@mastra/observability 1.11.1 → 1.12.0-alpha.0

package/dist/index.js

@@ -13897,12 +13897,18 @@ var observabilityConfigValueSchema = external_exports.object(observabilityInstan
     message: "At least one exporter or a bridge is required"
   }
 );
+var sensitiveDataFilterOptionsSchema = external_exports.object({
+  sensitiveFields: external_exports.array(external_exports.string()).optional(),
+  redactionToken: external_exports.string().optional(),
+  redactionStyle: external_exports.enum(["full", "partial"]).optional()
+}).strict();
 var observabilityRegistryConfigSchema = external_exports.object({
   default: external_exports.object({
     enabled: external_exports.boolean().optional()
   }).optional().nullable(),
   configs: external_exports.union([external_exports.record(external_exports.string(), external_exports.any()), external_exports.array(external_exports.any()), external_exports.null()]).optional(),
-  configSelector: external_exports.function().optional()
+  configSelector: external_exports.function().optional(),
+  sensitiveDataFilter: external_exports.union([external_exports.boolean(), sensitiveDataFilterOptionsSchema]).optional()
 }).passthrough().refine(
   (data) => {
     const isDefaultEnabled = data.default?.enabled === true;
@@ -20879,23 +20885,56 @@ var Observability = class extends MastraBase {
         }
       }
     }
+    const sensitiveDataFilterSetting = config2.sensitiveDataFilter ?? true;
+    const shouldAutoApplySensitiveFilter = sensitiveDataFilterSetting !== false;
+    const sensitiveDataFilterOptions = typeof sensitiveDataFilterSetting === "object" && sensitiveDataFilterSetting !== null ? sensitiveDataFilterSetting : void 0;
+    const buildAutoSensitiveFilter = () => {
+      if (!shouldAutoApplySensitiveFilter) {
+        return void 0;
+      }
+      return new SensitiveDataFilter(sensitiveDataFilterOptions);
+    };
     if (config2.default?.enabled) {
       console.warn(
-        '[Mastra Observability] The "default: { enabled: true }" configuration is deprecated and will be removed in a future version. Please use explicit configs with DefaultExporter, CloudExporter, and SensitiveDataFilter instead. See https://mastra.ai/docs/observability/tracing/overview for the recommended configuration.'
+        '[Mastra Observability] The "default: { enabled: true }" configuration is deprecated and will be removed in a future version. Please use explicit configs with DefaultExporter and CloudExporter instead. Sensitive data filtering is applied by default and can be controlled via the top-level "sensitiveDataFilter" option. See https://mastra.ai/docs/observability/tracing/overview for the recommended configuration.'
       );
+      const autoFilter = buildAutoSensitiveFilter();
       const defaultInstance = new DefaultObservabilityInstance({
         serviceName: "mastra",
         name: "default",
         sampling: { type: "always" /* ALWAYS */ },
         exporters: [new DefaultExporter(), new CloudExporter()],
-        spanOutputProcessors: [new SensitiveDataFilter()]
+        spanOutputProcessors: autoFilter ? [autoFilter] : []
       });
       this.#registry.register("default", defaultInstance, true);
     }
     if (config2.configs) {
       const instances = Object.entries(config2.configs);
       instances.forEach(([name, tracingDef], index) => {
-        const instance = isInstance(tracingDef) ? tracingDef : new DefaultObservabilityInstance({ ...tracingDef, name });
+        let instance;
+        if (isInstance(tracingDef)) {
+          instance = tracingDef;
+          if (shouldAutoApplySensitiveFilter) {
+            const processors = instance.getSpanOutputProcessors?.() ?? [];
+            const hasFilter = processors.some((p) => p instanceof SensitiveDataFilter);
+            if (!hasFilter) {
+              this.logger?.warn(
+                "[Mastra Observability] Pre-instantiated observability instance does not include a SensitiveDataFilter. Auto-applied filtering is skipped for pre-instantiated instances. Add a SensitiveDataFilter to spanOutputProcessors when constructing the instance to redact sensitive data.",
+                { instanceName: name }
+              );
+            }
+          }
+        } else {
+          const userProcessors = tracingDef.spanOutputProcessors ?? [];
+          const hasFilter = userProcessors.some((p) => p instanceof SensitiveDataFilter);
+          const autoFilter = !hasFilter ? buildAutoSensitiveFilter() : void 0;
+          const spanOutputProcessors = autoFilter ? [...userProcessors, autoFilter] : userProcessors;
+          instance = new DefaultObservabilityInstance({
+            ...tracingDef,
+            name,
+            spanOutputProcessors
+          });
+        }
         const isDefault = !config2.default?.enabled && index === 0;
         this.#registry.register(name, instance, isDefault);
       });