autotel-genai 0.15.0 → 0.15.2

package/dist/agent/index.d.cts

@@ -1,4 +1,4 @@
-import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-T809UWnA.cjs";
+import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-Dg6xJssP.cjs";
 import { i as ModelPricing, s as TokenUsage } from "../cost-B8rIvXTK.cjs";
-import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-DfVSj0_D.cjs";
+import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-Bw7YX5sg.cjs";
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, type ActionRiskHints, type AgentActionFactory, type AgentActionMetadata, type AgentActionOptions, type AgentActionRiskClass, type AgentAiMetadata, type AgentAuditEventEnvelope, type AgentConsentEvidence, type AgentConsentOutcome, type AgentContext, type AgentDecisionMetadata, type AgentEventKind, type AgentHandler, type AgentIdentity, type AgentIdentityRecord, type AgentIdentityRegistry, type AgentIdentityStatus, type AgentInputProvenance, type AgentMemoryOperation, type AgentMetadataInput, type AgentOutcome, type AgentOutputFormat, type AgentPlanClassifier, type AgentPlanClassifierInput, type AgentPlanClassifierResult, type AgentPlanRiskVerdict, type AgentSecurityRecordOptions, type AgentSessionActionMetadata, type AgentSessionMetadata, type AgentSessionStatus, type AgentToolCallActionMetadata, type AgentToolCallOptions, type AiLifecycleStage, type CreateSignedEventEnvelopeOptions, type CrossAgentDetection, type CrossAgentEvent, CrossAgentMonitor, type CrossAgentMonitorOptions, type CrossAgentSecurityEvent, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, type DelegateToAgentInput, type DelegationContext, type DetectCrossAgentPatternOptions, type DetectionDispositionStatus, EVAL_IDENTITY_ATTR, type EmitSequenceDetectionsOptions, type EvalIncidentQueryResult, type GovernanceMetadata, type HashPayloadOptions, type HoneyTokenToolDefinition, type HoneyTokenToolOptions, type ModelPricing, POLICY_DECISION_LABEL, type PolicyDecision, type PolicyMetadata, type PrivacyProfile, type PrivacyProfileInput, type PrivacyProfileName, type ProvisionAgentIdentityInput, type RecordActiveScopesInput, type RecordAgentHandoffMetadata, type RecordControllerInput, type RecordDetectionDispositionInput, type RecordEvalRunIdentityInput, type RecordHumanApprovalInput, type RecordInputProvenanceInput, type RecordMemoryAccessInput, type RecordPlanRiskAssessmentOptions, type RecordPlanStepInput, type RecordRenderOutputInput, type RevokeAgentIdentityInput, type RotateAgentIdentityInput, SEQUENCE_RULES, type SanitizationEvidence, type ScopedToolDefinition, type SequenceDetection, type SequenceEvent, type SequenceRule, type SequenceSecurityEvent, type SequenceSeverity, type SequenceSpanLike, type SigmaDocument, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, type TokenUsage, type ToolCallMetadata, type ToolStatus, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/agent/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-RQs4XIvP.js";
+import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-C7NU4O3l.js";
 import { i as ModelPricing, s as TokenUsage } from "../cost-B8rIvXTK.js";
-import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-DRDb8zn3.js";
+import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-D3ZjviBy.js";
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, type ActionRiskHints, type AgentActionFactory, type AgentActionMetadata, type AgentActionOptions, type AgentActionRiskClass, type AgentAiMetadata, type AgentAuditEventEnvelope, type AgentConsentEvidence, type AgentConsentOutcome, type AgentContext, type AgentDecisionMetadata, type AgentEventKind, type AgentHandler, type AgentIdentity, type AgentIdentityRecord, type AgentIdentityRegistry, type AgentIdentityStatus, type AgentInputProvenance, type AgentMemoryOperation, type AgentMetadataInput, type AgentOutcome, type AgentOutputFormat, type AgentPlanClassifier, type AgentPlanClassifierInput, type AgentPlanClassifierResult, type AgentPlanRiskVerdict, type AgentSecurityRecordOptions, type AgentSessionActionMetadata, type AgentSessionMetadata, type AgentSessionStatus, type AgentToolCallActionMetadata, type AgentToolCallOptions, type AiLifecycleStage, type CreateSignedEventEnvelopeOptions, type CrossAgentDetection, type CrossAgentEvent, CrossAgentMonitor, type CrossAgentMonitorOptions, type CrossAgentSecurityEvent, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, type DelegateToAgentInput, type DelegationContext, type DetectCrossAgentPatternOptions, type DetectionDispositionStatus, EVAL_IDENTITY_ATTR, type EmitSequenceDetectionsOptions, type EvalIncidentQueryResult, type GovernanceMetadata, type HashPayloadOptions, type HoneyTokenToolDefinition, type HoneyTokenToolOptions, type ModelPricing, POLICY_DECISION_LABEL, type PolicyDecision, type PolicyMetadata, type PrivacyProfile, type PrivacyProfileInput, type PrivacyProfileName, type ProvisionAgentIdentityInput, type RecordActiveScopesInput, type RecordAgentHandoffMetadata, type RecordControllerInput, type RecordDetectionDispositionInput, type RecordEvalRunIdentityInput, type RecordHumanApprovalInput, type RecordInputProvenanceInput, type RecordMemoryAccessInput, type RecordPlanRiskAssessmentOptions, type RecordPlanStepInput, type RecordRenderOutputInput, type RevokeAgentIdentityInput, type RotateAgentIdentityInput, SEQUENCE_RULES, type SanitizationEvidence, type ScopedToolDefinition, type SequenceDetection, type SequenceEvent, type SequenceRule, type SequenceSecurityEvent, type SequenceSeverity, type SequenceSpanLike, type SigmaDocument, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, type TokenUsage, type ToolCallMetadata, type ToolStatus, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/{agent-security-DfVSj0_D.d.cts → agent-security-Bw7YX5sg.d.cts}

