autotel-genai 0.8.0 → 0.9.0

package/README.md

@@ -68,7 +68,7 @@ export const chat = traceGenAI({
 | **Cost**            | `autotel-genai/cost`      | `estimateLLMCost`, `recordLLMCost`, `MODEL_PRICING` (cache-read/write aware)                                                                                                                          |
 | **Metrics**         | `autotel-genai/metrics`   | `genAiMetricViews()` re-buckets the canonical histograms                                                                                                                                              |
 | **Attributes**      | `autotel-genai`           | typed builders → canonical attribute maps                                                                                                                                                             |
-| **Events**          | `autotel-genai/events`    | opt-in content + `inference.operation.details` / `evaluation.result`                                                                                                                                  |
+| **Events**          | `autotel-genai/events`    | opt-in content (binary redacted, size-capped) + `inference.operation.details` / `evaluation.result`                                                                                                   |
 | **Trace**           | `autotel-genai/trace`     | `traceGenAI()`, `recordGenAiResponse/Usage`                                                                                                                                                           |
 | **Guard**           | `autotel-genai/guard`     | inline cost/token/loop kill-switch: `createGenAiBudget`, `createGenAiGuard`, `parseGuardRules`                                                                                                        |
 | **Streaming**       | `autotel-genai/streaming` | TTFC, throughput, inter-chunk distribution: `createStreamTimer`, `recordStreamTiming`                                                                                                                 |
@@ -88,6 +88,36 @@ recordLLMCost(ctx, 'claude-sonnet-4', {
 });
 ```
 
+**Server-side tools are money too.** Web search, code interpreter and file
+search are billed per call, outside the token counts. An agent that searches on
+every step can spend more there than on tokens, and a cost built from tokens
+alone will never show it:
+
+```ts
+recordLLMCost(ctx, 'claude-sonnet-4', {
+  inputTokens: 4000,
+  serverToolCalls: { web_search: 12 }, // SERVER_TOOL_PRICING_PER_1K
+});
+```
+
+A tool with no price is left out of the figure rather than guessed at zero, and
+named on the span as `gen_ai.usage.cost.unpriced_tools` so the gap is visible.
+
+**Cache accounting.** By default cache reads are treated as a subset of
+`inputTokens` (what OpenAI and Anthropic report directly) and cache writes as
+additive. Gateways and normalised usage objects do not all agree; where yours
+reports cache tokens separately, say so — getting it backwards subtracts a pool
+that was never in the input, understating exactly the calls that cost most:
+
+```ts
+recordLLMCost(ctx, model, { ...usage, cacheTokensExclusive: true });
+```
+
+**Where the numbers came from.** `tokenSource: 'observed' | 'estimated'` labels
+the counts as `autotel.evidence.tokens`. A locally counted token and a
+provider-reported one are the same number on a span; unlabelled, a guess reads
+as an invoice.
+
 ### Metrics
 
 ```ts
@@ -170,8 +200,8 @@ throughput, and an inter-chunk gap distribution `{min,p10,median,avg,p90,max}`).
 
 ### Content capture & warnings
 
-`setGenAiContent` now gates input/output independently and base64-encodes binary
-(image/audio/file) parts instead of letting `JSON.stringify` corrupt them:
+`setGenAiContent` gates input and output independently, replaces inline binary
+with a placeholder, and caps what is left:
 
 ```ts
 import { setGenAiContent, recordModelWarnings } from 'autotel-genai';
@@ -185,6 +215,46 @@ setGenAiContent(
 recordModelWarnings(ctx, result.warnings); // surface provider warnings vendors only log
 ```
 
+**Binary is redacted, not recorded.** A multimodal prompt carries its images,
+audio and PDFs inline as base64. Serialised verbatim, one such call is a
+megabyte-scale span attribute that collectors truncate mid-string and nobody
+reads. The bytes were never the interesting part, so they are replaced by a
+placeholder that says what stood there:
+
+```jsonc
+// gen_ai.input.messages
+[
+  {
+    "role": "user",
+    "parts": [
+      { "type": "text", "content": "what is in this photo?" },
+      { "type": "input_image", "data": "[base64 image/png redacted]" },
+    ],
+  },
+]
+```
+
+Recognition is contextual: a bare alphanumeric string must be 1KB before it is
+suspected, but under a key that means binary (`data`, `image_url`,
+`inline_data`) or beside a `mediaType` / `format` hint, 64 bytes is enough. An
+explicit `text/*` media type settles it the other way and nothing is touched.
+
+Whatever survives is capped at `DEFAULT_MAX_CONTENT_BYTES` (200KB) per
+attribute. Both are declared rather than silent — a cut attribute gains
+`<attribute>.original_size` and the span is labelled `autotel.evidence.input =
+'truncated'` (or `'redacted'`), so a reader can tell a short prompt from a
+prompt you only kept the front of.
+
+```ts
+setGenAiContent(ctx, content, {
+  redactBinary: false, // only when the payload itself is under investigation
+  maxContentBytes: 0, // 0 or less: no cap
+});
+```
+
+`redactBinaryContent()` and `truncateUtf8()` are exported for payloads that
+never reach a span — an event body, a log line, your own exporter.
+
 ### Agents & tools
 
 ```ts
@@ -457,6 +527,60 @@ synchronously, so they nest under the request span you already opened, reach
 every `init()` destination, pass through your `spanEnrichers` (including
 `langfuseCompatibility`), and get priced.
 
+### Prompt versions
+
+`gen_ai.prompt.name` alone cannot tell you which edit moved the numbers. Stamp
+the version too, and cost, latency and evaluation score become splittable by
+prompt change in whatever backend holds the spans:
+
+```ts
+traceGenAI({
+  provider: 'openai',
+  model: 'gpt-4o',
+  workflow: {
+    promptName: 'initial-router',
+    promptVersion: 7, // or your registry's own id
+    promptLabel: 'production',
+    promptHash: 'sha256:…', // when there is no registry to version it
+  },
+});
+```
+
+### Grouping traces into sessions
+
+A conversation is more than one trace. Two canonical attributes already carry
+that, and neither is GenAI-specific:
+
+- `gen_ai.conversation.id` — the thread this call belongs to.
