autotel-genai 0.7.1 → 0.9.0

package/README.md

@@ -68,7 +68,7 @@ export const chat = traceGenAI({
 | **Cost**            | `autotel-genai/cost`      | `estimateLLMCost`, `recordLLMCost`, `MODEL_PRICING` (cache-read/write aware)                                                                                                                          |
 | **Metrics**         | `autotel-genai/metrics`   | `genAiMetricViews()` re-buckets the canonical histograms                                                                                                                                              |
 | **Attributes**      | `autotel-genai`           | typed builders → canonical attribute maps                                                                                                                                                             |
-| **Events**          | `autotel-genai/events`    | opt-in content + `inference.operation.details` / `evaluation.result`                                                                                                                                  |
+| **Events**          | `autotel-genai/events`    | opt-in content (binary redacted, size-capped) + `inference.operation.details` / `evaluation.result`                                                                                                   |
 | **Trace**           | `autotel-genai/trace`     | `traceGenAI()`, `recordGenAiResponse/Usage`                                                                                                                                                           |
 | **Guard**           | `autotel-genai/guard`     | inline cost/token/loop kill-switch: `createGenAiBudget`, `createGenAiGuard`, `parseGuardRules`                                                                                                        |
 | **Streaming**       | `autotel-genai/streaming` | TTFC, throughput, inter-chunk distribution: `createStreamTimer`, `recordStreamTiming`                                                                                                                 |
@@ -88,6 +88,36 @@ recordLLMCost(ctx, 'claude-sonnet-4', {
 });
 ```
 
+**Server-side tools are money too.** Web search, code interpreter and file
+search are billed per call, outside the token counts. An agent that searches on
+every step can spend more there than on tokens, and a cost built from tokens
+alone will never show it:
+
+```ts
+recordLLMCost(ctx, 'claude-sonnet-4', {
+  inputTokens: 4000,
+  serverToolCalls: { web_search: 12 }, // SERVER_TOOL_PRICING_PER_1K
+});
+```
+
+A tool with no price is left out of the figure rather than guessed at zero, and
+named on the span as `gen_ai.usage.cost.unpriced_tools` so the gap is visible.
+
+**Cache accounting.** By default cache reads are treated as a subset of
+`inputTokens` (what OpenAI and Anthropic report directly) and cache writes as
+additive. Gateways and normalised usage objects do not all agree; where yours
+reports cache tokens separately, say so — getting it backwards subtracts a pool
+that was never in the input, understating exactly the calls that cost most:
+
+```ts
+recordLLMCost(ctx, model, { ...usage, cacheTokensExclusive: true });
+```
+
+**Where the numbers came from.** `tokenSource: 'observed' | 'estimated'` labels
+the counts as `autotel.evidence.tokens`. A locally counted token and a
+provider-reported one are the same number on a span; unlabelled, a guess reads
+as an invoice.
+
 ### Metrics
 
 ```ts
@@ -170,8 +200,8 @@ throughput, and an inter-chunk gap distribution `{min,p10,median,avg,p90,max}`).
 
 ### Content capture & warnings
 
-`setGenAiContent` now gates input/output independently and base64-encodes binary
-(image/audio/file) parts instead of letting `JSON.stringify` corrupt them:
+`setGenAiContent` gates input and output independently, replaces inline binary
+with a placeholder, and caps what is left:
 
 ```ts
 import { setGenAiContent, recordModelWarnings } from 'autotel-genai';
@@ -185,6 +215,46 @@ setGenAiContent(
 recordModelWarnings(ctx, result.warnings); // surface provider warnings vendors only log
 ```
 
+**Binary is redacted, not recorded.** A multimodal prompt carries its images,
+audio and PDFs inline as base64. Serialised verbatim, one such call is a
+megabyte-scale span attribute that collectors truncate mid-string and nobody
+reads. The bytes were never the interesting part, so they are replaced by a
+placeholder that says what stood there:
+
+```jsonc
+// gen_ai.input.messages
+[
+  {
+    "role": "user",
+    "parts": [
+      { "type": "text", "content": "what is in this photo?" },
+      { "type": "input_image", "data": "[base64 image/png redacted]" },
+    ],
+  },
+]
+```
+
+Recognition is contextual: a bare alphanumeric string must be 1KB before it is
+suspected, but under a key that means binary (`data`, `image_url`,
+`inline_data`) or beside a `mediaType` / `format` hint, 64 bytes is enough. An
+explicit `text/*` media type settles it the other way and nothing is touched.
+
+Whatever survives is capped at `DEFAULT_MAX_CONTENT_BYTES` (200KB) per
+attribute. Both are declared rather than silent — a cut attribute gains
+`<attribute>.original_size` and the span is labelled `autotel.evidence.input =
+'truncated'` (or `'redacted'`), so a reader can tell a short prompt from a
+prompt you only kept the front of.
