dd-trace 5.67.0 → 5.69.0

package/packages/datadog-plugin-cypress/src/cypress-plugin.js

@@ -389,7 +389,6 @@ class CypressPlugin {
 
   getTestSpan ({ testName, testSuite, isUnskippable, isForcedToRun, testSourceFile, isDisabled, isQuarantined }) {
     const testSuiteTags = {
-      [TEST_COMMAND]: this.command,
       [TEST_COMMAND]: this.command,
       [TEST_MODULE]: TEST_FRAMEWORK_NAME
     }
@@ -482,8 +481,12 @@ class CypressPlugin {
         this.isEarlyFlakeDetectionEnabled = false
         this.isKnownTestsEnabled = false
       } else {
-        // We use TEST_FRAMEWORK_NAME for the name of the module
-        this.knownTestsByTestSuite = knownTestsResponse.knownTests[TEST_FRAMEWORK_NAME]
+        if (knownTestsResponse.knownTests[TEST_FRAMEWORK_NAME]) {
+          this.knownTestsByTestSuite = knownTestsResponse.knownTests[TEST_FRAMEWORK_NAME]
+        } else {
+          this.isEarlyFlakeDetectionEnabled = false
+          this.isKnownTestsEnabled = false
+        }
       }
     }
 

package/packages/datadog-plugin-cypress/src/support.js

@@ -26,6 +26,10 @@ function safeGetRum (window) {
 }
 
 function isNewTest (test) {
+  // If for whatever reason the worker does not receive valid known tests, we don't consider it as new
+  if (!Array.isArray(knownTestsForSuite)) {
+    return false
+  }
   return !knownTestsForSuite.includes(test.fullTitle())
 }
 

package/packages/datadog-plugin-express/src/code_origin.js

@@ -15,7 +15,7 @@ class ExpressCodeOriginForSpansPlugin extends Plugin {
     this.addSub('apm:express:middleware:enter', ({ req, layer }) => {
       const tags = layerTags.get(layer)
       if (!tags) return
-      web.getContext(req).span?.addTags(tags)
+      web.getContext(req)?.span?.addTags(tags)
     })
 
     this.addSub('apm:express:route:added', ({ topOfStackFunc, layer }) => {
@@ -26,7 +26,7 @@ class ExpressCodeOriginForSpansPlugin extends Plugin {
     this.addSub('apm:router:middleware:enter', ({ req, layer }) => {
       const tags = layerTags.get(layer)
       if (!tags) return
-      web.getContext(req).span?.addTags(tags)
+      web.getContext(req)?.span?.addTags(tags)
     })
 
     this.addSub('apm:router:route:added', ({ topOfStackFunc, layer }) => {

package/packages/datadog-plugin-fastify/src/code_origin.js

@@ -15,8 +15,7 @@ class FastifyCodeOriginForSpansPlugin extends Plugin {
     this.addSub('apm:fastify:request:handle', ({ req, routeConfig }) => {
       const tags = routeConfig?.[kCodeOriginForSpansTagsSym]
       if (!tags) return
-      const context = web.getContext(req)
-      context.span?.addTags(tags)
+      web.getContext(req)?.span?.addTags(tags)
     })
 
     this.addSub('apm:fastify:route:added', ({ routeOptions, onRoute }) => {

package/packages/datadog-plugin-jest/src/index.js

@@ -261,21 +261,6 @@ class JestPlugin extends CiPlugin {
       }
     })
 
-    this.addSub('ci:jest:worker-report:trace', traces => {
-      const formattedTraces = JSON.parse(traces).map(trace =>
-        trace.map(span => ({
-          ...span,
-          span_id: id(span.span_id),
-          trace_id: id(span.trace_id),
-          parent_id: id(span.parent_id)
-        }))
-      )
-
-      formattedTraces.forEach(trace => {
-        this.tracer._exporter.export(trace)
-      })
-    })
-
     this.addSub('ci:jest:worker-report:coverage', data => {
       const formattedCoverages = JSON.parse(data).map(coverage => ({
         sessionId: id(coverage.sessionId),
@@ -287,12 +272,6 @@ class JestPlugin extends CiPlugin {
       })
     })
 
