@brizz/sdk 0.1.27 → 0.1.29

package/dist/preload.cjs

@@ -472,6 +472,7 @@ var SESSION_ID = "session.id";
 var PROPERTIES_CONTEXT_KEY = (0, import_api3.createContextKey)(PROPERTIES);
 var SESSION_OBJECT_CONTEXT_KEY = (0, import_api3.createContextKey)("brizz.session.object");
 var INTERRUPT_TOOLS = "brizz.internal.interrupt";
+var INTERNAL_EVENT_PREFIX = "brizz.internal.";
 
 // src/internal/instrumentation/mcp/session.ts
 function stampAndPropagateSession(span, sessionId, baseContext = import_api4.context.active()) {
@@ -909,7 +910,7 @@ function safeEnd(span) {
 
 // src/internal/version.ts
 function getSDKVersion() {
-  return "0.1.27";
+  return "0.1.29";
 }
 
 // src/internal/instrumentation/mcp/version.ts
@@ -1211,8 +1212,11 @@ var import_exporter_logs_otlp_http = require("@opentelemetry/exporter-logs-otlp-
 var import_resources = require("@opentelemetry/resources");
 var import_sdk_logs2 = require("@opentelemetry/sdk-logs");
 
-// src/internal/log/processors/log-processor.ts
+// src/internal/trace/session.ts
 var import_api9 = require("@opentelemetry/api");
+
+// src/internal/log/processors/log-processor.ts
+var import_api10 = require("@opentelemetry/api");
 var import_sdk_logs = require("@opentelemetry/sdk-logs");
 
 // src/internal/masking/patterns.ts
@@ -1304,10 +1308,6 @@ var DEFAULT_PII_PATTERNS = [
     name: "pgp_private_keys",
     pattern: "-----BEGIN PGP PRIVATE KEY BLOCK-----"
   },
-  {
-    name: "certificates",
-    pattern: "-----BEGIN CERTIFICATE-----"
-  },
   // Additional API Keys and Tokens
   {
     name: "google_oauth",
@@ -1356,7 +1356,7 @@ var DEFAULT_PII_PATTERNS = [
   },
   {
     name: "ssl_certificates",
-    pattern: String.raw`-----BEGIN CERTIFICATE-----(?:.|\n)+?\s-----END CERTIFICATE-----`
+    pattern: String.raw`-----BEGIN CERTIFICATE-----(?:.|\n)+?\s*-----END CERTIFICATE-----`
   },
   {
     name: "ssh_dss_public",
@@ -1414,8 +1414,9 @@ function isLikelyReDoSPattern(pattern) {
   const dangerousPatterns = [
     // Nested quantifiers like (a+)+, (a*)+, (a+)*
     /\([^)]*[+*]\)[+*]/,
-    // Alternation with overlapping groups like (a|a)*
-    /\([^)]*\|[^)]*\)[+*]/,
+    // Overlapping alternation under an outer quantifier like (a|a)+, (\w|\d)+. Scoped to
+    // capturing groups so the lazy (?:…)+? built-ins aren't false-flagged.
+    /\((?!\?)[^)]*\|[^)]*\)[+*]/,
     // Complex backtracking patterns - but more specific
     /\([^)]*[+*][^)]*[+*][^)]*\)[+*]/
   ];
@@ -1484,6 +1485,16 @@ function compilePatternEntries(patternEntries) {
     return null;
   }
 }
+var compiledPatternCache = /* @__PURE__ */ new WeakMap();
+function getCompiledPatternsForRule(rule) {
+  const key = rule.patterns;
+  if (compiledPatternCache.has(key)) {
+    return compiledPatternCache.get(key) ?? null;
+  }
+  const compiled = compilePatternEntries(convertPatternsToPatternEntries(rule.patterns));
+  compiledPatternCache.set(key, compiled);
+  return compiled;
+}
 function getCompiledAttributeNamePattern(rule) {
   if (!rule.attributePattern) {
     logger.debug("No attribute pattern provided, using default .*");
@@ -1577,7 +1588,7 @@ function maskStringByPatternBasedRule(value, rule) {
   if (!patternEntries || patternEntries.length === 0) {
     return mode === "partial" && value ? value[0] + "*****" : "*****";
   }
-  const compiledPatterns = compilePatternEntries(patternEntries);
+  const compiledPatterns = getCompiledPatternsForRule(rule);
   if (!compiledPatterns) {
     return value;
   }
@@ -1641,7 +1652,7 @@ var BrizzSimpleLogRecordProcessor = class extends import_sdk_logs.SimpleLogRecor
     if (maskingConfig) {
       maskLog(logRecord, maskingConfig);
     }
-    const associationProperties = import_api9.context.active().getValue(PROPERTIES_CONTEXT_KEY);
+    const associationProperties = import_api10.context.active().getValue(PROPERTIES_CONTEXT_KEY);
     if (associationProperties) {
       for (const [key, value] of Object.entries(associationProperties)) {
         logRecord.setAttribute(`${BRIZZ}.${key}`, value);
@@ -1661,7 +1672,7 @@ var BrizzBatchLogRecordProcessor = class extends import_sdk_logs.BatchLogRecordP
     if (maskingConfig) {
       maskLog(logRecord, maskingConfig);
     }
-    const associationProperties = import_api9.context.active().getValue(PROPERTIES_CONTEXT_KEY);
+    const associationProperties = import_api10.context.active().getValue(PROPERTIES_CONTEXT_KEY);
     if (associationProperties) {
       for (const [key, value] of Object.entries(associationProperties)) {
         logRecord.setAttribute(`${BRIZZ}.${key}`, value);
@@ -1690,6 +1701,11 @@ function maskLog(logRecord, config) {
         for (const [key, value] of Object.entries(maskedAttributes)) {
           newAttributes[key] = value;
         }
+        for (const [key, value] of Object.entries(logRecord.attributes)) {
+          if (key.startsWith(INTERNAL_EVENT_PREFIX)) {
+            newAttributes[key] = value;
+          }
+        }
         logRecord.setAttributes(newAttributes);
       }
     }
@@ -2048,10 +2064,10 @@ var BrizzSpanExporter = class {
 };
 
