Changelog

Release notes and improvements for AtlasBurn.

SDK v1.8.0 — September 2026

The abn CLI — the SDK now ships a zero-copy-paste setup CLI (npx abn init): it detects your framework, auto-detects providers, takes your key via hidden input, shows a diff and asks before writing, wires instrumentation.ts (Next) or an entry import (Node), and runs a verification test. Also abn test, abn status, and abn doctor. Zero new dependencies.
MCP Server — AtlasBurn is now a public, OAuth 2.1 (PKCE) Model Context Protocol server, so Claude, ChatGPT, and Cursor can read your cost, runway, guardrail, and runtime data in-chat. Read-only, content-blind; published in the official MCP registry as com.atlasburn/atlasburn.
Verification events — verifyAtlasBurn() now tags its pulse as a verification event (billed the nominal $0.00001) so it's clearly distinct from production telemetry in the dashboard.

Expanded auto-detection (I1) — the SDK now auto-captures Azure OpenAI, OpenRouter, Cohere, Mistral, Groq, Together AI, DeepSeek, xAI, and AWS Bedrock (best-effort) alongside OpenAI, Anthropic, Gemini, and Vertex AI. Only a self-hosted model with no fixed public host still needs the proxy or /api/ingest.
Live model pricing — the Model Intelligence catalog refreshes list prices from a maintained provider registry every 3 days, with per-model manual pins; the static registry stays the fallback so a price is never blank.
Multi-channel alerts — guardrail breaches now fan out to Email, Slack, Discord, and Telegram with per-channel severity floors (SMS / WhatsApp planned).

Streaming usage capture (I3) — the SDK and Edge Proxy now inject stream_options.include_usage: true on OpenAI streams so the final SSE frame carries real input/output token counts. Pre-I3 streamed calls logged $0; that bug is fixed.
Estimated-token flag — events without a usage frame are now flagged est/~est in the Forensic Ledger.
License — repackaged under Apache-2.0. See License.
Docs — withdrew the legacy 94.2% accuracy figure pending re-derivation against current invoices.
Forecasting — engine outputs documented as p5 / p50 / p95 + VaR95 / CVaR95; the spurious P99 reference was removed.

AtlasBurn Edge Proxy — new Cloudflare Worker integration. Zero code changes, native SSE streaming, fails open by design.
Autonomous Runtime Guardrails — server-side 5-layer defense engine replaces SDK-level Auto Kill:
- Layer 1 — Financial Limits (daily / monthly hard cap)
- Layer 2 — Dumb Loop Detector (identical token fingerprinting)
- Layer 3 — Smart Loop Detector (monotonic context inflation)
- Layer 4 — RPS Burst Protection (per-key frequency limits)
- Layer 5 — Premium Model Concentration (prompt-injection / hijacked routing detection)
Cloudflare KV Kill Switch — <5ms edge enforcement with TTL auto-recovery and manual dashboard override.
New API endpoints: POST /api/ingest (telemetry collection) and POST /api/guardrails/enforce (KV flag webhook).
OpenRouter auto-detect via the Edge Proxy. Layer 4 is the primary safety net due to tokenizer drift from upstream load-balancing.

Synchronous loop guards — added isRouting guard to prevent proxy recursion (RangeError: Maximum call stack size exceeded) in Next.js App Router
Universal Framework Support — initAtlasBurnAuto now survives arbitrary globalThis.fetch overrides by host frameworks (Next.js, Nuxt, SvelteKit)
Improved SSE stream chunk parsing for complex AI provider outputs (multi-chunk usage metadata, partial JSON frames)
Single-init integration via Next.js Instrumentation hook (instrumentation.ts)
Streaming and JSON responses captured automatically across Server Components and API Routes
Added Vertex AI auto-detect support alongside OpenAI, Anthropic, and Gemini
Deprecated route-level patching and custom fetch wrappers — safe to delete