+- `session.id` — the visit it happened in, set by autotel core's `setSession()`
+  or stamped on every browser span by `autotel-web`.
+
+Set them and total cost per session, traces per conversation, and
+session-level latency are ordinary queries. This is the same hierarchy vendor
+LLM-analytics products sell as `$ai_session_id`; here it is spec, so it works
+wherever the spans land.
+
+### Sending the same spans to PostHog
+
+PostHog ingests plain OTLP: `PostHogSpanProcessor` from `@posthog/ai/otel`
+forwards any span carrying `gen_ai.*` attributes and assembles its `$ai_*`
+event server-side. Because this package emits canonical names, no mapping layer
+is needed — add the processor and the spans you already have become LLM
+analytics:
+
+```ts
+import { NodeSDK } from '@opentelemetry/sdk-node';
+import { PostHogSpanProcessor } from '@posthog/ai/otel';
+
+const sdk = new NodeSDK({
+  spanProcessors: [new PostHogSpanProcessor({ projectToken: 'phc_…' })],
+});
+```
+
+`src/posthog-contract.test.ts` pins that agreement, so it cannot quietly stop
+being true. For the browser half — session, replay and person joined in both
+directions — see `autotel-posthog`.
+
 ## Semantic conventions
 
 Aligned to the `semantic-conventions-genai` snapshot. Span names follow the

package/dist/agent/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_agent_security = require('../agent-security-CMVIlhbh.cjs');
-const require_agent = require('../agent-BlO5Zmnl.cjs');
+const require_agent = require('../agent-DavvAWIG.cjs');
 
 exports.AGENT_AUDIT_SCHEMA_VERSION = require_agent.AGENT_AUDIT_SCHEMA_VERSION;
 exports.AGENT_OUTCOME_LABEL = require_agent.AGENT_OUTCOME_LABEL;

package/dist/agent/index.d.cts

@@ -1,4 +1,4 @@
-import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-ClhR1smo.cjs";
-import { a as TokenUsage, i as ModelPricing } from "../cost-BiGrdrt6.cjs";
-import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-D_m3bUtS.cjs";
+import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-C27Y-PcB.cjs";
+import { i as ModelPricing, o as TokenUsage } from "../cost-BcW9kEgp.cjs";
+import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-BjM1QOTr.cjs";
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, type ActionRiskHints, type AgentActionFactory, type AgentActionMetadata, type AgentActionOptions, type AgentActionRiskClass, type AgentAiMetadata, type AgentAuditEventEnvelope, type AgentConsentEvidence, type AgentConsentOutcome, type AgentContext, type AgentDecisionMetadata, type AgentEventKind, type AgentHandler, type AgentIdentity, type AgentIdentityRecord, type AgentIdentityRegistry, type AgentIdentityStatus, type AgentInputProvenance, type AgentMemoryOperation, type AgentMetadataInput, type AgentOutcome, type AgentOutputFormat, type AgentPlanClassifier, type AgentPlanClassifierInput, type AgentPlanClassifierResult, type AgentPlanRiskVerdict, type AgentSecurityRecordOptions, type AgentSessionActionMetadata, type AgentSessionMetadata, type AgentSessionStatus, type AgentToolCallActionMetadata, type AgentToolCallOptions, type AiLifecycleStage, type CreateSignedEventEnvelopeOptions, type CrossAgentDetection, type CrossAgentEvent, CrossAgentMonitor, type CrossAgentMonitorOptions, type CrossAgentSecurityEvent, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, type DelegateToAgentInput, type DelegationContext, type DetectCrossAgentPatternOptions, type DetectionDispositionStatus, EVAL_IDENTITY_ATTR, type EmitSequenceDetectionsOptions, type EvalIncidentQueryResult, type GovernanceMetadata, type HashPayloadOptions, type HoneyTokenToolDefinition, type HoneyTokenToolOptions, type ModelPricing, POLICY_DECISION_LABEL, type PolicyDecision, type PolicyMetadata, type PrivacyProfile, type PrivacyProfileInput, type PrivacyProfileName, type ProvisionAgentIdentityInput, type RecordActiveScopesInput, type RecordAgentHandoffMetadata, type RecordControllerInput, type RecordDetectionDispositionInput, type RecordEvalRunIdentityInput, type RecordHumanApprovalInput, type RecordInputProvenanceInput, type RecordMemoryAccessInput, type RecordPlanRiskAssessmentOptions, type RecordPlanStepInput, type RecordRenderOutputInput, type RevokeAgentIdentityInput, type RotateAgentIdentityInput, SEQUENCE_RULES, type SanitizationEvidence, type ScopedToolDefinition, type SequenceDetection, type SequenceEvent, type SequenceRule, type SequenceSecurityEvent, type SequenceSeverity, type SequenceSpanLike, type SigmaDocument, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, type TokenUsage, type ToolCallMetadata, type ToolStatus, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/agent/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-D_POIOI3.js";
-import { a as TokenUsage, i as ModelPricing } from "../cost-BiGrdrt6.js";
-import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-BFx9kEbA.js";