-    this.addSub('ci:jest:worker-report:logs', (logsPayloads) => {
-      JSON.parse(logsPayloads).forEach(({ testConfiguration, logMessage }) => {
-        this.tracer._exporter.exportDiLogs(testConfiguration, logMessage)
-      })
-    })
-
     this.addSub('ci:jest:test-suite:finish', ({ status, errorMessage, error }) => {
       this.testSuiteSpan.setTag(TEST_STATUS, status)
       if (error) {

package/packages/datadog-plugin-mocha/src/index.js

@@ -22,12 +22,6 @@ const {
   TEST_IS_RETRY,
   TEST_EARLY_FLAKE_ENABLED,
   TEST_EARLY_FLAKE_ABORT_REASON,
-  TEST_SESSION_ID,
-  TEST_MODULE_ID,
-  TEST_MODULE,
-  TEST_SUITE_ID,
-  TEST_COMMAND,
-  TEST_SUITE,
   MOCHA_IS_PARALLEL,
   TEST_IS_RUM_ACTIVE,
   TEST_BROWSER_DRIVER,
@@ -54,32 +48,15 @@ const {
   TELEMETRY_CODE_COVERAGE_NUM_FILES,
   TELEMETRY_TEST_SESSION
 } = require('../../dd-trace/src/ci-visibility/telemetry')
-const id = require('../../dd-trace/src/id')
-const log = require('../../dd-trace/src/log')
 
 const BREAKPOINT_SET_GRACE_PERIOD_MS = 200
 
-function getTestSuiteLevelVisibilityTags (testSuiteSpan) {
-  const testSuiteSpanContext = testSuiteSpan.context()
-  const suiteTags = {
-    [TEST_SUITE_ID]: testSuiteSpanContext.toSpanId(),
-    [TEST_SESSION_ID]: testSuiteSpanContext.toTraceId(),
-    [TEST_COMMAND]: testSuiteSpanContext._tags[TEST_COMMAND],
-    [TEST_MODULE]: 'mocha'
-  }
-  if (testSuiteSpanContext._parentId) {
-    suiteTags[TEST_MODULE_ID] = testSuiteSpanContext._parentId.toString(10)
-  }
-  return suiteTags
-}
-
 class MochaPlugin extends CiPlugin {
   static id = 'mocha'
 
   constructor (...args) {
     super(...args)
 
-    this._testSuites = new Map()
     this._testTitleToParams = {}
     this.sourceRoot = process.cwd()
 
@@ -88,7 +65,7 @@ class MochaPlugin extends CiPlugin {
         return
       }
       const testSuite = getTestSuitePath(suiteFile, this.sourceRoot)
-      const testSuiteSpan = this._testSuites.get(testSuite)
+      const testSuiteSpan = this._testSuiteSpansByTestSuite.get(testSuite)
 
       if (!coverageFiles.length) {
         this.telemetry.count(TELEMETRY_CODE_COVERAGE_EMPTY)
@@ -163,7 +140,7 @@ class MochaPlugin extends CiPlugin {
       const store = storage('legacy').getStore()
       ctx.parentStore = store
       ctx.currentStore = { ...store, testSuiteSpan }
-      this._testSuites.set(testSuite, testSuiteSpan)
+      this._testSuiteSpansByTestSuite.set(testSuite, testSuiteSpan)
     })
 
     this.addSub('ci:mocha:test-suite:finish', ({ testSuiteSpan, status }) => {
@@ -436,37 +413,6 @@ class MochaPlugin extends CiPlugin {
       this.tracer._exporter.flush()
     })
 