 // src/internal/trace/processors/span-processor.ts
-var import_api10 = require("@opentelemetry/api");
+var import_api11 = require("@opentelemetry/api");
 var import_sdk_trace_base = require("@opentelemetry/sdk-trace-base");
 function applyContextAttributes(span) {
-  const sessionProperties = import_api10.context.active().getValue(PROPERTIES_CONTEXT_KEY);
+  const sessionProperties = import_api11.context.active().getValue(PROPERTIES_CONTEXT_KEY);
   if (sessionProperties) {
     for (const [key, value] of Object.entries(sessionProperties)) {
       span.setAttribute(`${BRIZZ}.${key}`, value);
@@ -2233,9 +2249,6 @@ function getSpanProcessor() {
   return TracingModule.getInstance().getSpanProcessor();
 }
 
-// src/internal/trace/session.ts
-var import_api11 = require("@opentelemetry/api");
-
 // src/internal/sdk.ts
 var _Brizz = class __Brizz {
   static instance = null;

package/dist/preload.js

@@ -455,6 +455,7 @@ var SESSION_ID = "session.id";
 var PROPERTIES_CONTEXT_KEY = createContextKey(PROPERTIES);
 var SESSION_OBJECT_CONTEXT_KEY = createContextKey("brizz.session.object");
 var INTERRUPT_TOOLS = "brizz.internal.interrupt";
+var INTERNAL_EVENT_PREFIX = "brizz.internal.";
 
 // src/internal/instrumentation/mcp/session.ts
 function stampAndPropagateSession(span, sessionId, baseContext = context.active()) {
@@ -892,7 +893,7 @@ function safeEnd(span) {
 
 // src/internal/version.ts
 function getSDKVersion() {
-  return "0.1.27";
+  return "0.1.29";
 }
 