@@ -1,5 +1,5 @@
 import { i as ModelPricing, s as TokenUsage } from "./cost-B8rIvXTK.cjs";
-import { h as GenAiProviderName } from "./semconv-u0jJusEo.cjs";
+import { h as GenAiProviderName } from "./semconv--uhj8agp.cjs";
 import { RequestLogger } from "autotel";
 import { OnMissingContext } from "autotel-audit";
 //#region src/agent/context.d.ts
@@ -319,22 +319,22 @@ interface AgentAuditEventEnvelope {
 //#region src/agent/agent-security.d.ts
 /** Canonical agent security attribute keys (Google SAIF / human-control aligned). */
 declare const AGENT_SECURITY_ATTR: {
-  readonly controllerId: "agent.controller.id";
-  readonly inputProvenance: "agent.input.provenance";
-  readonly actionRiskClass: "agent.action.risk_class";
-  readonly consentRequired: "agent.consent.required";
-  readonly consentOutcome: "agent.consent.outcome";
-  readonly consentEvidence: "agent.consent.evidence";
-  readonly scopeActive: "agent.scope.active";
-  readonly memoryOperation: "agent.memory.operation";
-  readonly memoryIsolationKey: "agent.memory.isolation_key";
-  readonly memoryContentHash: "agent.memory.content_hash";
-  readonly planStepIndex: "agent.plan.step_index";
-  readonly planToolIntents: "agent.plan.tool_intents";
-  readonly planPolicyIds: "agent.plan.policy_ids";
-  readonly outputFormat: "agent.output.format";
-  readonly outputContainsUrl: "agent.output.contains_url";
-  readonly outputUrlCount: "agent.output.url_count";
+  readonly controllerId: 'agent.controller.id';
+  readonly inputProvenance: 'agent.input.provenance';
+  readonly actionRiskClass: 'agent.action.risk_class';
+  readonly consentRequired: 'agent.consent.required';
+  readonly consentOutcome: 'agent.consent.outcome';
+  readonly consentEvidence: 'agent.consent.evidence';
+  readonly scopeActive: 'agent.scope.active';
+  readonly memoryOperation: 'agent.memory.operation';
+  readonly memoryIsolationKey: 'agent.memory.isolation_key';
+  readonly memoryContentHash: 'agent.memory.content_hash';
+  readonly planStepIndex: 'agent.plan.step_index';
+  readonly planToolIntents: 'agent.plan.tool_intents';
+  readonly planPolicyIds: 'agent.plan.policy_ids';
+  readonly outputFormat: 'agent.output.format';
+  readonly outputContainsUrl: 'agent.output.contains_url';
+  readonly outputUrlCount: 'agent.output.url_count';
 };
 type AgentInputProvenance = 'user_direct' | 'user_voice' | 'rag' | 'memory' | 'tool_result' | 'external_untrusted';
 type AgentActionRiskClass = 'read' | 'write' | 'destructive' | 'financial' | 'exfiltration_capable';