-    this.addSub('ci:mocha:worker-report:trace', (traces) => {
-      const formattedTraces = JSON.parse(traces).map(trace =>
-        trace.map(span => {
-          const formattedSpan = {
-            ...span,
-            span_id: id(span.span_id),
-            trace_id: id(span.trace_id),
-            parent_id: id(span.parent_id)
-          }
-          if (formattedSpan.name === 'mocha.test') {
-            const testSuite = span.meta[TEST_SUITE]
-            const testSuiteSpan = this._testSuites.get(testSuite)
-            if (!testSuiteSpan) {
-              log.warn('Test suite span not found for test span with test suite', testSuite)
-              return formattedSpan
-            }
-            const suiteTags = getTestSuiteLevelVisibilityTags(testSuiteSpan)
-            formattedSpan.meta = {
-              ...formattedSpan.meta,
-              ...suiteTags
-            }
-          }
-          return formattedSpan
-        })
-      )
-
-      formattedTraces.forEach(trace => {
-        this.tracer._exporter.export(trace)
-      })
-    })
-
     this.addBind('ci:mocha:global:run', (ctx) => {
       return ctx.currentStore
     })
@@ -522,7 +468,7 @@ class MochaPlugin extends CiPlugin {
     }
 
     const testSuite = getTestSuitePath(testSuiteAbsolutePath, this.sourceRoot)
-    const testSuiteSpan = this._testSuites.get(testSuite)
+    const testSuiteSpan = this._testSuiteSpansByTestSuite.get(testSuite)
 
     extraTags[TEST_SOURCE_FILE] = this.repositoryRoot !== this.sourceRoot && !!this.repositoryRoot
       ? getTestSuitePath(testSuiteAbsolutePath, this.repositoryRoot)

package/packages/datadog-plugin-mongodb-core/src/index.js

@@ -2,7 +2,6 @@
 
 const { isTrue } = require('../../dd-trace/src/util')
 const DatabasePlugin = require('../../dd-trace/src/plugins/database')
-const coalesce = require('koalas')
 const { getEnvironmentVariable } = require('../../dd-trace/src/config-helper')
 
 class MongodbCorePlugin extends DatabasePlugin {
@@ -10,23 +9,26 @@ class MongodbCorePlugin extends DatabasePlugin {
   static component = 'mongodb'
   // avoid using db.name for peer.service since it includes the collection name
   // should be removed if one day this will be fixed
+  /**
+   * @override
+   */
   static peerServicePrecursors = []
 
+  /**
+   * @override
+   */
   configure (config) {
     super.configure(config)
 
     const heartbeatFromEnv = getEnvironmentVariable('DD_TRACE_MONGODB_HEARTBEAT_ENABLED')
 
-    this.config.heartbeatEnabled = coalesce(
-      config.heartbeatEnabled,
-      heartbeatFromEnv && isTrue(heartbeatFromEnv),
+    this.config.heartbeatEnabled = config.heartbeatEnabled ??
+      (heartbeatFromEnv && isTrue(heartbeatFromEnv)) ??
       true
-    )
   }
 
   bindStart (ctx) {
     const { ns, ops, options = {}, name } = ctx
-
     // heartbeat commands can be disabled if this.config.heartbeatEnabled is false
     if (!this.config.heartbeatEnabled && isHeartbeat(ops, this.config)) {
       return
@@ -55,11 +57,18 @@ class MongodbCorePlugin extends DatabasePlugin {
     return ctx.currentStore
   }
 
+  /**
+   * @override
+   */
   getPeerService (tags) {
-    const ns = tags['db.name']
+    let ns = tags['db.name']
     if (ns && tags['peer.service'] === undefined) {
+      const dotIndex = ns.indexOf('.')
+      if (dotIndex !== -1) {
+        ns = ns.slice(0, dotIndex)
+      }
       // the mongo ns is either dbName either dbName.collection. So we keep the first part
-      tags['peer.service'] = ns.split('.', 1)[0]
+      tags['peer.service'] = ns
     }
     return super.getPeerService(tags)
   }
@@ -90,21 +99,38 @@ function sanitizeBigInt (data) {
   return JSON.stringify(data, (_key, value) => typeof value === 'bigint' ? value.toString() : value)
 }
 