+import { $ as withScopedTool, A as TOOL_CALL_ID_LABEL, B as HoneyTokenToolOptions, C as SEQUENCE_RULES, Ct as hashPayload, D as SequenceSecurityEvent, E as SequenceRule, F as spansToSequenceEvents, G as CrossAgentMonitor, H as EVAL_IDENTITY_ATTR, I as EvalIncidentQueryResult, J as CrossAgentEvent, K as CrossAgentMonitorOptions, L as querySpansForEvalIncident, M as detectSequences, N as emitSequenceDetections, O as SequenceSeverity, P as sequenceDetectionsToSecurityEvents, Q as detectCrossAgentPattern, R as spansToCrossAgentEvents, S as POLICY_DECISION_LABEL, St as canonicalizeForHash, T as SequenceEvent, U as RecordEvalRunIdentityInput, V as createHoneyTokenTool, W as recordEvalRunIdentity, X as DetectCrossAgentPatternOptions, Y as CrossAgentSecurityEvent, Z as crossAgentDetectionsToSecurityEvents, _ as sequenceRulesToSigma, _t as recordAgentHandoff, a as AgentPlanRiskVerdict, at as RotateAgentIdentityInput, b as DETECTION_EVENT, bt as createAgentAuditMetadata, c as recordPlanRiskAssessment, ct as defineAgentAction, d as DETECTION_DISPOSITION_EVENT, dt as recordPolicyDecision, et as CreateSignedEventEnvelopeOptions, f as DetectionDispositionStatus, ft as withAgentAction, g as sequenceRuleToSigma, gt as delegateToAgent, h as SigmaDocument, ht as RecordAgentHandoffMetadata, i as AgentPlanClassifierResult, it as RevokeAgentIdentityInput, j as TOOL_NAME_LABEL, k as SequenceSpanLike, l as runAgentPlanClassifier, lt as defineAgentToolCall, m as recordDetectionDisposition, mt as DelegateToAgentInput, n as AgentPlanClassifier, nt as verifyEventEnvelopeHash, o as RecordPlanRiskAssessmentOptions, ot as createAgentIdentityRegistry, p as RecordDetectionDispositionInput, pt as withAgentToolCall, q as CrossAgentDetection, r as AgentPlanClassifierInput, rt as ProvisionAgentIdentityInput, s as heuristicPlanRiskClassifier, st as withAgentSession, t as AGENT_PLAN_RISK_ATTR, tt as createSignedEventEnvelope, u as DETECTION_DISPOSITION_ATTR, ut as recordDecisionBasis, v as AGENT_OUTCOME_LABEL, vt as flattenAgentAttributes, w as SequenceDetection, wt as AGENT_AUDIT_SCHEMA_VERSION, x as EmitSequenceDetectionsOptions, xt as HashPayloadOptions, y as DETECTION_ATTR, yt as setAgentAttributes, z as HoneyTokenToolDefinition } from "../index-nnJ4pvQy.js";
+import { i as ModelPricing, o as TokenUsage } from "../cost-BcW9kEgp.js";
+import { $ as PrivacyProfileName, A as AgentAiMetadata, B as AgentOutcome, C as recordMemoryAccess, D as AgentActionFactory, E as tryRecordHumanApproval, F as AgentIdentity, G as AgentToolCallOptions, H as AgentSessionMetadata, I as AgentIdentityRecord, K as AiLifecycleStage, L as AgentIdentityRegistry, M as AgentDecisionMetadata, N as AgentEventKind, O as AgentActionMetadata, P as AgentHandler, Q as PrivacyProfile, R as AgentIdentityStatus, S as recordInputProvenance, T as recordRenderOutput, U as AgentSessionStatus, V as AgentSessionActionMetadata, W as AgentToolCallActionMetadata, X as PolicyDecision, Y as GovernanceMetadata, Z as PolicyMetadata, _ as deriveActionRiskClass, a as AgentConsentOutcome, at as resolvePrivacyProfile, b as recordControllerId, c as AgentOutputFormat, ct as AgentContext, d as RecordControllerInput, et as ScopedToolDefinition, f as RecordHumanApprovalInput, g as RecordRenderOutputInput, h as RecordPlanStepInput, i as AgentConsentEvidence, it as SanitizationEvidence, j as AgentAuditEventEnvelope, k as AgentActionOptions, l as AgentSecurityRecordOptions, lt as agentContextFromSpan, m as RecordMemoryAccessInput, n as ActionRiskHints, nt as ToolStatus, o as AgentInputProvenance, ot as sanitizeAuditPayload, p as RecordInputProvenanceInput, q as DelegationContext, r as AgentActionRiskClass, rt as PrivacyProfileInput, s as AgentMemoryOperation, st as sanitizeAuditPayloadWithEvidence, t as AGENT_SECURITY_ATTR, tt as ToolCallMetadata, u as RecordActiveScopesInput, v as recordActionRiskClass, w as recordPlanStep, x as recordHumanApproval, y as recordActiveScopes, z as AgentMetadataInput } from "../agent-security-D9NfzH7I.js";
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, type ActionRiskHints, type AgentActionFactory, type AgentActionMetadata, type AgentActionOptions, type AgentActionRiskClass, type AgentAiMetadata, type AgentAuditEventEnvelope, type AgentConsentEvidence, type AgentConsentOutcome, type AgentContext, type AgentDecisionMetadata, type AgentEventKind, type AgentHandler, type AgentIdentity, type AgentIdentityRecord, type AgentIdentityRegistry, type AgentIdentityStatus, type AgentInputProvenance, type AgentMemoryOperation, type AgentMetadataInput, type AgentOutcome, type AgentOutputFormat, type AgentPlanClassifier, type AgentPlanClassifierInput, type AgentPlanClassifierResult, type AgentPlanRiskVerdict, type AgentSecurityRecordOptions, type AgentSessionActionMetadata, type AgentSessionMetadata, type AgentSessionStatus, type AgentToolCallActionMetadata, type