package/dist/{agent-security-DRDb8zn3.d.ts → agent-security-D3ZjviBy.d.ts}

@@ -1,5 +1,5 @@
 import { i as ModelPricing, s as TokenUsage } from "./cost-B8rIvXTK.js";
-import { h as GenAiProviderName } from "./semconv-u0jJusEo.js";
+import { h as GenAiProviderName } from "./semconv--uhj8agp.js";
 import { RequestLogger } from "autotel";
 import { OnMissingContext } from "autotel-audit";
 //#region src/agent/context.d.ts
@@ -319,22 +319,22 @@ interface AgentAuditEventEnvelope {
 //#region src/agent/agent-security.d.ts
 /** Canonical agent security attribute keys (Google SAIF / human-control aligned). */
 declare const AGENT_SECURITY_ATTR: {
-  readonly controllerId: "agent.controller.id";
-  readonly inputProvenance: "agent.input.provenance";
-  readonly actionRiskClass: "agent.action.risk_class";
-  readonly consentRequired: "agent.consent.required";
-  readonly consentOutcome: "agent.consent.outcome";
-  readonly consentEvidence: "agent.consent.evidence";
-  readonly scopeActive: "agent.scope.active";
-  readonly memoryOperation: "agent.memory.operation";
-  readonly memoryIsolationKey: "agent.memory.isolation_key";
-  readonly memoryContentHash: "agent.memory.content_hash";
-  readonly planStepIndex: "agent.plan.step_index";
-  readonly planToolIntents: "agent.plan.tool_intents";
-  readonly planPolicyIds: "agent.plan.policy_ids";
-  readonly outputFormat: "agent.output.format";
-  readonly outputContainsUrl: "agent.output.contains_url";
-  readonly outputUrlCount: "agent.output.url_count";
+  readonly controllerId: 'agent.controller.id';
+  readonly inputProvenance: 'agent.input.provenance';
+  readonly actionRiskClass: 'agent.action.risk_class';
+  readonly consentRequired: 'agent.consent.required';
+  readonly consentOutcome: 'agent.consent.outcome';
+  readonly consentEvidence: 'agent.consent.evidence';
+  readonly scopeActive: 'agent.scope.active';
+  readonly memoryOperation: 'agent.memory.operation';
+  readonly memoryIsolationKey: 'agent.memory.isolation_key';
+  readonly memoryContentHash: 'agent.memory.content_hash';
+  readonly planStepIndex: 'agent.plan.step_index';
+  readonly planToolIntents: 'agent.plan.tool_intents';
+  readonly planPolicyIds: 'agent.plan.policy_ids';
+  readonly outputFormat: 'agent.output.format';
+  readonly outputContainsUrl: 'agent.output.contains_url';
+  readonly outputUrlCount: 'agent.output.url_count';
 };
 type AgentInputProvenance = 'user_direct' | 'user_voice' | 'rag' | 'memory' | 'tool_result' | 'external_untrusted';
 type AgentActionRiskClass = 'read' | 'write' | 'destructive' | 'financial' | 'exfiltration_capable';

