@posthog/ai 8.16.0 → 8.16.2

package/dist/otel/index.cjs

@@ -224,6 +224,71 @@ function withAttributes(span, attributes, events) {
 	});
 }
 //#endregion
+//#region src/typeGuards.ts
+const isObject = (value) => {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+};
+//#endregion
+//#region src/mcpCredentials.ts
+const MCP_CREDENTIAL_FIELDS = ["headers", "authorization"];
+const MCP_PROVIDER_TOOL_IDS = /* @__PURE__ */ new Set([
+	"openai.mcp",
+	"xai.mcp",
+	"google.mcp_server"
+]);
+const isMcpProviderTool = (tool) => (tool.type === "provider" || tool.type === "provider-defined") && typeof tool.id === "string" && MCP_PROVIDER_TOOL_IDS.has(tool.id);
+const withoutMcpCredentials = (config) => {
+	const redacted = { ...config };
+	for (const field of MCP_CREDENTIAL_FIELDS) if (field in redacted) redacted[field] = "[REDACTED]";
+	return redacted;
+};
+/** Hides the credentials of a remote MCP tool definition; everything else is kept as sent. */
+function redactMcpToolDefinition(tool) {
+	if (!isObject(tool)) return tool;
+	if (tool.type === "mcp") return withoutMcpCredentials(tool);
+	if (isMcpProviderTool(tool) && isObject(tool.args)) return {
+		...tool,
+		args: withoutMcpCredentials(tool.args)
+	};
+	return tool;
+}
+function redactMcpToolCredentials(tools) {
+	return Array.isArray(tools) ? tools.map(redactMcpToolDefinition) : tools;
+}
+//#endregion
+//#region src/otel/toolDefinitions.ts
+const TOOL_DEFINITION_ATTRIBUTES = /* @__PURE__ */ new Set(["gen_ai.tool.definitions", "ai.prompt.tools"]);
+const TOOL_DEFINITION_PATTERN = /^llm\.tools\.\d+\.tool\.json_schema$/;
+const isToolDefinitionAttribute = (key) => TOOL_DEFINITION_ATTRIBUTES.has(key) || TOOL_DEFINITION_PATTERN.test(key);
+const parseToolDefinitionJson = (value) => {
+	try {
+		const parsed = JSON.parse(value);
+		return parsed !== null && typeof parsed === "object" ? parsed : void 0;
+	} catch {
+		return;
+	}
+};
+const redactJson$1 = (value) => {
+	const parsed = parseToolDefinitionJson(value);
+	if (parsed === void 0) return value;
+	const redacted = JSON.stringify(Array.isArray(parsed) ? redactMcpToolCredentials(parsed) : redactMcpToolDefinition(parsed));
+	return redacted === JSON.stringify(parsed) ? value : redacted;
+};
+/** Replaces MCP credentials in a tool definition attribute; values that are not JSON are kept as is. */
+function redactToolDefinitionCredentials(value) {
+	if (typeof value === "string") return redactJson$1(value);
+	if (Array.isArray(value) && value.every((item) => typeof item === "string" || item == null)) {
+		const redacted = value.map((item) => typeof item === "string" ? redactJson$1(item) : item);
+		return redacted.some((item, index) => item !== value[index]) ? redacted : value;
+	}
+	return value;
+}
+/** Drops the parts of a tool definition attribute that are not JSON, since their credentials cannot be found. */
+function withoutUnparseableToolDefinitions(value) {
+	if (typeof value === "string") return parseToolDefinitionJson(value) === void 0 ? void 0 : value;
+	if (Array.isArray(value)) return value.filter((item) => typeof item === "string" && parseToolDefinitionJson(item) !== void 0);
+}
+//#endregion
 //#region src/otel/redact.ts
 const redactor = new BinaryContentRedactor();
 function redactSpan(span) {
@@ -236,9 +301,10 @@ function redactAttributes(attributes) {
 	let changed = false;
 	const out = {};
 	for (const key of Object.keys(attributes)) {
-		const value = attributes[key];
+		const original = attributes[key];
+		const value = original !== void 0 && isToolDefinitionAttribute(key) ? redactToolDefinitionCredentials(original) : original;
 		const redacted = value === void 0 ? value : redactAttributeValue(value);
-		if (redacted !== value) changed = true;
+		if (redacted !== original) changed = true;