+
+```ts
+setGenAiContent(ctx, content, {
+  redactBinary: false, // only when the payload itself is under investigation
+  maxContentBytes: 0, // 0 or less: no cap
+});
+```
+
+`redactBinaryContent()` and `truncateUtf8()` are exported for payloads that
+never reach a span — an event body, a log line, your own exporter.
+
 ### Agents & tools
 
 ```ts
@@ -457,6 +527,60 @@ synchronously, so they nest under the request span you already opened, reach
 every `init()` destination, pass through your `spanEnrichers` (including
 `langfuseCompatibility`), and get priced.
 
+### Prompt versions
+
+`gen_ai.prompt.name` alone cannot tell you which edit moved the numbers. Stamp
+the version too, and cost, latency and evaluation score become splittable by
+prompt change in whatever backend holds the spans:
+
+```ts
+traceGenAI({
+  provider: 'openai',
+  model: 'gpt-4o',
+  workflow: {
+    promptName: 'initial-router',
+    promptVersion: 7, // or your registry's own id
+    promptLabel: 'production',
+    promptHash: 'sha256:…', // when there is no registry to version it
+  },
+});
+```
+
+### Grouping traces into sessions
+
+A conversation is more than one trace. Two canonical attributes already carry
+that, and neither is GenAI-specific:
+
+- `gen_ai.conversation.id` — the thread this call belongs to.
+- `session.id` — the visit it happened in, set by autotel core's `setSession()`
+  or stamped on every browser span by `autotel-web`.
+
+Set them and total cost per session, traces per conversation, and
+session-level latency are ordinary queries. This is the same hierarchy vendor
+LLM-analytics products sell as `$ai_session_id`; here it is spec, so it works
+wherever the spans land.
+
+### Sending the same spans to PostHog
+
+PostHog ingests plain OTLP: `PostHogSpanProcessor` from `@posthog/ai/otel`
+forwards any span carrying `gen_ai.*` attributes and assembles its `$ai_*`
+event server-side. Because this package emits canonical names, no mapping layer
+is needed — add the processor and the spans you already have become LLM
+analytics:
+
+```ts
+import { NodeSDK } from '@opentelemetry/sdk-node';
+import { PostHogSpanProcessor } from '@posthog/ai/otel';
+
+const sdk = new NodeSDK({
+  spanProcessors: [new PostHogSpanProcessor({ projectToken: 'phc_…' })],
+});
+```
+
+`src/posthog-contract.test.ts` pins that agreement, so it cannot quietly stop
+being true. For the browser half — session, replay and person joined in both
+directions — see `autotel-posthog`.
+
 ## Semantic conventions
 
 Aligned to the `semantic-conventions-genai` snapshot. Span names follow the

package/dist/agent/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_agent_security = require('../agent-security-BiBsh8C2.cjs');
-const require_agent = require('../agent-C13hoGHA.cjs');
+const require_agent_security = require('../agent-security-CMVIlhbh.cjs');
+const require_agent = require('../agent-DavvAWIG.cjs');
 
 exports.AGENT_AUDIT_SCHEMA_VERSION = require_agent.AGENT_AUDIT_SCHEMA_VERSION;
 exports.AGENT_OUTCOME_LABEL = require_agent.AGENT_OUTCOME_LABEL;

package/dist/agent/index.d.cts

@@ -1,4 +1,4 @@
-import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-X0fC3Awl.cjs";
-import { a as TokenUsage, i as ModelPricing } from "../cost-BiGrdrt6.cjs";
-import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-w2MvbC0P.cjs";
+import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-C27Y-PcB.cjs";
+import { i as ModelPricing, o as TokenUsage } from "../cost-BcW9kEgp.cjs";
+import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-BjM1QOTr.cjs";
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, type ActionRiskHints, type AgentActionFactory, type AgentActionMetadata, type AgentActionOptions, type AgentActionRiskClass, type AgentAiMetadata, type AgentAuditEventEnvelope, type AgentConsentEvidence, type AgentConsentOutcome, type AgentContext, type AgentDecisionMetadata, type AgentEventKind, type AgentHandler, type AgentIdentity, type AgentIdentityRecord, type AgentIdentityRegistry, type AgentIdentityStatus, type AgentInputProvenance, type AgentMemoryOperation, type AgentMetadataInput, type AgentOutcome, type AgentOutputFormat, type AgentPlanClassifier, type