package/dist/ai-sdk-bridge.d.cts

@@ -1,71 +1,71 @@
 import { s as TokenUsage, t as EstimateCostOptions } from "./cost-B8rIvXTK.cjs";
-import { h as GenAiProviderName } from "./semconv-u0jJusEo.cjs";
-import { n as GenAiAttributeMap } from "./attributes-BUctoUWQ.cjs";
+import { h as GenAiProviderName } from "./semconv--uhj8agp.cjs";
+import { n as GenAiAttributeMap } from "./attributes-DAOZehAi.cjs";
 import { TraceContext } from "autotel";
 import { Attributes } from "@opentelemetry/api";
 //#region src/ai-sdk-bridge.d.ts
 /** Legacy AI SDK (`LegacyOpenTelemetry`) attribute keys we understand. */
-declare const AI_SDK_ATTR: {
-  readonly MODEL_ID: "ai.model.id";
-  readonly MODEL_PROVIDER: "ai.model.provider";
-  readonly RESPONSE_MODEL: "ai.response.model";
-  readonly RESPONSE_ID: "ai.response.id";
-  readonly RESPONSE_FINISH_REASON: "ai.response.finishReason";
-  readonly USAGE_PROMPT_TOKENS: "ai.usage.promptTokens";
-  readonly USAGE_INPUT_TOKENS: "ai.usage.inputTokens";
-  readonly USAGE_COMPLETION_TOKENS: "ai.usage.completionTokens";
-  readonly USAGE_OUTPUT_TOKENS: "ai.usage.outputTokens";
-  readonly USAGE_CACHED_INPUT_TOKENS: "ai.usage.cachedInputTokens";
-  readonly USAGE_REASONING_TOKENS: "ai.usage.reasoningTokens";
-  readonly SETTINGS_MAX_TOKENS: "ai.settings.maxOutputTokens";
-  readonly TELEMETRY_FUNCTION_ID: "ai.telemetry.functionId";
+export declare const AI_SDK_ATTR: {
+  readonly MODEL_ID: 'ai.model.id';
+  readonly MODEL_PROVIDER: 'ai.model.provider';
+  readonly RESPONSE_MODEL: 'ai.response.model';
+  readonly RESPONSE_ID: 'ai.response.id';
+  readonly RESPONSE_FINISH_REASON: 'ai.response.finishReason';
+  readonly USAGE_PROMPT_TOKENS: 'ai.usage.promptTokens';
+  readonly USAGE_INPUT_TOKENS: 'ai.usage.inputTokens';
+  readonly USAGE_COMPLETION_TOKENS: 'ai.usage.completionTokens';
+  readonly USAGE_OUTPUT_TOKENS: 'ai.usage.outputTokens';
+  readonly USAGE_CACHED_INPUT_TOKENS: 'ai.usage.cachedInputTokens';
+  readonly USAGE_REASONING_TOKENS: 'ai.usage.reasoningTokens';
+  readonly SETTINGS_MAX_TOKENS: 'ai.settings.maxOutputTokens';
+  readonly TELEMETRY_FUNCTION_ID: 'ai.telemetry.functionId';
 };
 /**
  * Normalize an AI SDK provider id (e.g. `openai.chat`, `amazon-bedrock`,
  * `google.generative-ai`) to a canonical `gen_ai.provider.name` value. Returns
  * the original string when it isn't a known provider.
  */
-declare function normalizeAiSdkProvider(provider: string): GenAiProviderName;
+export declare function normalizeAiSdkProvider(provider: string): GenAiProviderName;
 /**
  * Extract {@link TokenUsage} from a span's attributes, reading canonical
  * `gen_ai.usage.*` first and falling back to legacy `ai.usage.*`. Returns
  * `undefined` when no token counts are present.
  */
-declare function extractAiSdkUsage(attributes: Attributes): TokenUsage | undefined;
+export declare function extractAiSdkUsage(attributes: Attributes): TokenUsage | undefined;
 /** Read the request model from canonical or legacy attributes. */
-declare function extractAiSdkModel(attributes: Attributes): string | undefined;
+export declare function extractAiSdkModel(attributes: Attributes): string | undefined;
 /**
  * Rewrite legacy `ai.*` telemetry attributes to canonical `gen_ai.*`. Pass the
  * attributes of an AI SDK span emitted by `LegacyOpenTelemetry` (or an older
  * SDK version); returns a fresh map with the canonical keys. Unknown keys are
  * dropped — this is a focused mapper, not a passthrough.
  */
-declare function mapAiSdkAttributes(attributes: Attributes): GenAiAttributeMap;
+export declare function mapAiSdkAttributes(attributes: Attributes): GenAiAttributeMap;
 /**
  * Estimate the USD cost of an AI SDK call from a span's attributes (model +
  * usage, canonical or legacy). Returns `undefined` when model or usage is
  * missing, or the model has no known pricing.
  */
-declare function estimateAiSdkCost(attributes: Attributes, options?: EstimateCostOptions): number | undefined;
+export declare function estimateAiSdkCost(attributes: Attributes, options?: EstimateCostOptions): number | undefined;
 /**
  * Estimate cost from AI SDK span attributes and record it as
  * `gen_ai.usage.cost.usd` on your own wrapping trace context. Useful when you
  * wrap a `generateText`/`streamText` call in an autotel span and want cost on
  * the parent. Returns the estimated cost, or `undefined`.
  */
-declare function recordAiSdkCost(ctx: Pick<TraceContext, 'setAttribute'>, attributes: Attributes, options?: EstimateCostOptions): number | undefined;
+export declare function recordAiSdkCost(ctx: Pick<TraceContext, 'setAttribute'>, attributes: Attributes, options?: EstimateCostOptions): number | undefined;
 /** Marks a span as having passed through an autotel-aware `enrichSpan`. */
-declare const AUTOTEL_ENRICHED_ATTR = "autotel.enriched";
+export declare const AUTOTEL_ENRICHED_ATTR = "autotel.enriched";
 /** Span kinds the `@ai-sdk/otel` `OpenTelemetry` integration emits. */
-type AiSdkSpanType = 'operation' | 'step' | 'languageModel' | 'tool' | 'embedding' | 'reranking';
+export type AiSdkSpanType = 'operation' | 'step' | 'languageModel' | 'tool' | 'embedding' | 'reranking';
 /** The context `@ai-sdk/otel` passes to an `enrichSpan` callback. */
-interface AiSdkEnrichContext {
+export interface AiSdkEnrichContext {
   spanType: AiSdkSpanType;
   operationId: string;
   callId: string;
   runtimeContext?: Record<string, unknown>;
 }
-interface AutotelEnrichOptions {
+export interface AutotelEnrichOptions {
   /**
    * Map the enrich context to extra span attributes — e.g. promote
    * `runtimeContext` fields (sessionId, tenantId) onto the span. Returns
@@ -94,6 +94,5 @@ interface AutotelEnrichOptions {
  * fact with {@link estimateAiSdkCost}. `autotel-devtools` also prices `gen_ai`
  * spans on render regardless of which integration emitted them.
  */
-declare function autotelEnrich(options?: AutotelEnrichOptions): (ctx: AiSdkEnrichContext) => Record<string, string | number | boolean>;
-//#endregion
-export { AI_SDK_ATTR, AUTOTEL_ENRICHED_ATTR, AiSdkEnrichContext, AiSdkSpanType, AutotelEnrichOptions, autotelEnrich, estimateAiSdkCost, extractAiSdkModel, extractAiSdkUsage, mapAiSdkAttributes, normalizeAiSdkProvider, recordAiSdkCost };
+export declare function autotelEnrich(options?: AutotelEnrichOptions): (ctx: AiSdkEnrichContext) => Record<string, string | number | boolean>;
+//#endregion