 		out[key] = redacted;
 	}
 	return changed ? out : attributes;
@@ -294,6 +360,142 @@ function redactJson(value) {
 	return redactedStr === JSON.stringify(parsed) ? value : redactedStr;
 }
 //#endregion
+//#region src/otel/privacy.ts
+const CONTENT_ATTRIBUTES = /* @__PURE__ */ new Set([
+	"ai.prompt",
+	"ai.prompt.messages",
+	"ai.response.text",
+	"ai.response.object",
+	"ai.response.toolCalls",
+	"ai.response.reasoning",
+	"ai.response.reasoningDetails",
+	"ai.response.files",
+	"ai.toolCall.args",
+	"ai.toolCall.result",
+	"ai.value",
+	"ai.values",
+	"ai.embedding",
+	"ai.embeddings",
+	"ai.documents",
+	"ai.request.text",
+	"ai.decision.state",
+	"ai.decision.questions",
+	"ai.decision.answers",
+	"gen_ai.input.messages",
+	"gen_ai.output.messages",
+	"gen_ai.system_instructions",
+	"gen_ai.prompt",
+	"gen_ai.completion",
+	"gen_ai.tool.call.arguments",
+	"gen_ai.tool.call.result",
+	"gen_ai.retrieval.documents",
+	"gen_ai.retrieval.query.text",
+	"gen_ai.memory.query.text",
+	"gen_ai.memory.records",
+	"gen_ai.evaluation.explanation",
+	"traceloop.entity.input",
+	"traceloop.entity.output",
+	"traceloop.prompt.template",
+	"gen_ai.task.input",
+	"gen_ai.task.output",
+	"gen_ai.guardrail.input",
+	"gen_ai.guardrail.output",
+	"gen_ai.guardrail.error.message",
+	"gen_ai.response.revised_prompt",
+	"mcp.response.value",
+	"db.marqo.search.query",
+	"anthropic.tool_result.content",
+	"pydantic_ai.all_messages",
+	"final_result",
+	"tool_arguments",
+	"tool_response",
+	"events",
+	"model_request_parameters",
+	"inputs",
+	"prompt",
+	"input.value",
+	"output.value",
+	"llm.function_call",
+	"llm.prompt_template.template",
+	"llm.prompt_template.variables",
+	"llm.invocation_parameters",
+	"reranker.query",
+	"langfuse.trace.input",
+	"langfuse.trace.output",
+	"langfuse.observation.input",
+	"langfuse.observation.output",
+	"langfuse.observation.status_message",
+	"langfuse.experiment.item.expected_output",
+	"exception.message",
+	"exception.stacktrace",
+	"error.message"
+]);
+const CONTENT_ATTRIBUTE_PREFIXES = [
+	"gen_ai.prompt.",
+	"gen_ai.completion.",
+	"llm.prompts.",
+	"llm.completions.",
+	"llm.input_messages.",
+	"llm.output_messages.",
+	"llm.choices.",
+	"traceloop.prompt.template_variables."
+];
+const CONTENT_ATTRIBUTE_PATTERNS = [
+	/^db\.chroma\.(query|get|delete)\.where_document$/,
+	/^embedding\.embeddings\.\d+\.embedding\.(text|vector)$/,
+	/^retrieval\.documents\.\d+\.document\.(content|metadata)$/,
+	/^reranker\.(input|output)_documents\.\d+\.document\.content$/,
+	/^(input|output)\.images\.\d+\.image\.url$/,
+	/^mastra\.[a-z_]+\.(input|output)$/
+];
+const NON_CONTENT_ATTRIBUTES = /* @__PURE__ */ new Set(["gen_ai.prompt.name", "gen_ai.prompt.version"]);
+const EXCEPTION_EVENT_NAME = "exception";
+const PROVIDER_METADATA_ATTRIBUTE = "ai.response.providerMetadata";
+const isContentAttribute = (key) => !NON_CONTENT_ATTRIBUTES.has(key) && (CONTENT_ATTRIBUTES.has(key) || CONTENT_ATTRIBUTE_PREFIXES.some((prefix) => key.startsWith(prefix) || prefix === `${key}.`) || CONTENT_ATTRIBUTE_PATTERNS.some((pattern) => pattern.test(key)));
+function gatewayCostOnly(value) {
+	if (typeof value !== "string") return;
+	try {
+		const cost = JSON.parse(value)?.gateway?.cost;
+		return typeof cost === "number" || typeof cost === "string" ? JSON.stringify({ gateway: { cost } }) : void 0;
+	} catch {
+		return;
+	}
+}
+function stripAttributes(attributes) {
+	const out = {};
+	for (const [key, value] of Object.entries(attributes)) {
+		if (isContentAttribute(key)) continue;
+		if (isToolDefinitionAttribute(key)) {
+			const definitions = value === void 0 ? void 0 : withoutUnparseableToolDefinitions(value);
+			if (definitions !== void 0) out[key] = definitions;
+			continue;