AgentPlanClassifierInput, type AgentPlanClassifierResult, type AgentPlanRiskVerdict, type AgentSecurityRecordOptions, type AgentSessionActionMetadata, type AgentSessionMetadata, type AgentSessionStatus, type AgentToolCallActionMetadata, type AgentToolCallOptions, type AiLifecycleStage, type CreateSignedEventEnvelopeOptions, type CrossAgentDetection, type CrossAgentEvent, CrossAgentMonitor, type CrossAgentMonitorOptions, type CrossAgentSecurityEvent, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, type DelegateToAgentInput, type DelegationContext, type DetectCrossAgentPatternOptions, type DetectionDispositionStatus, EVAL_IDENTITY_ATTR, type EmitSequenceDetectionsOptions, type EvalIncidentQueryResult, type GovernanceMetadata, type HashPayloadOptions, type HoneyTokenToolDefinition, type HoneyTokenToolOptions, type ModelPricing, POLICY_DECISION_LABEL, type PolicyDecision, type PolicyMetadata, type PrivacyProfile, type PrivacyProfileInput, type PrivacyProfileName, type ProvisionAgentIdentityInput, type RecordActiveScopesInput, type RecordAgentHandoffMetadata, type RecordControllerInput, type RecordDetectionDispositionInput, type RecordEvalRunIdentityInput, type RecordHumanApprovalInput, type RecordInputProvenanceInput, type RecordMemoryAccessInput, type RecordPlanRiskAssessmentOptions, type RecordPlanStepInput, type RecordRenderOutputInput, type RevokeAgentIdentityInput, type RotateAgentIdentityInput, SEQUENCE_RULES, type SanitizationEvidence, type ScopedToolDefinition, type SequenceDetection, type SequenceEvent, type SequenceRule, type SequenceSecurityEvent, type SequenceSeverity, type SequenceSpanLike, type SigmaDocument, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, type TokenUsage, type ToolCallMetadata, type ToolStatus, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/agent/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-D3AP7rKi.js";
-import { a as TokenUsage, i as ModelPricing } from "../cost-BiGrdrt6.js";
-import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-C3Li4KJP.js";
+import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-nnJ4pvQy.js";
+import { i as ModelPricing, o as TokenUsage } from "../cost-BcW9kEgp.js";
+import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-D9NfzH7I.js";
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, type ActionRiskHints, type AgentActionFactory, type AgentActionMetadata, type AgentActionOptions, type AgentActionRiskClass, type AgentAiMetadata, type AgentAuditEventEnvelope, type AgentConsentEvidence, type AgentConsentOutcome, type AgentContext, type AgentDecisionMetadata, type AgentEventKind, type AgentHandler, type AgentIdentity, type AgentIdentityRecord, type AgentIdentityRegistry, type AgentIdentityStatus, type AgentInputProvenance, type AgentMemoryOperation, type AgentMetadataInput, type AgentOutcome, type AgentOutputFormat, type AgentPlanClassifier, type AgentPlanClassifierInput, type AgentPlanClassifierResult, type AgentPlanRiskVerdict, type AgentSecurityRecordOptions, type AgentSessionActionMetadata, type AgentSessionMetadata, type AgentSessionStatus, type AgentToolCallActionMetadata, type AgentToolCallOptions, type AiLifecycleStage, type CreateSignedEventEnvelopeOptions, type CrossAgentDetection, type CrossAgentEvent, CrossAgentMonitor, type CrossAgentMonitorOptions, type CrossAgentSecurityEvent, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, type DelegateToAgentInput, type DelegationContext, type DetectCrossAgentPatternOptions, type DetectionDispositionStatus, EVAL_IDENTITY_ATTR, type EmitSequenceDetectionsOptions, type EvalIncidentQueryResult, type GovernanceMetadata, type HashPayloadOptions, type HoneyTokenToolDefinition, type HoneyTokenToolOptions, type ModelPricing, POLICY_DECISION_LABEL, type PolicyDecision, type PolicyMetadata, type PrivacyProfile, type PrivacyProfileInput, type PrivacyProfileName, type ProvisionAgentIdentityInput, type RecordActiveScopesInput, type RecordAgentHandoffMetadata, type RecordControllerInput, type RecordDetectionDispositionInput, type RecordEvalRunIdentityInput, type RecordHumanApprovalInput, type RecordInputProvenanceInput, type RecordMemoryAccessInput, type RecordPlanRiskAssessmentOptions, type RecordPlanStepInput, type RecordRenderOutputInput, type RevokeAgentIdentityInput, type RotateAgentIdentityInput, SEQUENCE_RULES, type SanitizationEvidence, type ScopedToolDefinition, type SequenceDetection, type SequenceEvent, type SequenceRule, type SequenceSecurityEvent, type SequenceSeverity, type SequenceSpanLike, type SigmaDocument, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, type TokenUsage, type ToolCallMetadata, type ToolStatus, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/agent/index.js