+function extractQuery (statements) {
+  if (statements.length === 1 && statements[0].q) return statements[0].q
+
+  const extractedQueries = []
+  for (let i = 0; i < statements.length; i++) {
+    if (statements[i].q) {
+      extractedQueries.push(limitDepth(statements[i].q))
+    }
+  }
+
+  return extractedQueries
+}
+
 function getQuery (cmd) {
-  if (!cmd || typeof cmd !== 'object' || Array.isArray(cmd)) return
+  if (!cmd || (typeof cmd !== 'object' && !Array.isArray(cmd))) return
+
+  if (Array.isArray(cmd)) return sanitizeBigInt(extractQuery(cmd))
   if (cmd.query) return sanitizeBigInt(limitDepth(cmd.query))
   if (cmd.filter) return sanitizeBigInt(limitDepth(cmd.filter))
   if (cmd.pipeline) return sanitizeBigInt(limitDepth(cmd.pipeline))
+  if (cmd.deletes) return sanitizeBigInt(extractQuery(cmd.deletes))
+  if (cmd.updates) return sanitizeBigInt(extractQuery(cmd.updates))
 }
 
 function getResource (plugin, ns, query, operationName) {
-  const parts = [operationName, ns]
+  let resource = `${operationName} ${ns}`
 
   if (plugin.config.queryInResourceName && query) {
-    parts.push(query)
+    resource += ` ${query}`
   }
 
-  return parts.join(' ')
+  return resource
 }
 
 function truncate (input) {

package/packages/datadog-plugin-playwright/src/index.js

@@ -17,6 +17,7 @@ const {
   TEST_IS_NEW,
   TEST_IS_RETRY,
   TEST_EARLY_FLAKE_ENABLED,
+  TEST_EARLY_FLAKE_ABORT_REASON,
   TELEMETRY_TEST_SESSION,
   TEST_RETRY_REASON,
   TEST_MANAGEMENT_IS_QUARANTINED,
@@ -53,7 +54,7 @@ class PlaywrightPlugin extends CiPlugin {
   constructor (...args) {
     super(...args)
 
-    this._testSuites = new Map()
+    this._testSuiteSpansByTestSuiteAbsolutePath = new Map()
     this.numFailedTests = 0
     this.numFailedSuites = 0
 
@@ -70,6 +71,7 @@ class PlaywrightPlugin extends CiPlugin {
     this.addSub('ci:playwright:session:finish', ({
       status,
       isEarlyFlakeDetectionEnabled,
+      isEarlyFlakeDetectionFaulty,
       isTestManagementTestsEnabled,
       onDone
     }) => {
@@ -79,7 +81,9 @@ class PlaywrightPlugin extends CiPlugin {
       if (isEarlyFlakeDetectionEnabled) {
         this.testSessionSpan.setTag(TEST_EARLY_FLAKE_ENABLED, 'true')
       }
-
+      if (isEarlyFlakeDetectionFaulty) {
+        this.testSessionSpan.setTag(TEST_EARLY_FLAKE_ABORT_REASON, 'faulty')
+      }
       if (this.numFailedSuites > 0) {
         let errorMessage = `Test suites failed: ${this.numFailedSuites}.`
         if (this.numFailedTests > 0) {
@@ -142,7 +146,7 @@ class PlaywrightPlugin extends CiPlugin {
       ctx.parentStore = store
       ctx.currentStore = { ...store, testSuiteSpan }
 