+		}
+		if (key === PROVIDER_METADATA_ATTRIBUTE) {
+			const metadata = gatewayCostOnly(value);
+			if (metadata !== void 0) out[key] = metadata;
+			continue;
+		}
+		out[key] = value;
+	}
+	return out;
+}
+function stripEvents(events) {
+	return events.filter((event) => event.name === EXCEPTION_EVENT_NAME).map((event) => event.attributes ? {
+		...event,
+		attributes: stripAttributes(event.attributes)
+	} : event);
+}
+/** Returns a copy of the span without the attributes, events and status message that carry content. */
+function stripContent(span) {
+	const stripped = withAttributes(span, span.attributes ? stripAttributes(span.attributes) : span.attributes, span.events ? stripEvents(span.events) : span.events);
+	if (span.status?.message) Object.defineProperty(stripped, "status", {
+		value: { code: span.status.code },
+		enumerable: true,
+		configurable: true
+	});
+	return stripped;
+}
+//#endregion
 //#region src/gatewayWarning.ts
 const POSTHOG_AI_GATEWAY_HOSTS = [
 	"gateway.posthog.com",
@@ -382,6 +584,7 @@ var PostHogTraceExporter = class extends _opentelemetry_exporter_trace_otlp_http
 			headers: token ? { Authorization: `Bearer ${token}` } : {}
 		});
 		this.disabled = disabled;
+		this.privacyMode = options.privacyMode === true;
 		if (this.disabled) console.warn("[PostHogTraceExporter] projectToken is missing or blank; the exporter will be disabled.");
 	}
 	export(spans, resultCallback) {
@@ -395,10 +598,15 @@ var PostHogTraceExporter = class extends _opentelemetry_exporter_trace_otlp_http
 			return;
 		}
 		for (const span of aiSpans) warnIfPostHogAiGatewayOtelAttributes(span.attributes);
-		super.export(aiSpans.map(redactSpan), resultCallback);
+		const shareable = this.privacyMode ? aiSpans.map(stripContent) : aiSpans;
+		super.export(shareable.map(redactSpan), resultCallback);
 	}
 };
 //#endregion
+//#region src/privacyMode.ts
+/** Per-call settings can turn redaction on but never off. */
+const isPrivacyModeEnabled = (client, privacyMode = false) => privacyMode === true || client?.privacyMode === true || client?.privacy_mode === true || client?.options?.privacyMode === true;
+//#endregion
 //#region src/otel/requestContext.ts
 const DISTINCT_ID_ATTRIBUTE = "posthog.distinct_id";
 const SESSION_ID_ATTRIBUTE = "$session_id";
@@ -527,6 +735,7 @@ var NoopSpanProcessor = class {
 */
 var PostHogSpanProcessor = class {
 	constructor(options) {
+		this.privacyMode = false;
 		this.capturedContexts = /* @__PURE__ */ new WeakMap();
 		const token = normalizeToken(options.projectToken);
 		if (!token) {
@@ -535,6 +744,7 @@ var PostHogSpanProcessor = class {
 			return;
 		}
 		this.client = options.client;
+		this.privacyMode = options.privacyMode === true;
 		if (options._spanProcessor) this.inner = options._spanProcessor;
 		else {
 			const host = new URL(normalizeHost(options.host)).origin;
@@ -555,7 +765,9 @@ var PostHogSpanProcessor = class {
 		this.capturedContexts.delete(span);
 		if (isAISpan(span)) {
 			warnIfPostHogAiGatewayOtelAttributes(span.attributes);
-			this.inner.onEnd(redactSpan(captured ? withRequestContext(span, captured) : span));
+			const contextual = captured ? withRequestContext(span, captured) : span;
+			const shareable = isPrivacyModeEnabled(this.client, this.privacyMode) ? stripContent(contextual) : contextual;
+			this.inner.onEnd(redactSpan(shareable));
 		}
 	}
 	shutdown() {