package/dist/ai-sdk-bridge.d.ts

@@ -1,71 +1,71 @@
 import { s as TokenUsage, t as EstimateCostOptions } from "./cost-B8rIvXTK.js";
-import { h as GenAiProviderName } from "./semconv-u0jJusEo.js";
-import { n as GenAiAttributeMap } from "./attributes-nMd8kWhJ.js";
+import { h as GenAiProviderName } from "./semconv--uhj8agp.js";
+import { n as GenAiAttributeMap } from "./attributes-DAYkQi4W.js";
 import { Attributes } from "@opentelemetry/api";
 import { TraceContext } from "autotel";
 //#region src/ai-sdk-bridge.d.ts
 /** Legacy AI SDK (`LegacyOpenTelemetry`) attribute keys we understand. */
-declare const AI_SDK_ATTR: {
-  readonly MODEL_ID: "ai.model.id";
-  readonly MODEL_PROVIDER: "ai.model.provider";
-  readonly RESPONSE_MODEL: "ai.response.model";
-  readonly RESPONSE_ID: "ai.response.id";
-  readonly RESPONSE_FINISH_REASON: "ai.response.finishReason";
-  readonly USAGE_PROMPT_TOKENS: "ai.usage.promptTokens";
-  readonly USAGE_INPUT_TOKENS: "ai.usage.inputTokens";
-  readonly USAGE_COMPLETION_TOKENS: "ai.usage.completionTokens";
-  readonly USAGE_OUTPUT_TOKENS: "ai.usage.outputTokens";
-  readonly USAGE_CACHED_INPUT_TOKENS: "ai.usage.cachedInputTokens";
-  readonly USAGE_REASONING_TOKENS: "ai.usage.reasoningTokens";
-  readonly SETTINGS_MAX_TOKENS: "ai.settings.maxOutputTokens";
-  readonly TELEMETRY_FUNCTION_ID: "ai.telemetry.functionId";
+export declare const AI_SDK_ATTR: {
+  readonly MODEL_ID: 'ai.model.id';
+  readonly MODEL_PROVIDER: 'ai.model.provider';
+  readonly RESPONSE_MODEL: 'ai.response.model';
+  readonly RESPONSE_ID: 'ai.response.id';
+  readonly RESPONSE_FINISH_REASON: 'ai.response.finishReason';
+  readonly USAGE_PROMPT_TOKENS: 'ai.usage.promptTokens';
+  readonly USAGE_INPUT_TOKENS: 'ai.usage.inputTokens';
+  readonly USAGE_COMPLETION_TOKENS: 'ai.usage.completionTokens';
+  readonly USAGE_OUTPUT_TOKENS: 'ai.usage.outputTokens';
+  readonly USAGE_CACHED_INPUT_TOKENS: 'ai.usage.cachedInputTokens';
+  readonly USAGE_REASONING_TOKENS: 'ai.usage.reasoningTokens';
+  readonly SETTINGS_MAX_TOKENS: 'ai.settings.maxOutputTokens';
+  readonly TELEMETRY_FUNCTION_ID: 'ai.telemetry.functionId';
 };
 /**
  * Normalize an AI SDK provider id (e.g. `openai.chat`, `amazon-bedrock`,
  * `google.generative-ai`) to a canonical `gen_ai.provider.name` value. Returns
  * the original string when it isn't a known provider.
  */
-declare function normalizeAiSdkProvider(provider: string): GenAiProviderName;
+export declare function normalizeAiSdkProvider(provider: string): GenAiProviderName;
 /**
  * Extract {@link TokenUsage} from a span's attributes, reading canonical
  * `gen_ai.usage.*` first and falling back to legacy `ai.usage.*`. Returns
  * `undefined` when no token counts are present.
  */
-declare function extractAiSdkUsage(attributes: Attributes): TokenUsage | undefined;
+export declare function extractAiSdkUsage(attributes: Attributes): TokenUsage | undefined;
 /** Read the request model from canonical or legacy attributes. */
-declare function extractAiSdkModel(attributes: Attributes): string | undefined;
+export declare function extractAiSdkModel(attributes: Attributes): string | undefined;
 /**
  * Rewrite legacy `ai.*` telemetry attributes to canonical `gen_ai.*`. Pass the
  * attributes of an AI SDK span emitted by `LegacyOpenTelemetry` (or an older
  * SDK version); returns a fresh map with the canonical keys. Unknown keys are
  * dropped — this is a focused mapper, not a passthrough.
  */
-declare function mapAiSdkAttributes(attributes: Attributes): GenAiAttributeMap;
+export declare function mapAiSdkAttributes(attributes: Attributes): GenAiAttributeMap;
 /**
  * Estimate the USD cost of an AI SDK call from a span's attributes (model +
  * usage, canonical or legacy). Returns `undefined` when model or usage is
  * missing, or the model has no known pricing.
  */
-declare function estimateAiSdkCost(attributes: Attributes, options?: EstimateCostOptions): number | undefined;
+export declare function estimateAiSdkCost(attributes: Attributes, options?: EstimateCostOptions): number | undefined;
 /**
  * Estimate cost from AI SDK span attributes and record it as
  * `gen_ai.usage.cost.usd` on your own wrapping trace context. Useful when you
  * wrap a `generateText`/`streamText` call in an autotel span and want cost on
  * the parent. Returns the estimated cost, or `undefined`.
  */
-declare function recordAiSdkCost(ctx: Pick<TraceContext, 'setAttribute'>, attributes: Attributes, options?: EstimateCostOptions): number | undefined;
+export declare function recordAiSdkCost(ctx: Pick<TraceContext, 'setAttribute'>, attributes: Attributes, options?: EstimateCostOptions): number | undefined;
 /** Marks a span as having passed through an autotel-aware `enrichSpan`. */
-declare const AUTOTEL_ENRICHED_ATTR = "autotel.enriched";
+export declare const AUTOTEL_ENRICHED_ATTR = "autotel.enriched";
 /** Span kinds the `@ai-sdk/otel` `OpenTelemetry` integration emits. */
-type AiSdkSpanType = 'operation' | 'step' | 'languageModel' | 'tool' | 'embedding' | 'reranking';
+export type AiSdkSpanType = 'operation' | 'step' | 'languageModel' | 'tool' | 'embedding' | 'reranking';
 /** The context `@ai-sdk/otel` passes to an `enrichSpan` callback. */
-interface AiSdkEnrichContext {
+export interface AiSdkEnrichContext {
   spanType: AiSdkSpanType;
   operationId: string;
   callId: string;
   runtimeContext?: Record<string, unknown>;
 }
-interface AutotelEnrichOptions {
+export interface AutotelEnrichOptions {
   /**
    * Map the enrich context to extra span attributes — e.g. promote
    * `runtimeContext` fields (sessionId, tenantId) onto the span. Returns
@@ -94,6 +94,5 @@ interface AutotelEnrichOptions {
  * fact with {@link estimateAiSdkCost}. `autotel-devtools` also prices `gen_ai`
  * spans on render regardless of which integration emitted them.
  */
-declare function autotelEnrich(options?: AutotelEnrichOptions): (ctx: AiSdkEnrichContext) => Record<string, string | number | boolean>;
-//#endregion
-export { AI_SDK_ATTR, AUTOTEL_ENRICHED_ATTR, AiSdkEnrichContext, AiSdkSpanType, AutotelEnrichOptions, autotelEnrich, estimateAiSdkCost, extractAiSdkModel, extractAiSdkUsage, mapAiSdkAttributes, normalizeAiSdkProvider, recordAiSdkCost };
+export declare function autotelEnrich(options?: AutotelEnrichOptions): (ctx: AiSdkEnrichContext) => Record<string, string | number | boolean>;
+//#endregion

