAAa,GAAE,CAAC,IAAI,CAClB,WAAW,qBAAa,CAAC,gBAAgB,WAAW,UAAU,oCAAoC,CACnG,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,QAAQ,GAAuB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC1E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;YACjE,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;QAC5C,IAAI,CAAC,uBAAuB,GAAG,OAAO,EAAE,uBAAuB,CAAC;QAChE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;QAC1C,IAAI,CAAC,0BAA0B,GAAG,OAAO,EAAE,0BAA0B,CAAC;QACtE,IAAI,CAAC,2BAA2B,GAAG,OAAO,EAAE,2BAA2B,CAAC;QACxE,IAAI,CAAC,8BAA8B,GAAG,OAAO,EAAE,8BAA8B,CAAC;QAC9E,IAAI,CAAC,kBAAkB,GAAG,OAAO,EAAE,kBAAkB,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,CAAC;QAEhD,gEAAgE;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,4BAA4B,CAAC,OAAqB;QACxD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;YACnC,OAAO,CAAC,uBAAuB,KAAK,SAAS;YAC7C,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;QAEvC,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAA,0BAAa,GAAE,CAAC,IAAI,CAClB,8DAA8D;gBAC5D,4EAA4E;gBAC5E,yEAAyE,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AA5KD,8CA4KC"}

package/dist/commonjs/a365/configuration/A365ConfigurationOptions.d.ts

@@ -1,3 +1,4 @@
+import type { ContextualTokenResolver } from "../exporter/Agent365ExporterOptions.js";
 /**
  * Cluster categories for A365 service endpoint resolution.
  * Mirrors the ClusterCategory enum from Agent365-nodejs.
@@ -16,8 +17,16 @@ export interface A365Options {
      * Token resolver for authenticating with the A365 observability service.
      * Called with (agentId, tenantId, authScopes) extracted from span attributes/config.
      * Must return a bearer token string or a promise resolving to one.
+     * When both this and {@link contextualTokenResolver} are set,
+     * {@link contextualTokenResolver} takes precedence.
      */
     tokenResolver?: (agentId: string, tenantId: string, authScopes?: string[]) => string | Promise<string>;
+    /**
+     * Contextual token resolver for authenticating with the A365 observability service.
+     * Receives rich context including the agentic user ID.
+     * Takes precedence over {@link tokenResolver} when set.
+     */
+    contextualTokenResolver?: ContextualTokenResolver;
     /** Cluster category for the A365 service endpoint. */
     clusterCategory?: ClusterCategory;
     /** Override the A365 observability service domain. */
@@ -29,7 +38,7 @@ export interface A365Options {
      *
      * Equivalent to the `A365_OBSERVABILITY_SCOPES_OVERRIDE` environment
      * variable; when supplied, it becomes the sole entry of the resolved
-     * {@link authScopes} array. Mirrors the Python distro's
+     * {@link authScopes} array. Mirrors the Python package's
      * `a365_observability_scope_override` kwarg
      * (microsoft/opentelemetry-distro-python#87).
      *

package/dist/commonjs/a365/configuration/A365ConfigurationOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"A365ConfigurationOptions.d.ts","sourceRoot":"","sources":["../../../../src/a365/configuration/A365ConfigurationOptions.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,KAAK,GACL,MAAM,GACN,SAAS,GACT,cAAc,GACd,MAAM,GACN,KAAK,GACL,MAAM,GACN,KAAK,GACL,UAAU,GACV,IAAI,GACJ,IAAI,CAAC;AAET;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EAAE,KAClB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9B,sDAAsD;IACtD,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;;;;;;;;;OAUG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;;;;;;;;;;OAYG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,sEAAsE;IACtE,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,yDAAyD;IACzD,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,sDAAsD;IACtD,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC,iFAAiF;IACjF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"A365ConfigurationOptions.d.ts","sourceRoot":"","sources":["../../../../src/a365/configuration/A365ConfigurationOptions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEtF;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,KAAK,GACL,MAAM,GACN,SAAS,GACT,cAAc,GACd,MAAM,GACN,KAAK,GACL,MAAM,GACN,KAAK,GACL,UAAU,GACV,IAAI,GACJ,IAAI,CAAC;AAET;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EAAE,KAClB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAElD,sDAAsD;IACtD,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;;;;;;;;;OAUG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;;;;;;;;;;OAYG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,sEAAsE;IACtE,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,yDAAyD;IACzD,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,sDAAsD;IACtD,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC,iFAAiF;IACjF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/commonjs/a365/constants.d.ts

@@ -1,92 +1,223 @@
 /**
  * OpenTelemetry constants for A365 observability.