AgentToolCallOptions, type AiLifecycleStage, type CreateSignedEventEnvelopeOptions, type CrossAgentDetection, type CrossAgentEvent, CrossAgentMonitor, type CrossAgentMonitorOptions, type CrossAgentSecurityEvent, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, type DelegateToAgentInput, type DelegationContext, type DetectCrossAgentPatternOptions, type DetectionDispositionStatus, EVAL_IDENTITY_ATTR, type EmitSequenceDetectionsOptions, type EvalIncidentQueryResult, type GovernanceMetadata, type HashPayloadOptions, type HoneyTokenToolDefinition, type HoneyTokenToolOptions, type ModelPricing, POLICY_DECISION_LABEL, type PolicyDecision, type PolicyMetadata, type PrivacyProfile, type PrivacyProfileInput, type PrivacyProfileName, type ProvisionAgentIdentityInput, type RecordActiveScopesInput, type RecordAgentHandoffMetadata, type RecordControllerInput, type RecordDetectionDispositionInput, type RecordEvalRunIdentityInput, type RecordHumanApprovalInput, type RecordInputProvenanceInput, type RecordMemoryAccessInput, type RecordPlanRiskAssessmentOptions, type RecordPlanStepInput, type RecordRenderOutputInput, type RevokeAgentIdentityInput, type RotateAgentIdentityInput, SEQUENCE_RULES, type SanitizationEvidence, type ScopedToolDefinition, type SequenceDetection, type SequenceEvent, type SequenceRule, type SequenceSecurityEvent, type SequenceSeverity, type SequenceSpanLike, type SigmaDocument, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, type TokenUsage, type ToolCallMetadata, type ToolStatus, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/agent/index.js

@@ -1,4 +1,4 @@
 import { a as recordControllerId, c as recordMemoryAccess, d as tryRecordHumanApproval, i as recordActiveScopes, l as recordPlanStep, n as deriveActionRiskClass, o as recordHumanApproval, p as agentContextFromSpan, r as recordActionRiskClass, s as recordInputProvenance, t as AGENT_SECURITY_ATTR, u as recordRenderOutput } from "../agent-security-kh3WYZWN.js";
-import { A as createSignedEventEnvelope, B as defineAgentToolCall, C as createHoneyTokenTool, D as crossAgentDetectionsToSecurityEvents, E as CrossAgentMonitor, F as createAgentIdentityRegistry, G as flattenAgentAttributes, H as recordPolicyDecision, I as withAgentSession, J as canonicalizeForHash, K as setAgentAttributes, L as delegateToAgent, M as resolvePrivacyProfile, N as sanitizeAuditPayload, O as detectCrossAgentPattern, P as sanitizeAuditPayloadWithEvidence, R as recordAgentHandoff, S as spansToCrossAgentEvents, T as recordEvalRunIdentity, U as withAgentAction, V as recordDecisionBasis, W as withAgentToolCall, X as AGENT_AUDIT_SCHEMA_VERSION, Y as hashPayload, _ as detectSequences, a as DETECTION_DISPOSITION_ATTR, b as spansToSequenceEvents, c as sequenceRuleToSigma, d as DETECTION_ATTR, f as DETECTION_EVENT, g as TOOL_NAME_LABEL, h as TOOL_CALL_ID_LABEL, i as runAgentPlanClassifier, j as verifyEventEnvelopeHash, k as withScopedTool, l as sequenceRulesToSigma, m as SEQUENCE_RULES, n as heuristicPlanRiskClassifier, o as DETECTION_DISPOSITION_EVENT, p as POLICY_DECISION_LABEL, q as createAgentAuditMetadata, r as recordPlanRiskAssessment, s as recordDetectionDisposition, t as AGENT_PLAN_RISK_ATTR, u as AGENT_OUTCOME_LABEL, v as emitSequenceDetections, w as EVAL_IDENTITY_ATTR, x as querySpansForEvalIncident, y as sequenceDetectionsToSecurityEvents, z as defineAgentAction } from "../agent-BtA_RKiI.js";
+import { A as createSignedEventEnvelope, B as defineAgentToolCall, C as createHoneyTokenTool, D as crossAgentDetectionsToSecurityEvents, E as CrossAgentMonitor, F as createAgentIdentityRegistry, G as flattenAgentAttributes, H as recordPolicyDecision, I as withAgentSession, J as canonicalizeForHash, K as setAgentAttributes, L as delegateToAgent, M as resolvePrivacyProfile, N as sanitizeAuditPayload, O as detectCrossAgentPattern, P as sanitizeAuditPayloadWithEvidence, R as recordAgentHandoff, S as spansToCrossAgentEvents, T as recordEvalRunIdentity, U as withAgentAction, V as recordDecisionBasis, W as withAgentToolCall, X as AGENT_AUDIT_SCHEMA_VERSION, Y as hashPayload, _ as detectSequences, a as DETECTION_DISPOSITION_ATTR, b as spansToSequenceEvents, c as sequenceRuleToSigma, d as DETECTION_ATTR, f as DETECTION_EVENT, g as TOOL_NAME_LABEL, h as TOOL_CALL_ID_LABEL, i as runAgentPlanClassifier, j as verifyEventEnvelopeHash, k as withScopedTool, l as sequenceRulesToSigma, m as SEQUENCE_RULES, n as heuristicPlanRiskClassifier, o as DETECTION_DISPOSITION_EVENT, p as POLICY_DECISION_LABEL, q as createAgentAuditMetadata, r as recordPlanRiskAssessment, s as recordDetectionDisposition, t as AGENT_PLAN_RISK_ATTR, u as AGENT_OUTCOME_LABEL, v as emitSequenceDetections, w as EVAL_IDENTITY_ATTR, x as querySpansForEvalIncident, y as sequenceDetectionsToSecurityEvents, z as defineAgentAction } from "../agent-BaaC6IUD.js";
 