-      this._testSuites.set(testSuiteAbsolutePath, testSuiteSpan)
+      this._testSuiteSpansByTestSuiteAbsolutePath.set(testSuiteAbsolutePath, testSuiteSpan)
 
       return ctx.currentStore
     })
@@ -247,7 +251,9 @@ class PlaywrightPlugin extends CiPlugin {
             formattedSpan.meta[TEST_COMMAND] = this.command
             formattedSpan.meta[TEST_MODULE] = this.constructor.id
             // MISSING _trace.startTime and _trace.ticks - because by now the suite is already serialized
-            const testSuite = this._testSuites.get(formattedSpan.meta.test_suite_absolute_path)
+            const testSuite = this._testSuiteSpansByTestSuiteAbsolutePath.get(
+              formattedSpan.meta.test_suite_absolute_path
+            )
             if (testSuite) {
               formattedSpan.meta[TEST_SUITE_ID] = testSuite.context().toSpanId()
             }
@@ -391,7 +397,7 @@ class PlaywrightPlugin extends CiPlugin {
 
   // TODO: this runs both in worker and main process (main process: skipped tests that do not go through _runTest)
   startTestSpan (testName, testSuiteAbsolutePath, testSuite, testSourceFile, testSourceLine, browserName) {
-    const testSuiteSpan = this._testSuites.get(testSuiteAbsolutePath)
+    const testSuiteSpan = this._testSuiteSpansByTestSuiteAbsolutePath.get(testSuiteAbsolutePath)
 
     const extraTags = {
       [TEST_SOURCE_START]: testSourceLine

package/packages/datadog-plugin-vitest/src/index.js

@@ -55,8 +55,12 @@ class VitestPlugin extends CiPlugin {
     this.taskToFinishTime = new WeakMap()
 
     this.addSub('ci:vitest:test:is-new', ({ knownTests, testSuiteAbsolutePath, testName, onDone }) => {
+      // if for whatever reason the worker does not receive valid known tests, we don't consider it as new
+      if (!knownTests.vitest) {
+        return onDone(false)
+      }
       const testSuite = getTestSuitePath(testSuiteAbsolutePath, this.repositoryRoot)
-      const testsForThisTestSuite = knownTests[testSuite] || []
+      const testsForThisTestSuite = knownTests.vitest[testSuite] || []
       onDone(!testsForThisTestSuite.includes(testName))
     })
 

package/packages/datadog-plugin-ws/src/close.js

@@ -60,7 +60,7 @@ class WSClosePlugin extends TracingPlugin {
   end (ctx) {
     if (!Object.hasOwn(ctx, 'result')) return
 
-    if (ctx.socket.spanContext) ctx.span.addLink(ctx.socket.spanContext)
+    if (ctx.socket.spanContext) ctx.span.addLink({ context: ctx.socket.spanContext })
 
     ctx.span.finish()
   }

package/packages/datadog-plugin-ws/src/producer.js

@@ -50,7 +50,12 @@ class WSProducerPlugin extends TracingPlugin {
   end (ctx) {
     if (!Object.hasOwn(ctx, 'result')) return
 
-    if (ctx.socket.spanContext) ctx.span.addLink(ctx.socket.spanContext, { 'dd.kind': 'resuming' })
+    if (ctx.socket.spanContext) {
+      ctx.span.addLink({
+        context: ctx.socket.spanContext,
+        attributes: { 'dd.kind': 'resuming' },
+      })
+    }
 
     ctx.span.finish()
     return ctx.parentStore

package/packages/datadog-plugin-ws/src/receiver.js

@@ -60,7 +60,12 @@ class WSReceiverPlugin extends TracingPlugin {
   end (ctx) {
     if (!Object.hasOwn(ctx, 'result')) return
 