 // src/internal/instrumentation/mcp/version.ts
@@ -1196,8 +1197,11 @@ import {
   LoggerProvider
 } from "@opentelemetry/sdk-logs";
 
+// src/internal/trace/session.ts
+import { context as context3, trace as trace4, SpanStatusCode as SpanStatusCode3 } from "@opentelemetry/api";
+
 // src/internal/log/processors/log-processor.ts
-import { context as context3 } from "@opentelemetry/api";
+import { context as context4 } from "@opentelemetry/api";
 import { BatchLogRecordProcessor, SimpleLogRecordProcessor } from "@opentelemetry/sdk-logs";
 
 // src/internal/masking/patterns.ts
@@ -1289,10 +1293,6 @@ var DEFAULT_PII_PATTERNS = [
     name: "pgp_private_keys",
     pattern: "-----BEGIN PGP PRIVATE KEY BLOCK-----"
   },
-  {
-    name: "certificates",
-    pattern: "-----BEGIN CERTIFICATE-----"
-  },
   // Additional API Keys and Tokens
   {
     name: "google_oauth",
@@ -1341,7 +1341,7 @@ var DEFAULT_PII_PATTERNS = [
   },
   {
     name: "ssl_certificates",
-    pattern: String.raw`-----BEGIN CERTIFICATE-----(?:.|\n)+?\s-----END CERTIFICATE-----`
+    pattern: String.raw`-----BEGIN CERTIFICATE-----(?:.|\n)+?\s*-----END CERTIFICATE-----`
   },
   {
     name: "ssh_dss_public",
@@ -1399,8 +1399,9 @@ function isLikelyReDoSPattern(pattern) {
   const dangerousPatterns = [
     // Nested quantifiers like (a+)+, (a*)+, (a+)*
     /\([^)]*[+*]\)[+*]/,
-    // Alternation with overlapping groups like (a|a)*
-    /\([^)]*\|[^)]*\)[+*]/,
+    // Overlapping alternation under an outer quantifier like (a|a)+, (\w|\d)+. Scoped to
+    // capturing groups so the lazy (?:…)+? built-ins aren't false-flagged.
+    /\((?!\?)[^)]*\|[^)]*\)[+*]/,
     // Complex backtracking patterns - but more specific
     /\([^)]*[+*][^)]*[+*][^)]*\)[+*]/
   ];
@@ -1469,6 +1470,16 @@ function compilePatternEntries(patternEntries) {
     return null;
   }
 }
+var compiledPatternCache = /* @__PURE__ */ new WeakMap();
+function getCompiledPatternsForRule(rule) {
+  const key = rule.patterns;
+  if (compiledPatternCache.has(key)) {
+    return compiledPatternCache.get(key) ?? null;
+  }
+  const compiled = compilePatternEntries(convertPatternsToPatternEntries(rule.patterns));
+  compiledPatternCache.set(key, compiled);
+  return compiled;
+}
 function getCompiledAttributeNamePattern(rule) {
   if (!rule.attributePattern) {
     logger.debug("No attribute pattern provided, using default .*");
@@ -1562,7 +1573,7 @@ function maskStringByPatternBasedRule(value, rule) {
   if (!patternEntries || patternEntries.length === 0) {
     return mode === "partial" && value ? value[0] + "*****" : "*****";
   }
-  const compiledPatterns = compilePatternEntries(patternEntries);
+  const compiledPatterns = getCompiledPatternsForRule(rule);
   if (!compiledPatterns) {
     return value;
   }
@@ -1626,7 +1637,7 @@ var BrizzSimpleLogRecordProcessor = class extends SimpleLogRecordProcessor {
     if (maskingConfig) {
       maskLog(logRecord, maskingConfig);
     }
-    const associationProperties = context3.active().getValue(PROPERTIES_CONTEXT_KEY);
+    const associationProperties = context4.active().getValue(PROPERTIES_CONTEXT_KEY);
     if (associationProperties) {
       for (const [key, value] of Object.entries(associationProperties)) {
         logRecord.setAttribute(`${BRIZZ}.${key}`, value);
@@ -1646,7 +1657,7 @@ var BrizzBatchLogRecordProcessor = class extends BatchLogRecordProcessor {
     if (maskingConfig) {
       maskLog(logRecord, maskingConfig);
     }
-    const associationProperties = context3.active().getValue(PROPERTIES_CONTEXT_KEY);
+    const associationProperties = context4.active().getValue(PROPERTIES_CONTEXT_KEY);
     if (associationProperties) {
       for (const [key, value] of Object.entries(associationProperties)) {
         logRecord.setAttribute(`${BRIZZ}.${key}`, value);
@@ -1675,6 +1686,11 @@ function maskLog(logRecord, config) {
         for (const [key, value] of Object.entries(maskedAttributes)) {
           newAttributes[key] = value;
         }
+        for (const [key, value] of Object.entries(logRecord.attributes)) {
+          if (key.startsWith(INTERNAL_EVENT_PREFIX)) {
+            newAttributes[key] = value;
+          }
+        }
         logRecord.setAttributes(newAttributes);
       }
     }
@@ -2033,13 +2049,13 @@ var BrizzSpanExporter = class {
 };
 