 export { AGENT_AUDIT_SCHEMA_VERSION, AGENT_OUTCOME_LABEL, AGENT_PLAN_RISK_ATTR, AGENT_SECURITY_ATTR, CrossAgentMonitor, DETECTION_ATTR, DETECTION_DISPOSITION_ATTR, DETECTION_DISPOSITION_EVENT, DETECTION_EVENT, EVAL_IDENTITY_ATTR, POLICY_DECISION_LABEL, SEQUENCE_RULES, TOOL_CALL_ID_LABEL, TOOL_NAME_LABEL, agentContextFromSpan, canonicalizeForHash, createAgentAuditMetadata, createAgentIdentityRegistry, createHoneyTokenTool, createSignedEventEnvelope, crossAgentDetectionsToSecurityEvents, defineAgentAction, defineAgentToolCall, delegateToAgent, deriveActionRiskClass, detectCrossAgentPattern, detectSequences, emitSequenceDetections, flattenAgentAttributes, hashPayload, heuristicPlanRiskClassifier, querySpansForEvalIncident, recordActionRiskClass, recordActiveScopes, recordAgentHandoff, recordControllerId, recordDecisionBasis, recordDetectionDisposition, recordEvalRunIdentity, recordHumanApproval, recordInputProvenance, recordMemoryAccess, recordPlanRiskAssessment, recordPlanStep, recordPolicyDecision, recordRenderOutput, resolvePrivacyProfile, runAgentPlanClassifier, sanitizeAuditPayload, sanitizeAuditPayloadWithEvidence, sequenceDetectionsToSecurityEvents, sequenceRuleToSigma, sequenceRulesToSigma, setAgentAttributes, spansToCrossAgentEvents, spansToSequenceEvents, tryRecordHumanApproval, verifyEventEnvelopeHash, withAgentAction, withAgentSession, withAgentToolCall, withScopedTool };

package/dist/{agent-BtA_RKiI.js → agent-BaaC6IUD.js}

@@ -1,6 +1,6 @@
 import { GEN_AI_OPERATION, genAiSpanName } from "./semconv.js";
 import { estimateLLMCost } from "./cost.js";
-import { i as genAiResponseAttributes, r as genAiRequestAttributes, s as genAiUsageAttributes } from "./attributes-E6Q-xXtL.js";
+import { i as genAiResponseAttributes, r as genAiRequestAttributes, s as genAiUsageAttributes } from "./attributes-0Y1Tuidm.js";
 import { i as asString, n as asNumber, r as asRecord, t as asBoolean } from "./values-CLNajs9_.js";
 import { _ as warnMissingContextOnce, a as recordControllerId, c as recordMemoryAccess, d as tryRecordHumanApproval, f as MISSING_CONTEXT_MESSAGE, g as toAttributeValue, h as resolveContextSafe, i as recordActiveScopes, l as recordPlanStep, m as resolveContext, n as deriveActionRiskClass, o as recordHumanApproval, r as recordActionRiskClass, s as recordInputProvenance, t as AGENT_SECURITY_ATTR, u as recordRenderOutput } from "./agent-security-kh3WYZWN.js";
 import { createNoopRequestLogger, createStructuredError, getRequestLoggerSafe, trace } from "autotel";

package/dist/{agent-BlO5Zmnl.cjs → agent-DavvAWIG.cjs}

@@ -1,6 +1,6 @@
 const require_semconv = require('./semconv.cjs');
 const require_cost = require('./cost.cjs');
-const require_attributes = require('./attributes-C5CvvaLY.cjs');
+const require_attributes = require('./attributes-D62j2B2U.cjs');
 const require_values = require('./values-m4hAgUuq.cjs');
 const require_agent_security = require('./agent-security-CMVIlhbh.cjs');
 let autotel = require("autotel");

package/dist/{agent-security-D_m3bUtS.d.cts → agent-security-BjM1QOTr.d.cts}

@@ -1,5 +1,5 @@
-import { a as TokenUsage, i as ModelPricing } from "./cost-BiGrdrt6.cjs";
-import { m as GenAiProviderName } from "./semconv-Dyevkkza.cjs";
+import { i as ModelPricing, o as TokenUsage } from "./cost-BcW9kEgp.cjs";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.cjs";
 import { RequestLogger } from "autotel";
 import { OnMissingContext } from "autotel-audit";
 //#region src/agent/context.d.ts

package/dist/{agent-security-BFx9kEbA.d.ts → agent-security-D9NfzH7I.d.ts}

@@ -1,5 +1,5 @@
-import { a as TokenUsage, i as ModelPricing } from "./cost-BiGrdrt6.js";
-import { m as GenAiProviderName } from "./semconv-Dyevkkza.js";
+import { i as ModelPricing, o as TokenUsage } from "./cost-BcW9kEgp.js";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.js";
 import { RequestLogger } from "autotel";
 import { OnMissingContext } from "autotel-audit";
 //#region src/agent/context.d.ts

package/dist/ai-sdk-bridge.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_semconv = require('./semconv.cjs');
 const require_cost = require('./cost.cjs');
-const require_attributes = require('./attributes-C5CvvaLY.cjs');
+const require_attributes = require('./attributes-D62j2B2U.cjs');
 
 //#region src/ai-sdk-bridge.ts
 /** Legacy AI SDK (`LegacyOpenTelemetry`) attribute keys we understand. */

package/dist/ai-sdk-bridge.d.cts

@@ -1,6 +1,6 @@
-import { a as TokenUsage, t as EstimateCostOptions } from "./cost-BiGrdrt6.cjs";
-import { m as GenAiProviderName } from "./semconv-Dyevkkza.cjs";
-import { n as GenAiAttributeMap } from "./attributes-BvAXlXyS.cjs";
+import { o as TokenUsage, t as EstimateCostOptions } from "./cost-BcW9kEgp.cjs";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.cjs";
+import { n as GenAiAttributeMap } from "./attributes-B8K6NxiM.cjs";
 import { TraceContext } from "autotel";