  *
- * Attribute keys follow OTel gen-ai semantic conventions plus
+ * Provides the well-known span operation names, attribute keys, metric names,
+ * environment-variable names, and feature-flag switches used when emitting A365
+ * telemetry. Attribute keys follow OTel gen-ai semantic conventions plus
  * Microsoft-specific extensions under the `microsoft.*` namespace.
  *
  * Adapted from microsoft/Agent365-nodejs agents-a365-observability/src/tracing/constants.ts
  */
 export declare class OpenTelemetryConstants {
+    /** Operation name (`gen_ai.operation.name`) used for agent invocation spans. */
     static readonly INVOKE_AGENT_OPERATION_NAME = "invoke_agent";
+    /** Operation name used for tool-execution spans. */
     static readonly EXECUTE_TOOL_OPERATION_NAME = "execute_tool";
+    /** Operation name used for output-message spans. */
     static readonly OUTPUT_MESSAGES_OPERATION_NAME = "output_messages";
+    /** Operation name used for model chat/inference spans. */
     static readonly CHAT_OPERATION_NAME = "chat";
+    /** Attribute key for the error type recorded on a span (`error.type`). */
     static readonly ERROR_TYPE_KEY = "error.type";
+    /** Error-type value used when an operation was cancelled. */
     static readonly ERROR_TYPE_CANCELLED = "TaskCanceledException";
+    /** Attribute key for a human-readable error message (`error.message`). */
     static readonly ERROR_MESSAGE_KEY = "error.message";
+    /** Attribute key for the Azure resource provider namespace (`az.namespace`). */
     static readonly AZ_NAMESPACE_KEY = "az.namespace";
+    /** Attribute key for the destination server host name (`server.address`). */
     static readonly SERVER_ADDRESS_KEY = "server.address";
+    /** Attribute key for the destination server port (`server.port`). */
     static readonly SERVER_PORT_KEY = "server.port";
+    /** Azure resource provider namespace value for Cognitive Services. */
     static readonly AZURE_RP_NAMESPACE_VALUE = "Microsoft.CognitiveServices";
+    /** Tracer/instrumentation-scope name used for all A365 spans. */
     static readonly SOURCE_NAME = "Agent365Sdk";
+    /** Feature-switch name that enables the experimental activity source. */
     static readonly ENABLE_OPENTELEMETRY_SWITCH = "Azure.Experimental.EnableActivitySource";
+    /** Feature-switch name that enables tracing of gen-ai message content. */
     static readonly TRACE_CONTENTS_SWITCH = "Azure.Experimental.TraceGenAIMessageContent";
+    /** Environment-variable name that enables recording of gen-ai message content. */
     static readonly TRACE_CONTENTS_ENVIRONMENT_VARIABLE = "AZURE_TRACING_GEN_AI_CONTENT_RECORDING_ENABLED";
+    /** Environment-variable name that enables observability. */
     static readonly ENABLE_OBSERVABILITY = "ENABLE_OBSERVABILITY";
+    /** Environment-variable name that enables the A365 observability exporter. */
     static readonly ENABLE_A365_OBSERVABILITY_EXPORTER = "ENABLE_A365_OBSERVABILITY_EXPORTER";
+    /** Environment-variable name that enables A365 observability. */
     static readonly ENABLE_A365_OBSERVABILITY = "ENABLE_A365_OBSERVABILITY";
+    /** Attribute key for the gen-ai operation name (`gen_ai.operation.name`). */
     static readonly GEN_AI_OPERATION_NAME_KEY = "gen_ai.operation.name";
+    /** Attribute key for the requested model name (`gen_ai.request.model`). */
     static readonly GEN_AI_REQUEST_MODEL_KEY = "gen_ai.request.model";