@@ -1,4 +1,4 @@
-import { a as recordControllerId, c as recordMemoryAccess, d as tryRecordHumanApproval, i as recordActiveScopes, l as recordPlanStep, n as deriveActionRiskClass, o as recordHumanApproval, p as agentContextFromSpan, r as recordActionRiskClass, s as recordInputProvenance, t as AGENT_SECURITY_ATTR, u as recordRenderOutput } from "../agent-security-CoPcRMRZ.js";
-import { A as createSignedEventEnvelope, B as defineAgentToolCall, C as createHoneyTokenTool, D as crossAgentDetectionsToSecurityEvents, E as CrossAgentMonitor, F as createAgentIdentityRegistry, G as flattenAgentAttributes, H as recordPolicyDecision, I as withAgentSession, J as canonicalizeForHash, K as setAgentAttributes, L as delegateToAgent, M as resolvePrivacyProfile, N as sanitizeAuditPayload, O as detectCrossAgentPattern, P as sanitizeAuditPayloadWithEvidence, R as recordAgentHandoff, S as spansToCrossAgentEvents, T as recordEvalRunIdentity, U as withAgentAction, V as recordDecisionBasis, W as withAgentToolCall, X as AGENT_AUDIT_SCHEMA_VERSION, Y as hashPayload, _ as detectSequences, a as DETECTION_DISPOSITION_ATTR, b as spansToSequenceEvents, c as sequenceRuleToSigma, d as DETECTION_ATTR, f as DETECTION_EVENT, g as TOOL_NAME_LABEL, h as TOOL_CALL_ID_LABEL, i as runAgentPlanClassifier, j as verifyEventEnvelopeHash, k as withScopedTool, l as sequenceRulesToSigma, m as SEQUENCE_RULES, n as heuristicPlanRiskClassifier, o as DETECTION_DISPOSITION_EVENT, p as POLICY_DECISION_LABEL, q as createAgentAuditMetadata, r as recordPlanRiskAssessment, s as recordDetectionDisposition, t as AGENT_PLAN_RISK_ATTR, u as AGENT_OUTCOME_LABEL, v as emitSequenceDetections, w as EVAL_IDENTITY_ATTR, x as querySpansForEvalIncident, y as sequenceDetectionsToSecurityEvents, z as defineAgentAction } from "../agent-CbiBywpx.js";
+import { a as recordControllerId, c as recordMemoryAccess, d as tryRecordHumanApproval, i as recordActiveScopes, l as recordPlanStep, n as deriveActionRiskClass, o as recordHumanApproval, p as agentContextFromSpan, r as recordActionRiskClass, s as recordInputProvenance, t as AGENT_SECURITY_ATTR, u as recordRenderOutput } from "../agent-security-kh3WYZWN.js";
+import { A as createSignedEventEnvelope, B as defineAgentToolCall, C as createHoneyTokenTool, D as crossAgentDetectionsToSecurityEvents, E as CrossAgentMonitor, F as createAgentIdentityRegistry, G as flattenAgentAttributes, H as recordPolicyDecision, I as withAgentSession, J as canonicalizeForHash, K as setAgentAttributes, L as delegateToAgent, M as resolvePrivacyProfile, N as sanitizeAuditPayload, O as detectCrossAgentPattern, P as sanitizeAuditPayloadWithEvidence, R as recordAgentHandoff, S as spansToCrossAgentEvents, T as recordEvalRunIdentity, U as withAgentAction, V as recordDecisionBasis, W as withAgentToolCall, X as AGENT_AUDIT_SCHEMA_VERSION, Y as hashPayload, _ as detectSequences, a as DETECTION_DISPOSITION_ATTR, b as spansToSequenceEvents, c as sequenceRuleToSigma, d as DETECTION_ATTR, f as DETECTION_EVENT, g as TOOL_NAME_LABEL, h as TOOL_CALL_ID_LABEL, i as runAgentPlanClassifier, j as verifyEventEnvelopeHash, k as withScopedTool, l as sequenceRulesToSigma, m as SEQUENCE_RULES, n as heuristicPlanRiskClassifier, o as DETECTION_DISPOSITION_EVENT, p as POLICY_DECISION_LABEL, q as createAgentAuditMetadata, r as recordPlanRiskAssessment, s as recordDetectionDisposition, t as AGENT_PLAN_RISK_ATTR, u as AGENT_OUTCOME_LABEL, v as emitSequenceDetections, w as EVAL_IDENTITY_ATTR, x as querySpansForEvalIncident, y as sequenceDetectionsToSecurityEvents, z as defineAgentAction } from "../agent-BaaC6IUD.js";
 