package/dist/otel/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["DEFAULT_OTEL_HOST","normalizeToken","normalizeHost","OTLPTraceExporter","OTLPTraceExporter","BatchSpanProcessor"],"sources":["../../src/sanitization/base64_recognizer.ts","../../src/sanitization/media_type_context.ts","../../src/sanitization/binary_content_redactor.ts","../../src/otel/spans.ts","../../src/otel/redact.ts","../../src/gatewayWarning.ts","../../src/otel/exporter.ts","../../src/otel/requestContext.ts","../../src/otel/processor.ts"],"sourcesContent":["const DATA_URL_PREFIX_RE = /^data:([^;,\\s]+)(?:;[^;,\\s]+)*;base64,/i\nconst BASE64_ALPHABET_RE = /^[A-Za-z0-9+/_=-]+$/\n\nexport type Base64Recognition = { kind: 'data-url'; mediaType: string } | { kind: 'raw' } | { kind: 'none' }\n\nexport class Base64Recognizer {\n  recognize(value: string, minLength: number): Base64Recognition {\n    const dataUrl = DATA_URL_PREFIX_RE.exec(value)\n    if (dataUrl) return { kind: 'data-url', mediaType: dataUrl[1] }\n\n    if (value.length < minLength) return { kind: 'none' }\n\n    const confidencePrefix = value.slice(0, minLength)\n    if (BASE64_ALPHABET_RE.test(confidencePrefix)) {\n      return { kind: 'raw' }\n    } else {\n      return { kind: 'none' }\n    }\n  }\n}\n","const MIME_HINT_KEYS = ['mediaType', 'media_type', 'mimeType', 'mime_type'] as const\n\nconst STRONG_CONTEXT_KEYS = new Set([\n  'data',\n  'file_data',\n  'fileData',\n  'image_url',\n  'imageUrl',\n  'video_url',\n  'videoUrl',\n  'audio',\n  'audio_data',\n  'audioData',\n  'inline_data',\n  'inlineData',\n  'source',\n  'result',\n])\n\nconst STRONG_CONTEXT_TYPES = new Set([\n  'image',\n  'image_url',\n  'input_image',\n  'audio',\n  'input_audio',\n  'video',\n  'video_url',\n  'file',\n  'input_file',\n  'document',\n  'media',\n  'file-data',\n])\n\nconst FILE_FAMILY_TYPES = new Set(['file', 'input_file', 'document', 'media', 'file-data'])\nconst TYPED_BINARY_DATA_TYPES = new Set(['image', 'audio', 'video', 'document'])\n\nconst KNOWN_AUDIO_FORMATS = new Set(['wav', 'mp3', 'ogg', 'flac', 'm4a', 'aac', 'webm'])\n\nexport class MediaTypeContext {\n  static readonly EMPTY = new MediaTypeContext(undefined, undefined)\n\n  constructor(\n    private readonly parent: Record<string, unknown> | undefined,\n    private readonly key: string | undefined,\n    private readonly explicitMediaType?: string\n  ) {}\n\n  inferMediaType(): string | undefined {\n    return (\n      this.inferFromSiblingMime() ?? this.inferFromSiblingFormat() ?? this.inferFromParentType() ?? this.inferFromKey()\n    )\n  }\n\n  inferFromSiblingMime(): string | undefined {\n    if (this.explicitMediaType) return this.explicitMediaType\n    if (!this.parent) return undefined\n    for (const hint of MIME_HINT_KEYS) {\n      const v = this.parent[hint]\n      if (typeof v === 'string') return v\n    }\n    return undefined\n  }\n\n  inferFromSiblingFormat(): string | undefined {\n    if (!this.parent) return undefined\n    const fmt = this.parent.format\n    if (typeof fmt === 'string' && KNOWN_AUDIO_FORMATS.has(fmt.toLowerCase())) {\n      return `audio/${fmt.toLowerCase()}`\n    }\n    return undefined\n  }\n\n  inferFromParentType(): string | undefined {\n    if (!this.parent) return undefined\n    const t = this.parent.type\n    if (typeof t !== 'string') return undefined\n    if (t === 'image' || t === 'image_url' || t === 'input_image') return 'image'\n    if (t === 'audio' || t === 'input_audio') return 'audio'\n    if (t === 'video' || t === 'video_url') return 'video'\n    if (FILE_FAMILY_TYPES.has(t)) return 'application/octet-stream'\n    return undefined\n  }\n\n  inferFromKey(): string | undefined {\n    if (!this.key) return undefined\n    const key = this.key.toLowerCase()\n    if (key.includes('audio')) return 'audio'\n    if (key.includes('video')) return 'video'\n    if (key.includes('image')) return 'image'\n    if (key.includes('file') || key.includes('document')) return 'application/octet-stream'\n    return undefined\n  }\n\n  hasDefiniteBinaryData(): boolean {\n    if (\n      this.parent &&\n      this.key === 'data' &&\n      typeof this.parent.type === 'string' &&\n      TYPED_BINARY_DATA_TYPES.has(this.parent.type)\n    )\n      return true\n    if (!this.explicitMediaType && (!this.parent || !this.key || !STRONG_CONTEXT_KEYS.has(this.key))) return false\n    const mediaType = this.inferFromSiblingMime()\n    return mediaType !