 import { Attributes } from "@opentelemetry/api";
 //#region src/ai-sdk-bridge.d.ts

package/dist/ai-sdk-bridge.d.ts

@@ -1,6 +1,6 @@
-import { a as TokenUsage, t as EstimateCostOptions } from "./cost-BiGrdrt6.js";
-import { m as GenAiProviderName } from "./semconv-Dyevkkza.js";
-import { n as GenAiAttributeMap } from "./attributes-uoNIHNSt.js";
+import { o as TokenUsage, t as EstimateCostOptions } from "./cost-BcW9kEgp.js";
+import { h as GenAiProviderName } from "./semconv-m_Y-ve_N.js";
+import { n as GenAiAttributeMap } from "./attributes-BNl903D-.js";
 import { Attributes } from "@opentelemetry/api";
 import { TraceContext } from "autotel";
 //#region src/ai-sdk-bridge.d.ts

package/dist/ai-sdk-bridge.js

@@ -1,6 +1,6 @@
 import { GEN_AI, GEN_AI_PROVIDER } from "./semconv.js";
 import { estimateLLMCost } from "./cost.js";
-import { s as genAiUsageAttributes } from "./attributes-E6Q-xXtL.js";
+import { s as genAiUsageAttributes } from "./attributes-0Y1Tuidm.js";
 
 //#region src/ai-sdk-bridge.ts
 /** Legacy AI SDK (`LegacyOpenTelemetry`) attribute keys we understand. */

package/dist/{attributes-E6Q-xXtL.js → attributes-0Y1Tuidm.js}

@@ -1,4 +1,5 @@
 import { GEN_AI } from "./semconv.js";
+import { evidenceAttribute } from "autotel/evidence";
 
 //#region src/attributes.ts
 /**
@@ -75,6 +76,8 @@ function genAiUsageAttributes(input) {
 	set(attrs, GEN_AI.USAGE_CACHE_CREATION_INPUT_TOKENS, input.cacheCreationInputTokens);
 	set(attrs, GEN_AI.USAGE_COST_USD, input.costUsd);
 	set(attrs, GEN_AI.USAGE_COST_UNPRICED_MODEL, input.unpricedModel);
+	set(attrs, GEN_AI.USAGE_COST_UNPRICED_TOOLS, input.unpricedServerTools);
+	set(attrs, evidenceAttribute("tokens"), input.tokenSource);
 	set(attrs, GEN_AI.USAGE_COST, input.costUsd);
 	return built(attrs);
 }
@@ -124,6 +127,9 @@ function genAiWorkflowAttributes(input) {
 	const attrs = new Map();
 	set(attrs, GEN_AI.WORKFLOW_NAME, input.workflowName);
 	set(attrs, GEN_AI.PROMPT_NAME, input.promptName);
+	set(attrs, GEN_AI.PROMPT_VERSION, input.promptVersion);
+	set(attrs, GEN_AI.PROMPT_LABEL, input.promptLabel);
+	set(attrs, GEN_AI.PROMPT_HASH, input.promptHash);
 	return built(attrs);
 }
 

package/dist/{attributes-BvAXlXyS.d.cts → attributes-B8K6NxiM.d.cts}

@@ -1,4 +1,4 @@
-import { f as GenAiOperationName, g as GenAiToolType, m as GenAiProviderName, p as GenAiOutputType } from "./semconv-Dyevkkza.cjs";
+import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv-m_Y-ve_N.cjs";
 //#region src/attributes.d.ts
 /**
  * OpenTelemetry span attribute value — primitives and homogeneous arrays.
@@ -53,6 +53,16 @@ interface GenAiUsageInput {
   costUsd?: number;
   /** Model id that has no pricing, set in place of a cost (autotel extension). */
   unpricedModel?: string;
+  /**
+   * Server-side tools whose per-call charge is missing from `costUsd` because
+   * no price table covers them (autotel extension).
+   */
+  unpricedServerTools?: string[];
+  /**
+   * Where the token counts came from. Recorded as `autotel.evidence.tokens`, so
+   * a locally estimated count is never read as one the provider reported.
+   */
+  tokenSource?: 'observed' | 'estimated';
 }
 declare function genAiUsageAttributes(input: GenAiUsageInput): GenAiAttributeMap;
 /** Agent inputs. */
@@ -100,6 +110,12 @@ declare function genAiMemoryAttributes(input: GenAiMemoryInput): GenAiAttributeM
 interface GenAiWorkflowInput {
   workflowName?: string;
   promptName?: string;
+  /** Which version of the named prompt ran — number, or a registry's own id. */
+  promptVersion?: string | number;
+  /** The moving label the version was resolved through, e.g. `production`. */
+  promptLabel?: string;
+  /** Digest of the rendered template, where there is no registry to version it. */
+  promptHash?: string;
 }
 declare function genAiWorkflowAttributes(input: GenAiWorkflowInput): GenAiAttributeMap;
 //#endregion

package/dist/{attributes-uoNIHNSt.d.ts → attributes-BNl903D-.d.ts}

@@ -1,4 +1,4 @@
-import { f as GenAiOperationName, g as GenAiToolType, m as GenAiProviderName, p as GenAiOutputType } from "./semconv-Dyevkkza.js";
+import { _ as GenAiToolType, h as GenAiProviderName, m as GenAiOutputType, p as GenAiOperationName } from "./semconv-m_Y-ve_N.js";
 //#region src/attributes.d.ts
 /**
  * OpenTelemetry span attribute value — primitives and homogeneous arrays.
@@ -53,6 +53,16 @@ interface GenAiUsageInput {
   costUsd?: number;
   /** Model id that has no pricing, set in place of a cost (autotel extension). */
   unpricedModel?: string;
+  /**
+   * Server-side tools whose per-call charge is missing from `costUsd` because
+   * no price table covers them (autotel extension).
+   */
+  unpricedServerTools?: string[];
+  /**
+   * Where the token counts came from. Recorded as `autotel.evidence.tokens`, so
+   * a locally estimated count is never read as one the provider reported.