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, CrossAgentMonitor, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, EVAL_IDENTITY_ATTR, POLICY_DECISION_LABEL, SEQUENCE_RULES, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/{agent-CbiBywpx.js → agent-BaaC6IUD.js}

@@ -1,8 +1,9 @@
+import { GEN_AI_OPERATION, genAiSpanName } from "./semconv.js";
 import { estimateLLMCost } from "./cost.js";
-import { i as genAiResponseAttributes, r as genAiRequestAttributes, s as genAiUsageAttributes } from "./attributes-CVOD1BG1.js";
+import { i as genAiResponseAttributes, r as genAiRequestAttributes, s as genAiUsageAttributes } from "./attributes-0Y1Tuidm.js";
 import { i as asString, n as asNumber, r as asRecord, t as asBoolean } from "./values-CLNajs9_.js";
-import { _ as warnMissingContextOnce, a as recordControllerId, c as recordMemoryAccess, d as tryRecordHumanApproval, f as MISSING_CONTEXT_MESSAGE, g as toAttributeValue, h as resolveContextSafe, i as recordActiveScopes, l as recordPlanStep, m as resolveContext, n as deriveActionRiskClass, o as recordHumanApproval, r as recordActionRiskClass, s as recordInputProvenance, t as AGENT_SECURITY_ATTR, u as recordRenderOutput } from "./agent-security-CoPcRMRZ.js";
-import { createNoopRequestLogger, createStructuredError, getRequestLoggerSafe } from "autotel";
+import { _ as warnMissingContextOnce, a as recordControllerId, c as recordMemoryAccess, d as tryRecordHumanApproval, f as MISSING_CONTEXT_MESSAGE, g as toAttributeValue, h as resolveContextSafe, i as recordActiveScopes, l as recordPlanStep, m as resolveContext, n as deriveActionRiskClass, o as recordHumanApproval, r as recordActionRiskClass, s as recordInputProvenance, t as AGENT_SECURITY_ATTR, u as recordRenderOutput } from "./agent-security-kh3WYZWN.js";
+import { createNoopRequestLogger, createStructuredError, getRequestLoggerSafe, trace } from "autotel";
 import { forceKeepAuditEvent, securityEvent, withAudit } from "autotel-audit";
 import { createHash } from "node:crypto";
 import { SECURITY_ATTR } from "autotel/security-schema";
@@ -62,11 +63,11 @@ function sanitizeTool(tool) {
 	if (!tool) return undefined;
 	return {
 		name: tool.name,
-		...tool.callId !== undefined && { callId: tool.callId },
-		...tool.inputHash !== undefined && { inputHash: tool.inputHash },
-		...tool.outputHash !== undefined && { outputHash: tool.outputHash },
+		...tool.callId !== undefined && { call_id: tool.callId },
+		...tool.inputHash !== undefined && { input_hash: tool.inputHash },
+		...tool.outputHash !== undefined && { output_hash: tool.outputHash },
 		...tool.status !== undefined && { status: tool.status },
-		...tool.executionMs !== undefined && { executionMs: tool.executionMs }
+		...tool.executionMs !== undefined && { execution_ms: tool.executionMs }
 	};
 }
 function sanitizeGovernance(governance) {
@@ -310,7 +311,8 @@ function recordAiTelemetry(ctx, ai, usage) {
 		const cost = estimateLLMCost(ai.model, usage, ai.pricing ? { pricing: ai.pricing } : undefined);
 		Object.assign(attrs, genAiUsageAttributes({
 			...usage,
-			costUsd: cost
+			costUsd: cost,
+			unpricedModel: cost === undefined ? ai.model : undefined
 		}));
 	}
 	ctx.setAttributes(attrs);
@@ -424,6 +426,10 @@ function defineAgentToolCall(metadata, factory, options = {}) {
 	};
 }
 async function withAgentToolCall(metadata, fn, options = {}) {
+	if (options.ctx) return runAgentToolCall(metadata, fn, options);
+	return trace.run(genAiSpanName(GEN_AI_OPERATION.EXECUTE_TOOL, metadata.tool.name), () => runAgentToolCall(metadata, fn, options));
+}
+async function runAgentToolCall(metadata, fn, options = {}) {
 	const start = Date.now();
 	const normalized = normalizeMetadata({
 		...metadata,
@@ -1337,7 +1343,7 @@ function correlationValue(event, prefix) {
 * up on an anchor as soon as one candidate is out of range, which is only sound
 * if everything after it is further out still.
 *
-* ponytail: restarts the walk at every event matching step 0, so worst case is
+* Restarts the walk at every event matching step 0, so worst case is
 * O(events² × steps). Sessions are tens to low hundreds of steps, and the
 * single-pass alternative is wrong: anchoring greedily on the first candidate
 * abandons a real chain whenever that candidate's window expires first.