+    /** Attribute key for the model that produced the response (`gen_ai.response.model`). */
     static readonly GEN_AI_RESPONSE_MODEL_KEY = "gen_ai.response.model";
+    /** Attribute key for the finish reasons returned by the model (`gen_ai.response.finish_reasons`). */
     static readonly GEN_AI_RESPONSE_FINISH_REASONS_KEY = "gen_ai.response.finish_reasons";
+    /** Attribute key for the gen-ai provider name (`gen_ai.provider.name`). */
     static readonly GEN_AI_PROVIDER_NAME_KEY = "gen_ai.provider.name";
+    /** Attribute key for the requested maximum number of tokens (`gen_ai.request.max_tokens`). */
     static readonly GEN_AI_REQUEST_MAX_TOKENS_KEY = "gen_ai.request.max_tokens";
+    /** Attribute key for the sampling temperature (`gen_ai.request.temperature`). */
     static readonly GEN_AI_REQUEST_TEMPERATURE_KEY = "gen_ai.request.temperature";
+    /** Attribute key for the nucleus-sampling top-p value (`gen_ai.request.top_p`). */
     static readonly GEN_AI_REQUEST_TOP_P_KEY = "gen_ai.request.top_p";
+    /** Attribute key for a gen-ai choice (`gen_ai.choice`). */
     static readonly GEN_AI_CHOICE = "gen_ai.choice";
+    /** Metric name for the gen-ai client operation duration. */
     static readonly GEN_AI_CLIENT_OPERATION_DURATION_METRIC_NAME = "gen_ai.client.operation.duration";
+    /** Metric name for gen-ai client token usage. */
     static readonly GEN_AI_CLIENT_TOKEN_USAGE_METRIC_NAME = "gen_ai.client.token.usage";
+    /** Attribute key for the number of input (prompt) tokens (`gen_ai.usage.input_tokens`). */
     static readonly GEN_AI_USAGE_INPUT_TOKENS_KEY = "gen_ai.usage.input_tokens";
+    /** Attribute key for the number of output (completion) tokens (`gen_ai.usage.output_tokens`). */
     static readonly GEN_AI_USAGE_OUTPUT_TOKENS_KEY = "gen_ai.usage.output_tokens";
+    /** Attribute key for the system instructions (`gen_ai.system_instructions`). */
     static readonly GEN_AI_SYSTEM_INSTRUCTIONS_KEY = "gen_ai.system_instructions";
+    /** Attribute key for the serialized input messages (`gen_ai.input.messages`). */
     static readonly GEN_AI_INPUT_MESSAGES_KEY = "gen_ai.input.messages";
+    /** Attribute key for the serialized output messages (`gen_ai.output.messages`). */
     static readonly GEN_AI_OUTPUT_MESSAGES_KEY = "gen_ai.output.messages";
+    /** Attribute key for the A365 messages schema version. */
     static readonly A365_MESSAGES_SCHEMA_VERSION_KEY = "microsoft.a365.messages.schema_version";
+    /** Attribute key for the agent identifier (`gen_ai.agent.id`). */
     static readonly GEN_AI_AGENT_ID_KEY = "gen_ai.agent.id";
+    /** Attribute key for the agent display name (`gen_ai.agent.name`). */
     static readonly GEN_AI_AGENT_NAME_KEY = "gen_ai.agent.name";
+    /** Attribute key for the agent description (`gen_ai.agent.description`). */
     static readonly GEN_AI_AGENT_DESCRIPTION_KEY = "gen_ai.agent.description";
+    /** Attribute key for the agent version (`gen_ai.agent.version`). */
     static readonly GEN_AI_AGENT_VERSION_KEY = "gen_ai.agent.version";
+    /** Attribute key for the agent platform identifier (`microsoft.a365.agent.platform.id`). */
     static readonly GEN_AI_AGENT_PLATFORM_ID_KEY = "microsoft.a365.agent.platform.id";
+    /** Attribute key for the agent thought process (`microsoft.a365.agent.thought.process`). */
     static readonly GEN_AI_AGENT_THOUGHT_PROCESS_KEY = "microsoft.a365.agent.thought.process";
+    /** Attribute key for the agent icon URI (`gen_ai.agent365.icon_uri`). */