== undefined && !mediaType.toLowerCase().startsWith('text/')\n  }\n\n  signalsBinary(): boolean {\n    if (this.explicitMediaType) return true\n    if (this.parent) {\n      for (const hint of MIME_HINT_KEYS) {\n        if (typeof this.parent[hint] === 'string') return true\n      }\n      const fmt = this.parent.format\n      if (typeof fmt === 'string' && KNOWN_AUDIO_FORMATS.has(fmt.toLowerCase())) return true\n      const t = this.parent.type\n      if (typeof t === 'string' && STRONG_CONTEXT_TYPES.has(t)) return true\n    }\n    if (this.key && STRONG_CONTEXT_KEYS.has(this.key)) return true\n    return false\n  }\n}\n","import { Base64Recognizer } from './base64_recognizer'\nimport { MediaTypeContext } from './media_type_context'\n\nconst STRONG_CONTEXT_MIN_LENGTH = 64\nconst WEAK_CONTEXT_MIN_LENGTH = 1024\n\nexport class BinaryContentRedactor {\n  private visited: WeakSet<object> = new WeakSet()\n\n  constructor(private readonly recognizer: Base64Recognizer = new Base64Recognizer()) {}\n\n  redact<T>(value: T, mediaType?: string): T\n  redact(value: unknown, mediaType?: string): unknown {\n    this.visited = new WeakSet()\n    return this.walk(value, mediaType ? new MediaTypeContext(undefined, undefined, mediaType) : MediaTypeContext.EMPTY)\n  }\n\n  /** Redact one leaf while a caller owns bounded, type-preserving traversal. @internal */\n  redactLeaf(value: string | Uint8Array, context: MediaTypeContext): string {\n    return typeof value === 'string' ? this.redactString(value, context) : this.placeholderFor(context.inferMediaType())\n  }\n\n  private walk(value: unknown, ctx: MediaTypeContext): unknown {\n    if (value === null || value === undefined) return value\n    if (typeof value === 'string') return this.redactLeaf(value, ctx)\n    if (typeof value !== 'object') return value\n\n    // Buffer extends Uint8Array, so this branch catches both.\n    if (typeof Uint8Array !== 'undefined' && value instanceof Uint8Array) {\n      return this.redactLeaf(value, ctx)\n    }\n\n    if (this.visited.has(value)) return null\n    this.visited.add(value)\n\n    if (Array.isArray(value)) {\n      return value.map((item) => this.walk(item, ctx))\n    }\n\n    const obj = value as Record<string, unknown>\n    const out: Record<string, unknown> = {}\n    for (const k of Object.keys(obj)) {\n      Object.defineProperty(out, k, {\n        value: this.walk(obj[k], new MediaTypeContext(obj, k)),\n        enumerable: true,\n        writable: true,\n        configurable: true,\n      })\n    }\n    return out\n  }\n\n  private redactString(value: string, ctx: MediaTypeContext): string {\n    const hasDefiniteBinaryData = ctx.hasDefiniteBinaryData()\n    const recognitionValue = hasDefiniteBinaryData ? value.replace(/[\\r\\n]/g, '') : value\n    const minLength = hasDefiniteBinaryData\n      ? Math.min(recognitionValue.length, STRONG_CONTEXT_MIN_LENGTH)\n      : ctx.signalsBinary()\n        ? STRONG_CONTEXT_MIN_LENGTH\n        : WEAK_CONTEXT_MIN_LENGTH\n    const recognition = this.recognizer.recognize(recognitionValue, minLength)\n    switch (recognition.kind) {\n      case 'data-url':\n        return this.placeholderFor(recognition.mediaType)\n      case 'raw':\n        return this.placeholderFor(ctx.inferMediaType())\n      case 'none':\n        return value\n    }\n  }\n\n  private placeholderFor(mediaType?: string): string {\n    if (!mediaType) return '[base64 redacted]'\n    if (mediaType === 'application/octet-stream') return '[base64 file redacted]'\n    return `[base64 ${mediaType} redacted]`\n  }\n}\n","import type { Attributes } from '@opentelemetry/api'\nimport type { ReadableSpan, TimedEvent } from '@opentelemetry/sdk-trace-base'\n\nconst AI_SPAN_PREFIXES = ['gen_ai.', 'llm.', 'ai.', 'traceloop.'] as const\n\n/**\n * Returns `true` when the span is AI-related — its name or any attribute\n * key starts with `gen_ai.