package/dist/{agent-C13hoGHA.cjs → agent-DavvAWIG.cjs}

@@ -1,7 +1,8 @@
+const require_semconv = require('./semconv.cjs');
 const require_cost = require('./cost.cjs');
-const require_attributes = require('./attributes-BbHetlqB.cjs');
+const require_attributes = require('./attributes-D62j2B2U.cjs');
 const require_values = require('./values-m4hAgUuq.cjs');
-const require_agent_security = require('./agent-security-BiBsh8C2.cjs');
+const require_agent_security = require('./agent-security-CMVIlhbh.cjs');
 let autotel = require("autotel");
 let autotel_audit = require("autotel-audit");
 let node_crypto = require("node:crypto");
@@ -62,11 +63,11 @@ function sanitizeTool(tool) {
 	if (!tool) return undefined;
 	return {
 		name: tool.name,
-		...tool.callId !== undefined && { callId: tool.callId },
-		...tool.inputHash !== undefined && { inputHash: tool.inputHash },
-		...tool.outputHash !== undefined && { outputHash: tool.outputHash },
+		...tool.callId !== undefined && { call_id: tool.callId },
+		...tool.inputHash !== undefined && { input_hash: tool.inputHash },
+		...tool.outputHash !== undefined && { output_hash: tool.outputHash },
 		...tool.status !== undefined && { status: tool.status },
-		...tool.executionMs !== undefined && { executionMs: tool.executionMs }
+		...tool.executionMs !== undefined && { execution_ms: tool.executionMs }
 	};
 }
 function sanitizeGovernance(governance) {
@@ -310,7 +311,8 @@ function recordAiTelemetry(ctx, ai, usage) {
 		const cost = require_cost.estimateLLMCost(ai.model, usage, ai.pricing ? { pricing: ai.pricing } : undefined);
 		Object.assign(attrs, require_attributes.genAiUsageAttributes({
 			...usage,
-			costUsd: cost
+			costUsd: cost,
+			unpricedModel: cost === undefined ? ai.model : undefined
 		}));
 	}
 	ctx.setAttributes(attrs);
@@ -424,6 +426,10 @@ function defineAgentToolCall(metadata, factory, options = {}) {
 	};
 }
 async function withAgentToolCall(metadata, fn, options = {}) {
+	if (options.ctx) return runAgentToolCall(metadata, fn, options);
+	return autotel.trace.run(require_semconv.genAiSpanName(require_semconv.GEN_AI_OPERATION.EXECUTE_TOOL, metadata.tool.name), () => runAgentToolCall(metadata, fn, options));
+}
+async function runAgentToolCall(metadata, fn, options = {}) {
 	const start = Date.now();
 	const normalized = normalizeMetadata({
 		...metadata,
@@ -1337,7 +1343,7 @@ function correlationValue(event, prefix) {
 * up on an anchor as soon as one candidate is out of range, which is only sound
 * if everything after it is further out still.
 *
-* ponytail: restarts the walk at every event matching step 0, so worst case is
+* Restarts the walk at every event matching step 0, so worst case is
 * O(events² × steps). Sessions are tens to low hundreds of steps, and the
 * single-pass alternative is wrong: anchoring greedily on the first candidate
 * abandons a real chain whenever that candidate's window expires first.

package/dist/{agent-security-w2MvbC0P.d.cts → agent-security-BjM1QOTr.d.cts}

@@ -1,5 +1,5 @@
-import { a as TokenUsage, i as ModelPricing } from "./cost-BiGrdrt6.cjs";
-import { m as GenAiProviderName } from "./semconv-B8OQQKbC.cjs";
+import { i as ModelPricing, o as TokenUsage } from "./cost-BcW9kEgp.cjs";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.cjs";
 import { RequestLogger } from "autotel";
 import { OnMissingContext } from "autotel-audit";
 //#region src/agent/context.d.ts

package/dist/{agent-security-BiBsh8C2.cjs → agent-security-CMVIlhbh.cjs}

@@ -168,6 +168,9 @@ function recordHumanApproval(input) {
 	if (input.toolName) {
 		attrs["tool.name"] = input.toolName;
 	}
+	if (!input.approved) {
+		attrs["tool.status"] = "blocked";
+	}
 	if (input.controllerId) {
 		attrs[AGENT_SECURITY_ATTR.controllerId] = (0, autotel_audit.hashIdentifier)(input.controllerId, { salt: input.hashSalt });
 	}

package/dist/{agent-security-C3Li4KJP.d.ts → agent-security-D9NfzH7I.d.ts}

@@ -1,5 +1,5 @@
-import { a as TokenUsage, i as ModelPricing } from "./cost-BiGrdrt6.js";
-import { m as GenAiProviderName } from "./semconv-B8OQQKbC.js";
+import { i as ModelPricing, o as TokenUsage } from "./cost-BcW9kEgp.js";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.js";
 import { RequestLogger } from "autotel";
 import { OnMissingContext } from "autotel-audit";
 //#region src/agent/context.d.ts