 // src/internal/trace/processors/span-processor.ts
-import { context as context4 } from "@opentelemetry/api";
+import { context as context5 } from "@opentelemetry/api";
 import {
   BatchSpanProcessor,
   SimpleSpanProcessor
 } from "@opentelemetry/sdk-trace-base";
 function applyContextAttributes(span) {
-  const sessionProperties = context4.active().getValue(PROPERTIES_CONTEXT_KEY);
+  const sessionProperties = context5.active().getValue(PROPERTIES_CONTEXT_KEY);
   if (sessionProperties) {
     for (const [key, value] of Object.entries(sessionProperties)) {
       span.setAttribute(`${BRIZZ}.${key}`, value);
@@ -2221,9 +2237,6 @@ function getSpanProcessor() {
   return TracingModule.getInstance().getSpanProcessor();
 }
 
-// src/internal/trace/session.ts
-import { context as context5, trace as trace4, SpanStatusCode as SpanStatusCode3 } from "@opentelemetry/api";
-
 // src/internal/sdk.ts
 var _Brizz = class __Brizz {
   static instance = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brizz/sdk",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "type": "module",
   "description": "OpenTelemetry-based observability SDK for AI applications",
   "keywords": [
@@ -85,32 +85,32 @@
     "registry": "https://registry.npmjs.org/"
   },
   "devDependencies": {
-    "@ai-sdk/anthropic": "^3.0.63",
-    "@ai-sdk/openai": "^3.0.47",
+    "@ai-sdk/anthropic": "^3.0.81",
+    "@ai-sdk/openai": "^3.0.68",
     "@arizeai/openinference-instrumentation-mcp": "^0.2.14",
-    "@changesets/changelog-github": "^0.6.0",
+    "@changesets/changelog-github": "^0.7.0",
     "@changesets/cli": "^2.30.0",
     "@eslint/js": "^10.0.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/jest": "^30.0.0",
-    "@types/node": "^25.5.0",
-    "@typescript-eslint/eslint-plugin": "^8.57.1",
-    "@typescript-eslint/parser": "^8.57.1",
-    "ai": "^6.0.134",
-    "eslint": "^10.1.0",
+    "@types/node": "^25.9.2",
+    "@typescript-eslint/eslint-plugin": "^8.61.0",
+    "@typescript-eslint/parser": "^8.61.0",
+    "ai": "^6.0.198",
+    "eslint": "^10.4.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-promise": "^7.2.1",
-    "eslint-plugin-unicorn": "^63.0.0",
-    "jest": "^30.3.0",
-    "jest-environment-jsdom": "^30.3.0",
-    "openai": "^6.32.0",
+    "eslint-plugin-promise": "^7.3.0",
+    "eslint-plugin-unicorn": "^65.0.1",
+    "jest": "^30.4.2",
+    "jest-environment-jsdom": "^30.4.1",
+    "openai": "^6.42.0",
     "prettier": "^3.8.1",
-    "ts-jest": "^29.4.6",
+    "ts-jest": "^29.4.11",
     "tsup": "^8.5.1",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.0",
-    "zod": "^4.3.6"
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.8",
+    "zod": "^4.4.3"
   },
   "peerDependencies": {
     "@langchain/core": "^0.3.0 || ^1.0.0",
@@ -129,37 +129,37 @@
     }
   },
   "dependencies": {
-    "@arizeai/openinference-instrumentation-langchain": "^4.0.6",