+   */
+  tokenSource?: 'observed' | 'estimated';
 }
 declare function genAiUsageAttributes(input: GenAiUsageInput): GenAiAttributeMap;
 /** Agent inputs. */
@@ -100,6 +110,12 @@ declare function genAiMemoryAttributes(input: GenAiMemoryInput): GenAiAttributeM
 interface GenAiWorkflowInput {
   workflowName?: string;
   promptName?: string;
+  /** Which version of the named prompt ran — number, or a registry's own id. */
+  promptVersion?: string | number;
+  /** The moving label the version was resolved through, e.g. `production`. */
+  promptLabel?: string;
+  /** Digest of the rendered template, where there is no registry to version it. */
+  promptHash?: string;
 }
 declare function genAiWorkflowAttributes(input: GenAiWorkflowInput): GenAiAttributeMap;
 //#endregion

package/dist/{attributes-C5CvvaLY.cjs → attributes-D62j2B2U.cjs}

@@ -1,4 +1,5 @@
 const require_semconv = require('./semconv.cjs');
+let autotel_evidence = require("autotel/evidence");
 
 //#region src/attributes.ts
 /**
@@ -75,6 +76,8 @@ function genAiUsageAttributes(input) {
 	set(attrs, require_semconv.GEN_AI.USAGE_CACHE_CREATION_INPUT_TOKENS, input.cacheCreationInputTokens);
 	set(attrs, require_semconv.GEN_AI.USAGE_COST_USD, input.costUsd);
 	set(attrs, require_semconv.GEN_AI.USAGE_COST_UNPRICED_MODEL, input.unpricedModel);
+	set(attrs, require_semconv.GEN_AI.USAGE_COST_UNPRICED_TOOLS, input.unpricedServerTools);
+	set(attrs, (0, autotel_evidence.evidenceAttribute)("tokens"), input.tokenSource);
 	set(attrs, require_semconv.GEN_AI.USAGE_COST, input.costUsd);
 	return built(attrs);
 }
@@ -124,6 +127,9 @@ function genAiWorkflowAttributes(input) {
 	const attrs = new Map();
 	set(attrs, require_semconv.GEN_AI.WORKFLOW_NAME, input.workflowName);
 	set(attrs, require_semconv.GEN_AI.PROMPT_NAME, input.promptName);
+	set(attrs, require_semconv.GEN_AI.PROMPT_VERSION, input.promptVersion);
+	set(attrs, require_semconv.GEN_AI.PROMPT_LABEL, input.promptLabel);
+	set(attrs, require_semconv.GEN_AI.PROMPT_HASH, input.promptHash);
 	return built(attrs);
 }
 

package/dist/{cost-BiGrdrt6.d.cts → cost-BcW9kEgp.d.cts}

@@ -20,7 +20,31 @@ interface ModelPricing {
    * input; most other providers do not bill cache writes separately.
    */
   cacheWritePer1M?: number;
+  /**
+   * USD per 1,000 calls to a server-side tool, keyed by tool name. Overrides
+   * {@link SERVER_TOOL_PRICING_PER_1K} for this model.
+   */
+  serverToolPer1K?: Record<string, number>;
 }
+/**
+ * USD per 1,000 calls for provider-hosted tools **that are billed per call**.
+ * Approximate public list prices at the time of writing and, like
+ * {@link MODEL_PRICING}, a convenience default rather than a billing source of
+ * truth.
+ *
+ * An agent that searches the web on every step can spend more here than on
+ * tokens, and a cost built from token counts alone will never show it.
+ *
+ * The unit is the entry requirement. A tool billed by container session
+ * (OpenAI's code interpreter), by execution time (Anthropic's), or bundled free
+ * alongside another tool has no per-call price, and inventing one is worse than
+ * having none: 100 calls inside a single session priced per call overstates the
+ * bill by two orders of magnitude, and a confident wrong number is harder to
+ * catch than a missing one. Such tools stay out of this table and surface
+ * through {@link unpricedServerTools} instead — a caller who knows their own
+ * contract can still price one via `ModelPricing.serverToolPer1K`.
+ */
+declare const SERVER_TOOL_PRICING_PER_1K: Record<string, number>;
 /**
  * Token counts for a single GenAI call. Field names mirror the canonical
  * `gen_ai.usage.*` attributes.
@@ -42,6 +66,29 @@ interface TokenUsage {
   cacheReadInputTokens?: number;
   /** `gen_ai.usage.cache_creation.input_tokens` — billed in addition. */
   cacheCreationInputTokens?: number;
+  /**
+   * Whether the provider reports cache tokens *in addition to* `inputTokens`
+   * rather than as a subset of it. Defaults to `false` (subset), which is what
+   * OpenAI and Anthropic do directly.
+   *
+   * Gateways and normalised usage objects — Bedrock, the Vercel AI SDK — do not
+   * all agree, and getting it backwards subtracts a pool that was never in the
+   * input, understating the bill on exactly the calls that cost the most.
+   */
+  cacheTokensExclusive?: boolean;
+  /**
+   * Calls to provider-hosted tools, keyed by tool name — `web_search`,
+   * `code_interpreter`, `file_search`. Billed per call, priced from
+   * {@link SERVER_TOOL_PRICING_PER_1K}.
+   */
+  serverToolCalls?: Record<string, number>;
+  /**
+   * Where the token counts came from: `observed` when the provider reported
+   * them, `estimated` when they were counted or guessed locally. Recorded as
+   * `autotel.evidence.tokens`, because an estimated count and a reported one
+   * look identical once they are both just numbers on a span.
+   */
+  tokenSource?: 'observed' | 'estimated';
 }
 interface EstimateCostOptions {
   /** Override or extend {@link MODEL_PRICING}. Keys are matched first. */
@@ -55,6 +102,13 @@ interface EstimateCostOptions {
  * (`claude-sonnet-4-6-20251101`) resolve to a base entry (`claude-sonnet-4-6`).
  */
 declare const MODEL_PRICING: Record<string, ModelPricing>;
+/**
+ * Server-side tools in `usage` that no price table covers, so their charge is
+ * absent from {@link estimateLLMCost}'s figure. Empty when everything priced —
+ * including when the model itself has no pricing, since then there is no cost
+ * to be incomplete.