package/dist/{attributes-BUctoUWQ.d.cts → attributes-DAOZehAi.d.cts}

@@ -1,4 +1,4 @@
-import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv-u0jJusEo.cjs";
+import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv--uhj8agp.cjs";
 //#region src/attributes.d.ts
 /**
  * OpenTelemetry span attribute value — primitives and homogeneous arrays.

package/dist/{attributes-nMd8kWhJ.d.ts → attributes-DAYkQi4W.d.ts}

@@ -1,4 +1,4 @@
-import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv-u0jJusEo.js";
+import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv--uhj8agp.js";
 //#region src/attributes.d.ts
 /**
  * OpenTelemetry span attribute value — primitives and homogeneous arrays.

package/dist/{events-m7H2tLOc.d.cts → events-Bckm2Em5.d.cts}

@@ -1,4 +1,4 @@
-import { h as GenAiProviderName, p as GenAiOperationName } from "./semconv-u0jJusEo.cjs";
+import { h as GenAiProviderName, p as GenAiOperationName } from "./semconv--uhj8agp.cjs";
 import { TraceContext } from "autotel";
 //#region src/events.d.ts
 /**

package/dist/{events-CGPuUt4R.d.ts → events-BpmHGMQR.d.ts}

@@ -1,4 +1,4 @@
-import { h as GenAiProviderName, p as GenAiOperationName } from "./semconv-u0jJusEo.js";
+import { h as GenAiProviderName, p as GenAiOperationName } from "./semconv--uhj8agp.js";
 import { TraceContext } from "autotel";
 //#region src/events.d.ts
 /**

package/dist/events.d.cts

@@ -1,2 +1,2 @@
-import { a as GenAiMessage, c as GenAiWarning, d as recordInferenceDetails, f as recordModelWarnings, i as GenAiContentSink, l as InferenceDetailsEvent, m as setGenAiContent, n as DEFAULT_MAX_CONTENT_BYTES, o as GenAiMessagePart, p as recordOperationException, r as EvaluationResultEvent, s as GenAiOperationExceptionEvent, t as ContentCaptureSettings, u as recordEvaluationResult } from "./events-m7H2tLOc.cjs";
+import { a as GenAiMessage, c as GenAiWarning, d as recordInferenceDetails, f as recordModelWarnings, i as GenAiContentSink, l as InferenceDetailsEvent, m as setGenAiContent, n as DEFAULT_MAX_CONTENT_BYTES, o as GenAiMessagePart, p as recordOperationException, r as EvaluationResultEvent, s as GenAiOperationExceptionEvent, t as ContentCaptureSettings, u as recordEvaluationResult } from "./events-Bckm2Em5.cjs";
 export { ContentCaptureSettings, DEFAULT_MAX_CONTENT_BYTES, EvaluationResultEvent, GenAiContentSink, GenAiMessage, GenAiMessagePart, GenAiOperationExceptionEvent, GenAiWarning, InferenceDetailsEvent, recordEvaluationResult, recordInferenceDetails, recordModelWarnings, recordOperationException, setGenAiContent };