`, `llm.`, `ai.`, or `traceloop.`.\n */\nexport function isAISpan(span: ReadableSpan): boolean {\n  if (AI_SPAN_PREFIXES.some((prefix) => span.name.startsWith(prefix))) {\n    return true\n  }\n  const attributes = span.attributes\n  if (attributes) {\n    return Object.keys(attributes).some((key) => AI_SPAN_PREFIXES.some((prefix) => key.startsWith(prefix)))\n  }\n  return false\n}\n\n/** Copies rather than mutates: the span is shared across every registered processor/exporter. */\nexport function withAttributes(span: ReadableSpan, attributes: Attributes, events?: TimedEvent[]): ReadableSpan {\n  return Object.create(span, {\n    attributes: { value: attributes, enumerable: true, configurable: true },\n    ...(events ? { events: { value: events, enumerable: true, configurable: true } } : {}),\n  })\n}\n","import type { Attributes, AttributeValue } from '@opentelemetry/api'\nimport type { ReadableSpan, TimedEvent } from '@opentelemetry/sdk-trace-base'\n\nimport { BinaryContentRedactor } from '../sanitization/binary_content_redactor'\nimport { withAttributes } from './spans'\n\n// Deliberately always redacts here — the OTLP export path has no per-client passthrough gate.\nconst redactor = new BinaryContentRedactor()\n\nexport function redactSpan(span: ReadableSpan): ReadableSpan {\n  const attributes = span.attributes ? redactAttributes(span.attributes) : span.attributes\n  const events = span.events ? redactEvents(span.events) : span.events\n  if (attributes === span.attributes && events === span.events) {\n    return span\n  }\n  return withAttributes(span, attributes, events)\n}\n\nfunction redactAttributes(attributes: Attributes): Attributes {\n  let changed = false\n  const out: Attributes = {}\n  for (const key of Object.keys(attributes)) {\n    const value = attributes[key]\n    const redacted = value === undefined ? value : redactAttributeValue(value)\n    if (redacted !== value) {\n      changed = true\n    }\n    out[key] = redacted\n  }\n  return changed ? out : attributes\n}\n\nfunction redactEvents(events: TimedEvent[]): TimedEvent[] {\n  let changed = false\n  const out = events.map((event) => {\n    if (!event.attributes) {\n      return event\n    }\n    const attributes = redactAttributes(event.attributes)\n    if (attributes === event.attributes) {\n      return event\n    }\n    changed = true\n    return { ...event, attributes }\n  })\n  return changed ? out : events\n}\n\nfunction redactAttributeValue(value: AttributeValue): AttributeValue {\n  if (typeof value === 'string') {\n    return redactString(value)\n  }\n  if (isStringArray(value)) {\n    let changed = false\n    const out = value.map((item) => {\n      if (typeof item !== 'string') {\n        return item\n      }\n      const redacted = redactString(item)\n      if (redacted !== item) {\n        changed = true\n      }\n      return redacted\n    })\n    return changed ? out : value\n  }\n  return value\n}\n\nfunction isStringArray(value: AttributeValue): value is Array<string | null | undefined> {\n  return Array.isArray(value) && value.every((item) => typeof item !== 'number' && typeof item !== 'boolean')\n}\n\nfunction redactString(value: string): string {\n  const trimmed = value.trimStart()\n  if (trimmed.startsWith('{') || trimmed.startsWith('[')) {\n    const redacted = redactJson(value)\n    if (redacted !