+ */
+declare function unpricedServerTools(model: string, usage: TokenUsage, options?: EstimateCostOptions): string[];
 /**
  * Estimate the USD cost of a GenAI call. Returns `undefined` when the model has
  * no known pricing (supply one via `options.pricing`).
@@ -75,4 +129,4 @@ declare function estimateLLMCost(model: string, usage: TokenUsage, options?: Est
  */
 declare function recordLLMCost(ctx: Pick<TraceContext, 'setAttribute'>, model: string, usage: TokenUsage, options?: EstimateCostOptions): number | undefined;
 //#endregion
-export { TokenUsage as a, ModelPricing as i, GEN_AI_COST_ATTRIBUTE as n, estimateLLMCost as o, MODEL_PRICING as r, recordLLMCost as s, EstimateCostOptions as t };
+export { SERVER_TOOL_PRICING_PER_1K as a, recordLLMCost as c, ModelPricing as i, unpricedServerTools as l, GEN_AI_COST_ATTRIBUTE as n, TokenUsage as o, MODEL_PRICING as r, estimateLLMCost as s, EstimateCostOptions as t };

package/dist/{cost-BiGrdrt6.d.ts → cost-BcW9kEgp.d.ts}

@@ -20,7 +20,31 @@ interface ModelPricing {
    * input; most other providers do not bill cache writes separately.
    */
   cacheWritePer1M?: number;
+  /**
+   * USD per 1,000 calls to a server-side tool, keyed by tool name. Overrides
+   * {@link SERVER_TOOL_PRICING_PER_1K} for this model.
+   */
+  serverToolPer1K?: Record<string, number>;
 }
+/**
+ * USD per 1,000 calls for provider-hosted tools **that are billed per call**.
+ * Approximate public list prices at the time of writing and, like
+ * {@link MODEL_PRICING}, a convenience default rather than a billing source of
+ * truth.
+ *
+ * An agent that searches the web on every step can spend more here than on
+ * tokens, and a cost built from token counts alone will never show it.
+ *
+ * The unit is the entry requirement. A tool billed by container session
+ * (OpenAI's code interpreter), by execution time (Anthropic's), or bundled free
+ * alongside another tool has no per-call price, and inventing one is worse than
+ * having none: 100 calls inside a single session priced per call overstates the
+ * bill by two orders of magnitude, and a confident wrong number is harder to
+ * catch than a missing one. Such tools stay out of this table and surface
+ * through {@link unpricedServerTools} instead — a caller who knows their own
+ * contract can still price one via `ModelPricing.serverToolPer1K`.
+ */
+declare const SERVER_TOOL_PRICING_PER_1K: Record<string, number>;
 /**
  * Token counts for a single GenAI call. Field names mirror the canonical
  * `gen_ai.usage.*` attributes.
@@ -42,6 +66,29 @@ interface TokenUsage {
   cacheReadInputTokens?: number;
   /** `gen_ai.usage.cache_creation.input_tokens` — billed in addition. */
   cacheCreationInputTokens?: number;
+  /**
+   * Whether the provider reports cache tokens *in addition to* `inputTokens`
+   * rather than as a subset of it. Defaults to `false` (subset), which is what
+   * OpenAI and Anthropic do directly.
+   *
+   * Gateways and normalised usage objects — Bedrock, the Vercel AI SDK — do not
+   * all agree, and getting it backwards subtracts a pool that was never in the
+   * input, understating the bill on exactly the calls that cost the most.
+   */
+  cacheTokensExclusive?: boolean;
+  /**
+   * Calls to provider-hosted tools, keyed by tool name — `web_search`,
+   * `code_interpreter`, `file_search`. Billed per call, priced from
+   * {@link SERVER_TOOL_PRICING_PER_1K}.
+   */
+  serverToolCalls?: Record<string, number>;
+  /**
+   * Where the token counts came from: `observed` when the provider reported
+   * them, `estimated` when they were counted or guessed locally. Recorded as
+   * `autotel.evidence.tokens`, because an estimated count and a reported one
+   * look identical once they are both just numbers on a span.
+   */
+  tokenSource?: 'observed' | 'estimated';
 }
 interface EstimateCostOptions {
   /** Override or extend {@link MODEL_PRICING}. Keys are matched first. */
@@ -55,6 +102,13 @@ interface EstimateCostOptions {
  * (`claude-sonnet-4-6-20251101`) resolve to a base entry (`claude-sonnet-4-6`).
  */
 declare const MODEL_PRICING: Record<string, ModelPricing>;
+/**
+ * Server-side tools in `usage` that no price table covers, so their charge is
+ * absent from {@link estimateLLMCost}'s figure. Empty when everything priced —
+ * including when the model itself has no pricing, since then there is no cost
+ * to be incomplete.
+ */
+declare function unpricedServerTools(model: string, usage: TokenUsage, options?: EstimateCostOptions): string[];
 /**
  * Estimate the USD cost of a GenAI call. Returns `undefined` when the model has
  * no known pricing (supply one via `options.pricing`).
@@ -75,4 +129,4 @@ declare function estimateLLMCost(model: string, usage: TokenUsage, options?: Est
  */
 declare function recordLLMCost(ctx: Pick<TraceContext, 'setAttribute'>, model: string, usage: TokenUsage, options?: EstimateCostOptions): number | undefined;
 //#endregion
-export { TokenUsage as a, ModelPricing as i, GEN_AI_COST_ATTRIBUTE as n, estimateLLMCost as o, MODEL_PRICING as r, recordLLMCost as s, EstimateCostOptions as t };
+export { SERVER_TOOL_PRICING_PER_1K as a, recordLLMCost as c, ModelPricing as i, unpricedServerTools as l, GEN_AI_COST_ATTRIBUTE as n, TokenUsage as o, MODEL_PRICING as r, estimateLLMCost as s, EstimateCostOptions as t };