package/dist/{agent-security-CoPcRMRZ.js → agent-security-kh3WYZWN.js}

@@ -168,6 +168,9 @@ function recordHumanApproval(input) {
 	if (input.toolName) {
 		attrs["tool.name"] = input.toolName;
 	}
+	if (!input.approved) {
+		attrs["tool.status"] = "blocked";
+	}
 	if (input.controllerId) {
 		attrs[AGENT_SECURITY_ATTR.controllerId] = hashIdentifier(input.controllerId, { salt: input.hashSalt });
 	}

package/dist/ai-sdk-bridge.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_semconv = require('./semconv.cjs');
 const require_cost = require('./cost.cjs');
-const require_attributes = require('./attributes-BbHetlqB.cjs');
+const require_attributes = require('./attributes-D62j2B2U.cjs');
 
 //#region src/ai-sdk-bridge.ts
 /** Legacy AI SDK (`LegacyOpenTelemetry`) attribute keys we understand. */

package/dist/ai-sdk-bridge.d.cts

@@ -1,6 +1,6 @@
-import { a as TokenUsage, t as EstimateCostOptions } from "./cost-BiGrdrt6.cjs";
-import { m as GenAiProviderName } from "./semconv-B8OQQKbC.cjs";
-import { n as GenAiAttributeMap } from "./attributes-BHxFjXSS.cjs";
+import { o as TokenUsage, t as EstimateCostOptions } from "./cost-BcW9kEgp.cjs";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.cjs";
+import { n as GenAiAttributeMap } from "./attributes-B8K6NxiM.cjs";
 import { TraceContext } from "autotel";
 import { Attributes } from "@opentelemetry/api";
 //#region src/ai-sdk-bridge.d.ts

package/dist/ai-sdk-bridge.d.ts

@@ -1,6 +1,6 @@
-import { a as TokenUsage, t as EstimateCostOptions } from "./cost-BiGrdrt6.js";
-import { m as GenAiProviderName } from "./semconv-B8OQQKbC.js";
-import { n as GenAiAttributeMap } from "./attributes-DyCFltYK.js";
+import { o as TokenUsage, t as EstimateCostOptions } from "./cost-BcW9kEgp.js";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.js";
+import { n as GenAiAttributeMap } from "./attributes-BNl903D-.js";
 import { Attributes } from "@opentelemetry/api";
 import { TraceContext } from "autotel";
 //#region src/ai-sdk-bridge.d.ts

package/dist/ai-sdk-bridge.js

@@ -1,6 +1,6 @@
 import { GEN_AI, GEN_AI_PROVIDER } from "./semconv.js";
 import { estimateLLMCost } from "./cost.js";
-import { s as genAiUsageAttributes } from "./attributes-CVOD1BG1.js";
+import { s as genAiUsageAttributes } from "./attributes-0Y1Tuidm.js";
 
 //#region src/ai-sdk-bridge.ts
 /** Legacy AI SDK (`LegacyOpenTelemetry`) attribute keys we understand. */

package/dist/{attributes-CVOD1BG1.js → attributes-0Y1Tuidm.js}

@@ -1,4 +1,5 @@
 import { GEN_AI } from "./semconv.js";
+import { evidenceAttribute } from "autotel/evidence";
 
 //#region src/attributes.ts
 /**
@@ -74,6 +75,9 @@ function genAiUsageAttributes(input) {
 	set(attrs, GEN_AI.USAGE_CACHE_READ_INPUT_TOKENS, input.cacheReadInputTokens);
 	set(attrs, GEN_AI.USAGE_CACHE_CREATION_INPUT_TOKENS, input.cacheCreationInputTokens);
 	set(attrs, GEN_AI.USAGE_COST_USD, input.costUsd);
+	set(attrs, GEN_AI.USAGE_COST_UNPRICED_MODEL, input.unpricedModel);
+	set(attrs, GEN_AI.USAGE_COST_UNPRICED_TOOLS, input.unpricedServerTools);
+	set(attrs, evidenceAttribute("tokens"), input.tokenSource);
 	set(attrs, GEN_AI.USAGE_COST, input.costUsd);
 	return built(attrs);
 }
@@ -123,6 +127,9 @@ function genAiWorkflowAttributes(input) {
 	const attrs = new Map();
 	set(attrs, GEN_AI.WORKFLOW_NAME, input.workflowName);
 	set(attrs, GEN_AI.PROMPT_NAME, input.promptName);
+	set(attrs, GEN_AI.PROMPT_VERSION, input.promptVersion);
+	set(attrs, GEN_AI.PROMPT_LABEL, input.promptLabel);
+	set(attrs, GEN_AI.PROMPT_HASH, input.promptHash);
 	return built(attrs);
 }
 

package/dist/{attributes-BHxFjXSS.d.cts → attributes-B8K6NxiM.d.cts}

@@ -1,4 +1,4 @@
-import { f as GenAiOperationName, g as GenAiToolType, m as GenAiProviderName, p as GenAiOutputType } from "./semconv-B8OQQKbC.cjs";
+import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv-m_Y-ve_N.cjs";
 //#region src/attributes.d.ts
 /**
  * OpenTelemetry span attribute value — primitives and homogeneous arrays.
@@ -51,6 +51,18 @@ interface GenAiUsageInput {
   cacheCreationInputTokens?: number;
   /** Estimated USD cost (autotel extension). */
   costUsd?: number;
+  /** Model id that has no pricing, set in place of a cost (autotel extension). */
+  unpricedModel?: string;
+  /**
+   * Server-side tools whose per-call charge is missing from `costUsd` because
+   * no price table covers them (autotel extension).