-    if (ctx.socket.spanContext) ctx.span.addLink(ctx.socket.spanContext, { 'dd.kind': 'executed_by' })
+    if (ctx.socket.spanContext) {
+      ctx.span.addLink({
+        context: ctx.socket.spanContext,
+        attributes: { 'dd.kind': 'executed_by' },
+      })
+    }
 
     ctx.span.finish()
     return ctx.parentStore

package/packages/dd-trace/src/aiguard/client.js

@@ -0,0 +1,25 @@
+'use strict'
+
+async function executeRequest (body, opts) {
+  const postData = JSON.stringify(body)
+  const headers = {
+    'Content-Type': 'application/json',
+    'Content-Length': Buffer.byteLength(postData),
+    ...opts.headers
+  }
+
+  const response = await fetch(opts.url, {
+    method: 'POST',
+    headers,
+    body: postData,
+    signal: AbortSignal.timeout(opts.timeout)
+  })
+
+  const responseBody = await response.json()
+  return {
+    status: response.status,
+    body: responseBody
+  }
+}
+
+module.exports = executeRequest

package/packages/dd-trace/src/aiguard/noop.js

@@ -0,0 +1,9 @@
+'use strict'
+
+class NoopAIGuard {
+  evaluate (messages, opts) {
+    return Promise.resolve({ action: 'ALLOW', reason: 'AI Guard is not enabled' })
+  }
+}
+
+module.exports = NoopAIGuard