package/dist/events.d.ts

@@ -1,2 +1,2 @@
-import { a as GenAiMessage, c as GenAiWarning, d as recordInferenceDetails, f as recordModelWarnings, i as GenAiContentSink, l as InferenceDetailsEvent, m as setGenAiContent, n as DEFAULT_MAX_CONTENT_BYTES, o as GenAiMessagePart, p as recordOperationException, r as EvaluationResultEvent, s as GenAiOperationExceptionEvent, t as ContentCaptureSettings, u as recordEvaluationResult } from "./events-CGPuUt4R.js";
+import { a as GenAiMessage, c as GenAiWarning, d as recordInferenceDetails, f as recordModelWarnings, i as GenAiContentSink, l as InferenceDetailsEvent, m as setGenAiContent, n as DEFAULT_MAX_CONTENT_BYTES, o as GenAiMessagePart, p as recordOperationException, r as EvaluationResultEvent, s as GenAiOperationExceptionEvent, t as ContentCaptureSettings, u as recordEvaluationResult } from "./events-BpmHGMQR.js";
 export { ContentCaptureSettings, DEFAULT_MAX_CONTENT_BYTES, EvaluationResultEvent, GenAiContentSink, GenAiMessage, GenAiMessagePart, GenAiOperationExceptionEvent, GenAiWarning, InferenceDetailsEvent, recordEvaluationResult, recordInferenceDetails, recordModelWarnings, recordOperationException, setGenAiContent };