+   */
+  unpricedServerTools?: string[];
+  /**
+   * Where the token counts came from. Recorded as `autotel.evidence.tokens`, so
+   * a locally estimated count is never read as one the provider reported.
+   */
+  tokenSource?: 'observed' | 'estimated';
 }
 declare function genAiUsageAttributes(input: GenAiUsageInput): GenAiAttributeMap;
 /** Agent inputs. */
@@ -98,6 +110,12 @@ declare function genAiMemoryAttributes(input: GenAiMemoryInput): GenAiAttributeM
 interface GenAiWorkflowInput {
   workflowName?: string;
   promptName?: string;
+  /** Which version of the named prompt ran — number, or a registry's own id. */
+  promptVersion?: string | number;
+  /** The moving label the version was resolved through, e.g. `production`. */
+  promptLabel?: string;
+  /** Digest of the rendered template, where there is no registry to version it. */
+  promptHash?: string;
 }
 declare function genAiWorkflowAttributes(input: GenAiWorkflowInput): GenAiAttributeMap;
 //#endregion

package/dist/{attributes-DyCFltYK.d.ts → attributes-BNl903D-.d.ts}

@@ -1,4 +1,4 @@
-import { f as GenAiOperationName, g as GenAiToolType, m as GenAiProviderName, p as GenAiOutputType } from "./semconv-B8OQQKbC.js";
+import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv-m_Y-ve_N.js";
 //#region src/attributes.d.ts
 /**
  * OpenTelemetry span attribute value — primitives and homogeneous arrays.
@@ -51,6 +51,18 @@ interface GenAiUsageInput {
   cacheCreationInputTokens?: number;
   /** Estimated USD cost (autotel extension). */
   costUsd?: number;
+  /** Model id that has no pricing, set in place of a cost (autotel extension). */
+  unpricedModel?: string;
+  /**
+   * Server-side tools whose per-call charge is missing from `costUsd` because
+   * no price table covers them (autotel extension).
+   */
+  unpricedServerTools?: string[];
+  /**
+   * Where the token counts came from. Recorded as `autotel.evidence.tokens`, so
+   * a locally estimated count is never read as one the provider reported.
+   */
+  tokenSource?: 'observed' | 'estimated';
 }
 declare function genAiUsageAttributes(input: GenAiUsageInput): GenAiAttributeMap;
 /** Agent inputs. */
@@ -98,6 +110,12 @@ declare function genAiMemoryAttributes(input: GenAiMemoryInput): GenAiAttributeM
 interface GenAiWorkflowInput {
   workflowName?: string;
   promptName?: string;
+  /** Which version of the named prompt ran — number, or a registry's own id. */
+  promptVersion?: string | number;
+  /** The moving label the version was resolved through, e.g. `production`. */
+  promptLabel?: string;
+  /** Digest of the rendered template, where there is no registry to version it. */
+  promptHash?: string;
 }
 declare function genAiWorkflowAttributes(input: GenAiWorkflowInput): GenAiAttributeMap;
 //#endregion

package/dist/{attributes-BbHetlqB.cjs → attributes-D62j2B2U.cjs}

@@ -1,4 +1,5 @@
 const require_semconv = require('./semconv.cjs');
+let autotel_evidence = require("autotel/evidence");
 
 //#region src/attributes.ts
 /**
@@ -74,6 +75,9 @@ function genAiUsageAttributes(input) {
 	set(attrs, require_semconv.GEN_AI.USAGE_CACHE_READ_INPUT_TOKENS, input.cacheReadInputTokens);
 	set(attrs, require_semconv.GEN_AI.USAGE_CACHE_CREATION_INPUT_TOKENS, input.cacheCreationInputTokens);
 	set(attrs, require_semconv.GEN_AI.USAGE_COST_USD, input.costUsd);
+	set(attrs, require_semconv.GEN_AI.USAGE_COST_UNPRICED_MODEL, input.unpricedModel);
+	set(attrs, require_semconv.GEN_AI.USAGE_COST_UNPRICED_TOOLS, input.unpricedServerTools);
+	set(attrs, (0, autotel_evidence.evidenceAttribute)("tokens"), input.tokenSource);
 	set(attrs, require_semconv.GEN_AI.USAGE_COST, input.costUsd);
 	return built(attrs);
 }
@@ -123,6 +127,9 @@ function genAiWorkflowAttributes(input) {
 	const attrs = new Map();
 	set(attrs, require_semconv.GEN_AI.WORKFLOW_NAME, input.workflowName);
 	set(attrs, require_semconv.GEN_AI.PROMPT_NAME, input.promptName);
+	set(attrs, require_semconv.GEN_AI.PROMPT_VERSION, input.promptVersion);
+	set(attrs, require_semconv.GEN_AI.PROMPT_LABEL, input.promptLabel);
+	set(attrs, require_semconv.GEN_AI.PROMPT_HASH, input.promptHash);
 	return built(attrs);
 }