-    "@arizeai/openinference-instrumentation-mcp": "^0.2.14",
+    "@arizeai/openinference-instrumentation-langchain": "^4.0.12",
+    "@arizeai/openinference-instrumentation-mcp": "^0.2.18",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opentelemetry/api": "^1.9.0",
-    "@opentelemetry/api-logs": "^0.213.0",
-    "@opentelemetry/auto-instrumentations-node": "^0.75.0",
+    "@opentelemetry/api-logs": "^0.218.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.76.0",
     "@opentelemetry/core": "^2.6.0",
-    "@opentelemetry/exporter-logs-otlp-http": "^0.213.0",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.213.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.213.0",
-    "@opentelemetry/exporter-trace-otlp-proto": "^0.213.0",
-    "@opentelemetry/instrumentation": "^0.213.0",
+    "@opentelemetry/exporter-logs-otlp-http": "^0.218.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
+    "@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",
+    "@opentelemetry/instrumentation": "^0.218.0",
     "@opentelemetry/resources": "^2.6.0",
-    "@opentelemetry/sdk-logs": "^0.213.0",
+    "@opentelemetry/sdk-logs": "^0.218.0",
     "@opentelemetry/sdk-metrics": "^2.6.0",
-    "@opentelemetry/sdk-node": "^0.217.0",
+    "@opentelemetry/sdk-node": "^0.218.0",
     "@opentelemetry/sdk-trace-base": "^2.6.0",
     "@opentelemetry/sdk-trace-node": "^2.6.0",
-    "@opentelemetry/semantic-conventions": "^1.40.0",
-    "@traceloop/ai-semantic-conventions": "^0.22.5",
-    "@traceloop/instrumentation-anthropic": "^0.22.6",
-    "@traceloop/instrumentation-bedrock": "^0.22.6",
-    "@traceloop/instrumentation-chromadb": "^0.22.5",
-    "@traceloop/instrumentation-cohere": "^0.22.6",
-    "@traceloop/instrumentation-llamaindex": "^0.22.6",
-    "@traceloop/instrumentation-openai": "^0.26.0",
-    "@traceloop/instrumentation-pinecone": "^0.22.5",
-    "@traceloop/instrumentation-qdrant": "^0.22.6",
-    "@traceloop/instrumentation-together": "^0.22.5",
-    "@traceloop/instrumentation-vertexai": "^0.22.5",
-    "import-in-the-middle": "^3.0.0",
+    "@opentelemetry/semantic-conventions": "^1.41.1",
+    "@traceloop/ai-semantic-conventions": "^0.27.0",
+    "@traceloop/instrumentation-anthropic": "^0.27.0",
+    "@traceloop/instrumentation-bedrock": "^0.27.0",
+    "@traceloop/instrumentation-chromadb": "^0.27.0",
+    "@traceloop/instrumentation-cohere": "^0.27.0",
+    "@traceloop/instrumentation-llamaindex": "^0.27.0",
+    "@traceloop/instrumentation-openai": "^0.27.0",
+    "@traceloop/instrumentation-pinecone": "^0.27.0",
+    "@traceloop/instrumentation-qdrant": "^0.27.0",
+    "@traceloop/instrumentation-together": "^0.27.0",
+    "@traceloop/instrumentation-vertexai": "^0.27.0",
+    "import-in-the-middle": "^3.0.2",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "tslib": "^2.8.1"