== undefined) {\n      return redacted\n    }\n  }\n  return redactor.redact(value)\n}\n\nfunction redactJson(value: string): string | undefined {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(value)\n  } catch {\n    return undefined\n  }\n  if (parsed === null || typeof parsed !== 'object') {\n    return undefined\n  }\n  const redactedStr = JSON.stringify(redactor.redact(parsed))\n  // Preserve the original string (and its formatting) when nothing was redacted.\n  return redactedStr === JSON.stringify(parsed) ? value : redactedStr\n}\n","// Warn when a wrapper's base_url points at the PostHog AI Gateway: the gateway\n// emits its own $ai_generation, so each call would be captured (and, for billable\n// products, billed) twice. We only warn — the wrapper's event carries data the\n// gateway never sees (groups, custom properties, trace hierarchy).\n\n// Keep in sync with the gateway's deployed hosts (see services/llm-gateway in the\n// main repo). gateway.us.posthog.com is live today; the rest are listed ahead of\n// any traffic moving to them.\nexport const POSTHOG_AI_GATEWAY_HOSTS: readonly string[] = [\n  'gateway.posthog.com',\n  'gateway.us.posthog.com',\n  'gateway.eu.posthog.com',\n  'ai-gateway.us.posthog.com',\n  'ai-gateway.eu.posthog.com',\n]\n\n// Swap for the dedicated AI Gateway page once it ships.\nconst GATEWAY_DOCS_URL = 'https://posthog.com/docs/ai-observability'\n\nconst extractHost = (baseURL: string): string | undefined => {\n  try {\n    // Tolerate bare hosts that omit a scheme, e.g. \"gateway.us.posthog.com/v1\".\n    const hasScheme = /^[a-z][a-z0-9+.-]*:\\/\\//i.test(baseURL)\n    return new URL(hasScheme ? baseURL : `https://${baseURL}`).hostname.toLowerCase()\n  } catch {\n    return undefined\n  }\n}\n\nexport const isPostHogAiGatewayUrl = (baseURL: string | undefined | null): boolean => {\n  if (!baseURL) {\n    return false\n  }\n  const host = extractHost(baseURL)\n  return host !== undefined && POSTHOG_AI_GATEWAY_HOSTS.includes(host)\n}\n\n// Warns on every gateway call by design: the misconfiguration is impossible to\n// miss that way, and a doubled bill is worse than noisy logs.\nexport const warnIfPostHogAiGateway = (baseURL: string | undefined | null): void => {\n  if (!isPostHogAiGatewayUrl(baseURL)) {\n    return\n  }\n  console.warn(\n    '[PostHog] The PostHog AI wrapper is pointed at the PostHog AI Gateway. ' +\n      'Both capture $ai_generation, so every call is double-counted and double-billed. ' +\n      `Use one or the other — see ${GATEWAY_DOCS_URL}.`\n  )\n}\n\n// OTel spans don't pass through captureAiGeneration, so detect the gateway from\n// the span's host/URL attributes instead. These follow the GenAI / HTTP semantic\n// conventions: `server.address` is a bare host, `url.full` a full URL, both of\n// which isPostHogAiGatewayUrl accepts.\nconst OTEL_GATEWAY_URL_ATTRIBUTES = ['server.address', 'url.full'] as const\n\nexport const warnIfPostHogAiGatewayOtelAttributes = (attributes: Record<string, unknown> | undefined): void => {\n  if (!attributes) {\n    return\n  }\n  for (const key of OTEL_GATEWAY_URL_ATTRIBUTES) {\n    const value = attributes[key]\n    if (typeof value === 'string' && isPostHogAiGatewayUrl(value)) {\n      warnIfPostHogAiGateway(value)\n      return\n    }\n  }\n}\n","import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http'\nimport type { ReadableSpan } from '@opentelemetry/sdk-trace-base'\n\nimport { redactSpan } from './redact'\nimport { isAISpan } from './spans'\nimport { warnIfPostHogAiGatewayOtelAttributes } from '../gatewayWarning'\n\nconst DEFAULT_OTEL_HOST = 'https://us.i.posthog.com'\n// OpenTelemetry's ExportResultCode.SUCCESS is 0. Keep this local so loading the\n// published subpath does not require the exporter package's transitive dependencies.