     static readonly GEN_AI_ICON_URI_KEY = "gen_ai.agent365.icon_uri";
+    /** Attribute key for the agent identifier (alias of {@link GEN_AI_AGENT_ID_KEY}). */
     static readonly AGENT_ID_KEY = "gen_ai.agent.id";
+    /** Attribute key for the conversation identifier (`gen_ai.conversation.id`). */
     static readonly GEN_AI_CONVERSATION_ID_KEY = "gen_ai.conversation.id";
+    /** Attribute key for the conversation item deep link (`microsoft.conversation.item.link`). */
     static readonly GEN_AI_CONVERSATION_ITEM_LINK_KEY = "microsoft.conversation.item.link";
+    /** Attribute key for the session identifier (`microsoft.session.id`). */
     static readonly SESSION_ID_KEY = "microsoft.session.id";
+    /** Attribute key for the session description (`microsoft.session.description`). */
     static readonly SESSION_DESCRIPTION_KEY = "microsoft.session.description";
+    /** Attribute key for the tool-call identifier (`gen_ai.tool.call.id`). */
     static readonly GEN_AI_TOOL_CALL_ID_KEY = "gen_ai.tool.call.id";
+    /** Attribute key for the tool name (`gen_ai.tool.name`). */
     static readonly GEN_AI_TOOL_NAME_KEY = "gen_ai.tool.name";
+    /** Attribute key for the tool description (`gen_ai.tool.description`). */
     static readonly GEN_AI_TOOL_DESCRIPTION_KEY = "gen_ai.tool.description";
+    /** Attribute key for the serialized tool-call arguments (`gen_ai.tool.call.arguments`). */
     static readonly GEN_AI_TOOL_ARGS_KEY = "gen_ai.tool.call.arguments";
+    /** Attribute key for the tool-call result (`gen_ai.tool.call.result`). */
     static readonly GEN_AI_TOOL_CALL_RESULT_KEY = "gen_ai.tool.call.result";
+    /** Attribute key for the tool type (`gen_ai.tool.type`). */
     static readonly GEN_AI_TOOL_TYPE_KEY = "gen_ai.tool.type";
+    /** Attribute key for the tenant identifier (`microsoft.tenant.id`). */
     static readonly TENANT_ID_KEY = "microsoft.tenant.id";
+    /** Attribute key for the user identifier (`user.id`). */
     static readonly USER_ID_KEY = "user.id";
+    /** Attribute key for the user display name (`user.name`). */
     static readonly USER_NAME_KEY = "user.name";
+    /** Attribute key for the user email address (`user.email`). */
     static readonly USER_EMAIL_KEY = "user.email";
+    /** Attribute key for the caller client IP address (`client.address`). */
     static readonly GEN_AI_CALLER_CLIENT_IP_KEY = "client.address";
+    /** Attribute key for the calling agent's agentic user identifier. */
     static readonly GEN_AI_CALLER_AGENT_USER_ID_KEY = "microsoft.a365.caller.agent.user.id";
+    /** Attribute key for the calling agent's agentic user email. */
     static readonly GEN_AI_CALLER_AGENT_EMAIL_KEY = "microsoft.a365.caller.agent.user.email";
+    /** Attribute key for the calling agent's name. */
     static readonly GEN_AI_CALLER_AGENT_NAME_KEY = "microsoft.a365.caller.agent.name";
+    /** Attribute key for the calling agent's identifier. */
     static readonly GEN_AI_CALLER_AGENT_ID_KEY = "microsoft.a365.caller.agent.id";
+    /** Attribute key for the calling agent's blueprint (application) identifier. */
     static readonly GEN_AI_CALLER_AGENT_APPLICATION_ID_KEY = "microsoft.a365.caller.agent.blueprint.id";
+    /** Attribute key for the calling agent's platform identifier. */
     static readonly GEN_AI_CALLER_AGENT_PLATFORM_ID_KEY = "microsoft.a365.caller.agent.platform.id";
+    /** Attribute key for the calling agent's version. */
