@warlock.js/ai-panoptic 5.31.0 → 5.32.0

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@warlock.js/ai-panoptic` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
 
+## 5.32.0 - 2026-10-18
+
+### Changed
+
+- Pin the package development compiler to TypeScript 7.0.2 and use explicit Node types and source roots with supported module resolution.
+
+### Fixed
+
+- Use the canonical usage rollup for trace aggregates, retaining hosted-tool counters and historical request fees alongside cache lifetime and mixed-provider cache semantics.
+
 ## 5.31.0 - 2026-10-18
 
 ### Fixed

package/cjs/index.cjs

@@ -114,10 +114,7 @@ function extractSpanAttributes(report) {
 		case "orchestrator":
 			addOrchestratorAttributes(attributes, extensions);
 			break;
-		case "tool":
-			addToolAttributes(attributes, extensions);
-			break;
-		default: break;
+		case "tool": addToolAttributes(attributes, extensions);
 	}
 	if (Object.keys(attributes).length === 0) return;
 	return attributes;
@@ -502,48 +499,14 @@ function toEpoch(bound) {
 
 //#endregion
 //#region ../../packages/ai-panoptic/src/store/sum-usage.ts
-/**
-* Fold a child {@link Usage} into a running accumulator. Token channels
-* (`input` / `output` / `total`) always sum; the optional cache /
-* reasoning channels (`cachedTokens` / `cacheWriteTokens` /
-* `reasoningTokens`) sum only when at least one side reported them, so
-* a provider that never meters a channel doesn't fabricate a `0` for
-* it. The `cost` breakdown is merged with the core framework's
-* {@link accumulateCost}, keeping cost-rollup semantics identical to a
-* native report tree — an unpriced contributor never erases a priced
-* one.
-*
-* Pure: returns a fresh `Usage`, never mutates either argument. Seed an
-* aggregation with {@link emptyUsage}.
-*
-* @example
-* let total = emptyUsage();
-* for (const trace of traces) {
-*   total = sumUsage(total, trace.usage);
-* }
-*/
+/** Return an independent all-channel usage rollup, preserving hosted-tool counters. */
 function sumUsage(accumulator, next) {
-	const merged = {
-		input: accumulator.input + next.input,
-		output: accumulator.output + next.output,
-		total: accumulator.total + next.total
-	};
-	const cachedTokens = sumOptional(accumulator.cachedTokens, next.cachedTokens);
-	if (cachedTokens !== void 0) merged.cachedTokens = cachedTokens;
-	const cacheWriteTokens = sumOptional(accumulator.cacheWriteTokens, next.cacheWriteTokens);
-	if (cacheWriteTokens !== void 0) merged.cacheWriteTokens = cacheWriteTokens;
-	const reasoningTokens = sumOptional(accumulator.reasoningTokens, next.reasoningTokens);
-	if (reasoningTokens !== void 0) merged.reasoningTokens = reasoningTokens;
-	const cost = (0, _warlock_js_ai.accumulateCost)(accumulator.cost, next.cost);
-	if (cost !== void 0) merged.cost = cost;
+	const merged = emptyUsage();
+	(0, _warlock_js_ai.mergeUsage)(merged, accumulator);
+	(0, _warlock_js_ai.mergeUsage)(merged, next);
 	return merged;
 }
-/**
-* A zero-valued {@link Usage} to seed an aggregation. Only the required
-* token channels are set; optional channels stay absent until a
-* contributor reports them, preserving the "never reported" vs
-* "reported as 0" distinction.
-*/
+/** Seed an aggregation without claiming any optional counter was reported. */
 function emptyUsage() {
 	return {
 		input: 0,
@@ -551,15 +514,6 @@ function emptyUsage() {
 		total: 0
 	};
 }
-/**
-* Add two optional token counts, treating either side's `undefined` as
-* zero — but return `undefined` when both are absent, so an unreported
-* channel stays unreported rather than collapsing to `0`.
-*/
-function sumOptional(accumulator, next) {
-	if (accumulator === void 0 && next === void 0) return;
-	return (accumulator ?? 0) + (next ?? 0);
-}
 
 //#endregion
 //#region ../../packages/ai-panoptic/src/store/cache-trace-store.ts
@@ -785,10 +739,7 @@ var CacheTraceStore = class {
 			case "incomplete":
 				aggregate.failed += 1;
 				break;
-			case "cancelled":
-				aggregate.cancelled += 1;
-				break;
-			default: break;
+			case "cancelled": aggregate.cancelled += 1;
 		}
 	}
 	/**
@@ -941,10 +892,7 @@ var InMemoryTraceStore = class {
 			case "incomplete":
 				aggregate.failed += 1;
 				break;
-			case "cancelled":
-				aggregate.cancelled += 1;
-				break;
-			default: break;
+			case "cancelled": aggregate.cancelled += 1;
 		}
 	}
 	/**
@@ -1535,7 +1483,7 @@ function ownUsage(span) {
 * rolled-up subtree totals next to an own-usage `usage` block. Cost is
 * omitted for the same reason; Langfuse prices the own tokens itself.
 */
-const LANGFUSE_METADATA_OMIT = new Set([
+const LANGFUSE_METADATA_OMIT = /* @__PURE__ */ new Set([
 	GEN_AI_ATTRIBUTES.usageInputTokens,
 	GEN_AI_ATTRIBUTES.usageOutputTokens,
 	WARLOCK_ATTRIBUTES.totalTokens,
@@ -1935,7 +1883,9 @@ function panoptic(options = {}) {
 * the caller (the dashboard route) is expected to catch.
 */
 async function evaluateSystemPrompt(systemPrompt, config, instructionsOverride) {
-	return (0, _warlock_js_ai.judgePromptBody)(systemPrompt, typeof config.model === "function" ? await config.model() : config.model, instructionsOverride?.trim() || config.instructions);
+	const model = typeof config.model === "function" ? await config.model() : config.model;
+	const instructions = instructionsOverride?.trim() || config.instructions;
+	return (0, _warlock_js_ai.judgePromptBody)(systemPrompt, model, instructions);
 }
 
 //#endregion
@@ -3524,7 +3474,7 @@ function encodeForInlineScript(value) {
 //#endregion
 //#region ../../packages/ai-panoptic/src/dashboard/serve.ts
 /** Hard cap on the evaluate route's request body — well beyond a real instructions string. */
-const MAX_EVALUATE_BODY_BYTES = 64 * 1024;
+const MAX_EVALUATE_BODY_BYTES = 65536;
 /**
 * Security response headers added to every dashboard response (S4):
 * block MIME-sniffing, framing, referrer leakage, and lock the page's
@@ -3806,13 +3756,14 @@ function dashboard(store, options = {}) {
 	const basePath = normalizeBasePath(options.basePath);
 	if (!isLoopbackHost(host) && !options.authToken) return Promise.reject(/* @__PURE__ */ new Error(`Panoptic dashboard: binding to a non-loopback host ("${host}") requires an \`authToken\` (the dashboard exposes raw prompt content). Pass \`authToken\`, or bind to 127.0.0.1.`));
 	const allowedHosts = (options.allowedHosts ?? defaultAllowedHosts(host)).map((h) => h.toLowerCase());
-	const server = (0, node_http.createServer)(createRequestHandler(store, {
+	const handler = createRequestHandler(store, {
 		basePath,
 		title,
 		authToken: options.authToken,
 		allowedHosts,
 		evaluate: options.evaluate
-	}));
+	});
+	const server = (0, node_http.createServer)(handler);
 	return new Promise((resolve, reject) => {
 		const onError = (error) => {
 			server.off("error", onError);