package/dist/guard.d.cts

@@ -1,9 +1,9 @@
 import { TraceContext } from "autotel";
 //#region src/guard.d.ts
 /** What a rule does when it crosses its threshold. */
-type GuardAction = 'warn' | 'stop';
+export type GuardAction = 'warn' | 'stop';
 /** Usage contribution for a single step. */
-interface GuardUsage {
+export interface GuardUsage {
   /**
    * Estimated USD cost for this step. Pair with
    * {@link import('./cost.js').estimateLLMCost} to compute it from token usage.
@@ -15,7 +15,7 @@ interface GuardUsage {
   outputTokens?: number;
 }
 /** A single supervised step: an LLM call, a tool call, a delegation, … */
-interface GenAiGuardStep {
+export interface GenAiGuardStep {
   /**
    * Step kind. `tool` increments the tool-call counter; any value is allowed.
    */
@@ -34,7 +34,7 @@ interface GenAiGuardStep {
   usage?: GuardUsage;
 }
 /** Read-only snapshot of the accumulated session state. */
-interface GuardState {
+export interface GuardState {
   /** Epoch ms when the guard was created. */
   readonly startedAt: number;
   /** Epoch ms at evaluation time. */
@@ -60,7 +60,7 @@ interface GuardState {
   }>;
 }
 /** A fired rule. */
-interface GuardViolation {
+export interface GuardViolation {
   /** Rule name, e.g. `cost-ceiling:$5`. */
   rule: string;
   /** Whether the run continued (`warn`) or was halted (`stop`). */
@@ -73,7 +73,7 @@ interface GuardViolation {
   limit: number;
 }
 /** A guard rule: inspect the state after a step and optionally fire. */
-interface GenAiGuardRule {
+export interface GenAiGuardRule {
   /** Stable identifier, surfaced on {@link GuardViolation.rule}. */
   name: string;
   /** Default {@link GuardAction} when the rule fires. Defaults to `stop`. */
@@ -90,16 +90,16 @@ interface GenAiGuardRule {
   } | undefined;
 }
 /** Minimal telemetry sink — the subset of {@link TraceContext} the guard uses. */
-type GuardSink = Pick<TraceContext, 'setAttributes' | 'track'>;
+export type GuardSink = Pick<TraceContext, 'setAttributes' | 'track'>;
 /** What happens when a `stop` rule fires. */
-type GuardStopBehavior =
+export type GuardStopBehavior =
 /** Abort the signal and throw a structured error (default). */
 'throw' |
 /** Abort the signal but do not throw — inspect `guard.stopped` yourself. */
 'abort' |
 /** Record the violation only; neither abort nor throw. */
 'silent';
-interface GenAiGuardOptions {
+export interface GenAiGuardOptions {
   /** Rules to evaluate after each step. */
   rules: GenAiGuardRule[];
   /** What to do when a `stop` rule fires. Defaults to `throw`. */
@@ -113,7 +113,7 @@ interface GenAiGuardOptions {
   now?: () => number;
 }
 /** A live guard supervising an agent run. */
-interface GenAiGuard {
+export interface GenAiGuard {
   /**
    * Record a step, accumulate its usage, and evaluate every rule. Returns the
    * violations that fired _this call_ (each rule fires at most once). When a
@@ -136,26 +136,26 @@ interface GenAiGuard {
   readonly violations: ReadonlyArray<GuardViolation>;
 }
 /** Stop / warn when accumulated cost exceeds `limitUsd`. */
-declare function costCeiling(limitUsd: number, action?: GuardAction): GenAiGuardRule;
+export declare function costCeiling(limitUsd: number, action?: GuardAction): GenAiGuardRule;
 /** Stop / warn when accumulated input + output tokens exceed `limit`. */
-declare function tokenCeiling(limit: number, action?: GuardAction): GenAiGuardRule;
+export declare function tokenCeiling(limit: number, action?: GuardAction): GenAiGuardRule;
 /** Stop / warn when the number of tool calls exceeds `limit`. */
-declare function maxToolCalls(limit: number, action?: GuardAction): GenAiGuardRule;
+export declare function maxToolCalls(limit: number, action?: GuardAction): GenAiGuardRule;
 /** Stop / warn when the total number of steps exceeds `limit`. */
-declare function maxSteps(limit: number, action?: GuardAction): GenAiGuardRule;
+export declare function maxSteps(limit: number, action?: GuardAction): GenAiGuardRule;
 /** Stop / warn when wall-clock time since start exceeds `limitMs`. */
-declare function maxDuration(limitMs: number, action?: GuardAction): GenAiGuardRule;
+export declare function maxDuration(limitMs: number, action?: GuardAction): GenAiGuardRule;
 /**
  * Stop / warn on a spin loop: the same step (`name` + `signature`) repeated
  * `count` or more times within the last `window` steps. Steps without a `name`
  * are ignored (no identity to compare).
  */
-declare function spinLoop(options: {
+export declare function spinLoop(options: {
   count: number;
   window: number;
 }, action?: GuardAction): GenAiGuardRule;
 /** Stop / warn on `count` or more consecutive failing steps. */
-declare function errorLoop(options: {
+export declare function errorLoop(options: {
   count: number;
 }, action?: GuardAction): GenAiGuardRule;
 /**
@@ -163,13 +163,13 @@ declare function errorLoop(options: {
  * Matched exactly first, then by longest key prefix. Override via the `limit`
  * option on {@link contextBudget}.
  */
-declare const CONTEXT_LIMITS: Record<string, number>;
+export declare const CONTEXT_LIMITS: Record<string, number>;
 /**
  * Stop / warn when cumulative input tokens reach `threshold` (default 0.9) of
  * the model's context window. Provide an explicit `limit`, or a `model` to look
  * one up from {@link CONTEXT_LIMITS}.
  */
-declare function contextBudget(options: {
+export declare function contextBudget(options: {
   model?: string;
   limit?: number;
   threshold?: number;
@@ -189,14 +189,14 @@ declare function contextBudget(options: {
  * - `timeout:30m` — {@link maxDuration} (`ms`/`s`/`m`/`h`, default seconds)
  * - `context:0.9` / `context:0.9@gpt-4o` — {@link contextBudget}
  */
-declare function parseGuardRules(shorthand: string, options?: {
+export declare function parseGuardRules(shorthand: string, options?: {
   defaultAction?: GuardAction;
 }): GenAiGuardRule[];
 /**
  * Create a guard that supervises an in-process agent run against `rules`.
  */
-declare function createGenAiGuard(options: GenAiGuardOptions): GenAiGuard;
-interface GenAiBudgetOptions {
+export declare function createGenAiGuard(options: GenAiGuardOptions): GenAiGuard;
+export interface GenAiBudgetOptions {
   /** Hard cost ceiling in USD — a `stop` rule. */
   maxCostUsd?: number;
   /** Soft cost threshold in USD — a `warn` rule. */
@@ -216,6 +216,5 @@ interface GenAiBudgetOptions {
  * Convenience preset that wires the common cost / token / tool-call / duration
  * ceilings into a {@link createGenAiGuard}. Returns the same {@link GenAiGuard}.
  */
-declare function createGenAiBudget(options: GenAiBudgetOptions): GenAiGuard;
-//#endregion
-export { CONTEXT_LIMITS, GenAiBudgetOptions, GenAiGuard, GenAiGuardOptions, GenAiGuardRule, GenAiGuardStep, GuardAction, GuardSink, GuardState, GuardStopBehavior, GuardUsage, GuardViolation, contextBudget, costCeiling, createGenAiBudget, createGenAiGuard, errorLoop, maxDuration, maxSteps, maxToolCalls, parseGuardRules, spinLoop, tokenCeiling };
+export declare function createGenAiBudget(options: GenAiBudgetOptions): GenAiGuard;
+//#endregion