     static readonly GEN_AI_CALLER_AGENT_VERSION_KEY = "microsoft.a365.caller.agent.version";
+    /** Attribute/baggage key for the agentic user identifier (`microsoft.agent.user.id`). */
     static readonly GEN_AI_AGENT_AUID_KEY = "microsoft.agent.user.id";
+    /** Attribute/baggage key for the agentic user email (`microsoft.agent.user.email`). */
     static readonly GEN_AI_AGENT_EMAIL_KEY = "microsoft.agent.user.email";
+    /** Attribute/baggage key for the agent blueprint identifier (`microsoft.a365.agent.blueprint.id`). */
     static readonly GEN_AI_AGENT_BLUEPRINT_ID_KEY = "microsoft.a365.agent.blueprint.id";
+    /** Attribute key for the task identifier (`gen_ai.task.id`). */
     static readonly GEN_AI_TASK_ID_KEY = "gen_ai.task.id";
+    /** Attribute key for the execution payload (`gen_ai.execution.payload`). */
     static readonly GEN_AI_EXECUTION_PAYLOAD_KEY = "gen_ai.execution.payload";
+    /** Attribute key for the channel name (`microsoft.channel.name`). */
     static readonly CHANNEL_NAME_KEY = "microsoft.channel.name";
+    /** Attribute key for the channel link/description (`microsoft.channel.link`). */
     static readonly CHANNEL_LINK_KEY = "microsoft.channel.link";
+    /** Attribute key for a custom parent span identifier (`custom.parent.span.id`). */
     static readonly CUSTOM_PARENT_SPAN_ID_KEY = "custom.parent.span.id";
+    /** Attribute key for a custom span name (`custom.span.name`). */
     static readonly CUSTOM_SPAN_NAME_KEY = "custom.span.name";
+    /** Attribute key for the service name (`service.name`). */
     static readonly SERVICE_NAME_KEY = "service.name";
+    /** Attribute key for the telemetry SDK name (`telemetry.sdk.name`). */
     static readonly TELEMETRY_SDK_NAME_KEY = "telemetry.sdk.name";
+    /** Attribute key for the telemetry SDK language (`telemetry.sdk.language`). */
     static readonly TELEMETRY_SDK_LANGUAGE_KEY = "telemetry.sdk.language";
+    /** Attribute key for the telemetry SDK version (`telemetry.sdk.version`). */
     static readonly TELEMETRY_SDK_VERSION_KEY = "telemetry.sdk.version";
-    static readonly TELEMETRY_SDK_NAME_VALUE = "A365ObservabilitySDK";
+    /** Telemetry SDK name value reported by this distro. */
+    static readonly TELEMETRY_SDK_NAME_VALUE = "microsoft-opentelemetry";
+    /** Telemetry SDK language value reported by this distro. */
     static readonly TELEMETRY_SDK_LANGUAGE_VALUE = "nodejs";
-    static readonly TELEMETRY_SDK_VERSION_VALUE = "1.0.2";
+    /** Telemetry SDK version value reported by this distro. */
+    static readonly TELEMETRY_SDK_VERSION_VALUE = "1.2.0";
+    /** Operation name used for guardrail-evaluation spans. */
+    static readonly APPLY_GUARDRAIL_OPERATION_NAME = "apply_guardrail";
+    /** Attribute key for the guardian identifier (`microsoft.guardian.id`). */
+    static readonly GUARDIAN_ID_KEY = "microsoft.guardian.id";
+    /** Attribute key for the guardian name (`microsoft.guardian.name`). */
+    static readonly GUARDIAN_NAME_KEY = "microsoft.guardian.name";
+    /** Attribute key for the guardian provider name (`microsoft.guardian.provider.name`). */
+    static readonly GUARDIAN_PROVIDER_NAME_KEY = "microsoft.guardian.provider.name";
+    /** Attribute key for the guardian version (`microsoft.guardian.version`). */
+    static readonly GUARDIAN_VERSION_KEY = "microsoft.guardian.version";
+    /** Attribute key for the guardrail decision type (`microsoft.security.decision.type`). */