package/packages/dd-trace/src/aiguard/sdk.js

@@ -0,0 +1,173 @@
+'use strict'
+
+const NoopAIGuard = require('./noop')
+const executeRequest = require('./client')
+const {
+  AI_GUARD_RESOURCE,
+  AI_GUARD_TARGET_TAG_KEY,
+  AI_GUARD_REASON_TAG_KEY,
+  AI_GUARD_ACTION_TAG_KEY,
+  AI_GUARD_BLOCKED_TAG_KEY,
+  AI_GUARD_META_STRUCT_KEY,
+  AI_GUARD_TOOL_NAME_TAG_KEY
+} = require('./tags')
+const log = require('../log')
+
+const ALLOW = 'ALLOW'
+
+class AIGuardAbortError extends Error {
+  constructor (reason) {
+    super(reason)
+    this.name = 'AIGuardAbortError'
+    this.reason = reason
+  }
+}
+
+class AIGuardClientError extends Error {
+  constructor (message, opts = {}) {
+    super(message)
+    this.name = 'AIGuardClientError'
+    if (opts.errors) {
+      this.errors = opts.errors
+    }
+    if (opts.cause) {
+      this.cause = opts.cause
+    }
+  }
+}
+
+class AIGuard extends NoopAIGuard {
+  #initialized
+  #tracer
+  #headers
+  #evaluateUrl
+  #timeout
+  #maxMessagesLength
+  #maxContentSize
+  #meta
+
+  constructor (tracer, config) {
+    super()
+
+    if (!config.apiKey || !config.appKey) {
+      log.error('AIGuard: missing api and/or app keys, use env DD_API_KEY and DD_APP_KEY')
+      this.#initialized = false
+      return
+    }
+    this.#tracer = tracer
+    this.#headers = {
+      'DD-API-KEY': config.apiKey,
+      'DD-APPLICATION-KEY': config.appKey,
+    }
+    const endpoint = config.experimental.aiguard.endpoint || `https://app.${config.site}/api/v2/ai-guard`
+    this.#evaluateUrl = `${endpoint}/evaluate`
+    this.#timeout = config.experimental.aiguard.timeout
+    this.#maxMessagesLength = config.experimental.aiguard.maxMessagesLength
+    this.#maxContentSize = config.experimental.aiguard.maxContentSize
+    this.#meta = { service: config.service, env: config.env }
+    this.#initialized = true
+  }
+
+  #truncate (messages) {
+    const size = Math.min(messages.length, this.#maxMessagesLength)
+    const result = messages.slice(-size)
+
+    for (let i = 0; i < size; i++) {
+      const message = result[i]
+      if (message.content?.length > this.#maxContentSize) {
+        result[i] = { ...message, content: message.content.slice(0, this.#maxContentSize) }
+      }
+    }
+    return result
+  }
+
+  #isToolCall (message) {
+    return message.tool_calls || message.tool_call_id
+  }
+
+  #getToolName (message, history) {
+    // 1. assistant message with tool calls
+    if (message.tool_calls) {
+      const names = message.tool_calls.map((tool) => tool.function.name)
+      return names.length === 0 ? null : names.join(',')
+    }
+    // 2. assistant message with tool output (search the linked tool call in reverse order)
+    const id = message.tool_call_id
+    for (let i = history.length - 2; i >= 0; i--) {
+      const item = history[i]
+      if (item.tool_calls) {
+        for (const toolCall of item.tool_calls) {
+          if (toolCall.id === id) {
+            return toolCall.function.name
+          }
+        }
+      }
+    }
+    return null
+  }
+
+  evaluate (messages, opts) {
+    if (!this.#initialized) {
+      return super.evaluate(messages, opts)
+    }
+    const { block = false } = opts ?? {}
+    return this.#tracer.trace(AI_GUARD_RESOURCE, {}, async (span) => {
+      const last = messages[messages.length - 1]
+      const target = this.#isToolCall(last) ? 'tool' : 'prompt'
+      span.setTag(AI_GUARD_TARGET_TAG_KEY, target)
+      if (target === 'tool') {
+        const name = this.#getToolName(last, messages)
+        if (name) {
+          span.setTag(AI_GUARD_TOOL_NAME_TAG_KEY, name)
+        }
+      }
+      span.meta_struct = {
+        [AI_GUARD_META_STRUCT_KEY]: {
+          messages: this.#truncate(messages)
+        }
+      }
+      let response
+      try {
+        const payload = {
+          data: {
+            attributes: {
+              messages,
+              meta: this.#meta,
+            }
+          }
+        }
+        response = await executeRequest(
+          payload,
+          { url: this.#evaluateUrl, headers: this.#headers, timeout: this.#timeout })
+      } catch (e) {
+        throw new AIGuardClientError('Unexpected error calling AI Guard service', { cause: e })
+      }
+      if (response.status !== 200) {
+        throw new AIGuardClientError(
+          `AI Guard service call failed, status ${response.status}`,
+          { errors: response.body?.errors })
+      }
+      let action, reason, blockingEnabled
+      try {
+        const attr = response.body.data.attributes
+        if (!attr.action) {
+          throw new Error('Action missing from response')
+        }
+        action = attr.action
+        reason = attr.reason
+        blockingEnabled = attr.is_blocking_enabled ?? false
+      } catch (e) {
+        throw new AIGuardClientError(`AI Guard service returned unexpected response : ${response.body}`, { cause: e })
+      }
+      span.setTag(AI_GUARD_ACTION_TAG_KEY, action)
+      span.setTag(AI_GUARD_REASON_TAG_KEY, reason)
+      if (block && blockingEnabled && action !== ALLOW) {
+        span.setTag(AI_GUARD_BLOCKED_TAG_KEY, 'true')
+        throw new AIGuardAbortError(reason)
+      }
+      return { action, reason }
+    })
+  }
+}
+
+module.exports = AIGuard

package/packages/dd-trace/src/aiguard/tags.js

@@ -0,0 +1,11 @@
+'use strict'
+
+module.exports = {
+  AI_GUARD_RESOURCE: 'ai_guard',
+  AI_GUARD_TARGET_TAG_KEY: 'ai_guard.target',
+  AI_GUARD_TOOL_NAME_TAG_KEY: 'ai_guard.tool_name',
+  AI_GUARD_ACTION_TAG_KEY: 'ai_guard.action',
+  AI_GUARD_REASON_TAG_KEY: 'ai_guard.reason',
+  AI_GUARD_BLOCKED_TAG_KEY: 'ai_guard.blocked',
+  AI_GUARD_META_STRUCT_KEY: 'ai_guard'
+}