+    static readonly SECURITY_DECISION_TYPE_KEY = "microsoft.security.decision.type";
+    /** Attribute key for the guardrail decision reason (`microsoft.security.decision.reason`). */
+    static readonly SECURITY_DECISION_REASON_KEY = "microsoft.security.decision.reason";
+    /** Attribute key for the guardrail decision code (`microsoft.security.decision.code`). */
+    static readonly SECURITY_DECISION_CODE_KEY = "microsoft.security.decision.code";
+    /** Attribute key for the guardrail target type (`microsoft.security.target.type`). */
+    static readonly SECURITY_TARGET_TYPE_KEY = "microsoft.security.target.type";
+    /** Attribute key for the guardrail target identifier (`microsoft.security.target.id`). */
+    static readonly SECURITY_TARGET_ID_KEY = "microsoft.security.target.id";
+    /** Attribute key for the security policy identifier (`microsoft.security.policy.id`). */
+    static readonly SECURITY_POLICY_ID_KEY = "microsoft.security.policy.id";
+    /** Attribute key for the security policy name (`microsoft.security.policy.name`). */
+    static readonly SECURITY_POLICY_NAME_KEY = "microsoft.security.policy.name";
+    /** Attribute key for the security policy version (`microsoft.security.policy.version`). */
+    static readonly SECURITY_POLICY_VERSION_KEY = "microsoft.security.policy.version";
+    /** Attribute key for the security policy decision type (`microsoft.security.policy.decision.type`). */
+    static readonly SECURITY_POLICY_DECISION_TYPE_KEY = "microsoft.security.policy.decision.type";
+    /** Attribute key for the hash of guarded input content (`microsoft.security.content.input.hash`). */
+    static readonly SECURITY_CONTENT_INPUT_HASH_KEY = "microsoft.security.content.input.hash";
+    /** Attribute key indicating whether guarded content was modified (`microsoft.security.content.modified`). */
+    static readonly SECURITY_CONTENT_MODIFIED_KEY = "microsoft.security.content.modified";
+    /** Attribute key for the guarded input content value (`microsoft.security.content.input.value`). */
+    static readonly SECURITY_CONTENT_INPUT_VALUE_KEY = "microsoft.security.content.input.value";
+    /** Attribute key for the guarded output content value (`microsoft.security.content.output.value`). */
+    static readonly SECURITY_CONTENT_OUTPUT_VALUE_KEY = "microsoft.security.content.output.value";
+    /** Attribute key for an external correlation identifier for SIEM systems (`microsoft.security.external_event_id`). */
+    static readonly SECURITY_EXTERNAL_EVENT_ID_KEY = "microsoft.security.external_event_id";
+    /** Event name emitted for a security finding (`microsoft.security.finding`). */
+    static readonly SECURITY_FINDING_EVENT_NAME = "microsoft.security.finding";
+    /** Attribute key for the detected risk category (`microsoft.security.risk.category`). */
+    static readonly SECURITY_RISK_CATEGORY_KEY = "microsoft.security.risk.category";
+    /** Attribute key for the detected risk severity (`microsoft.security.risk.severity`). */
+    static readonly SECURITY_RISK_SEVERITY_KEY = "microsoft.security.risk.severity";
+    /** Attribute key for the numeric risk score (`microsoft.security.risk.score`). */
+    static readonly SECURITY_RISK_SCORE_KEY = "microsoft.security.risk.score";
+    /** Attribute key for non-content risk metadata (`microsoft.security.risk.metadata`). */
+    static readonly SECURITY_RISK_METADATA_KEY = "microsoft.security.risk.metadata";
 }
 //# sourceMappingURL=constants.d.ts.map