\nconst EXPORT_SUCCESS = 0\n\nfunction normalizeToken(value?: unknown): string {\n  return typeof value === 'string' ? value.trim() : ''\n}\n\nfunction normalizeHost(value?: unknown): string {\n  const normalizedValue = typeof value === 'string' ? value.trim() : ''\n  return normalizedValue || DEFAULT_OTEL_HOST\n}\n\n/**\n * Options for the PostHogTraceExporter. `projectToken` is required; a blank token disables the\n * exporter as a defensive no-op. You can also optionally override the `host` URL. `host` defaults to `https://us.i.posthog.com`.\n *\n * @example\n * ```ts\n * import { PostHogTraceExporter } from '@posthog/ai/otel'\n *\n * new PostHogTraceExporter({ projectToken: 'phc_...' })\n * ```\n *\n * @example\n * ```ts\n * import { PostHogTraceExporter } from '@posthog/ai/otel'\n *\n * new PostHogTraceExporter({ projectToken: 'phc_...', host: 'https://eu.i.posthog.com' })\n * ```\n */\nexport type PostHogTraceExporterOptions = { projectToken: string; host?: string }\n\n/**\n * An OpenTelemetry `TraceExporter` that sends AI traces to PostHog's OTLP\n * ingestion endpoint. PostHog converts `gen_ai.*` spans into\n * `$ai_generation` events server-side.\n *\n * Only AI-related spans (those whose name or attribute keys start with\n * `gen_ai.`, `llm.`, `ai.`, or `traceloop.`) are exported; all other\n * spans are silently dropped.\n *\n * Use this when the API you're integrating with only accepts a\n * `TraceExporter` (e.g. Vercel's `registerOTel`) or when you need to\n * plug PostHog into an existing processor chain. Otherwise prefer\n * {@link PostHogSpanProcessor}, which is self-contained.\n *\n * `projectToken` is required; a blank token disables the exporter as a defensive no-op.\n * You can also optionally override the `host` URL.\n *\n * Exporters only see finished spans, so they can't add per-request PostHog context;\n * use {@link PostHogSpanProcessor} with `client` for that.\n *\n * @example\n * ```ts\n * import { PostHogTraceExporter } from '@posthog/ai/otel'\n * import { registerOTel } from '@vercel/otel'\n *\n * registerOTel({\n *   serviceName: 'my-app',\n *   traceExporter: new PostHogTraceExporter({ projectToken: 'phc_...' }),\n * })\n * ```\n */\nexport class PostHogTraceExporter extends OTLPTraceExporter {\n  private readonly disabled: boolean\n\n  constructor(options: PostHogTraceExporterOptions) {\n    const token = normalizeToken(options.projectToken)\n    const disabled = !token\n    const host = token ? new URL(normalizeHost(options.host)).origin : DEFAULT_OTEL_HOST\n    super({\n      url: `${host}/i/v0/ai/otel`,\n      headers: token\n        ? {\n            Authorization: `Bearer ${token}`,\n          }\n        : {},\n    })\n\n    this.disabled = disabled\n    if (this.disabled) {\n      console.warn('[PostHogTraceExporter] projectToken is missing or blank; the exporter will be disabled.')\n    }\n  }\n\n  override export(spans: ReadableSpan[], resultCallback: (result: { code: number; error?: Error }) => void): void {\n    if (this.disabled) {\n      // Intentionally report success: missing or blank tokens disable exporting as a compatibility no-op.\n      // Reporting failure would make OpenTelemetry treat every span as an export error.\n      resultCallback({ code: EXPORT_SUCCESS })\n      return\n    }\n\n    const aiSpans = spans.filter(isAISpan)\n    if (aiSpans.length === 0) {\n      resultCallback({ code: EXPORT_SUCCESS })\n      return\n    }\n    for (const span of aiSpans) {\n      warnIfPostHogAiGatewayOtelAttributes(span.attributes)\n    }\n    super.export(aiSpans.map(redactSpan), resultCallback)\n  }\n}\n","import type { AttributeValue, Attributes } from '@opentelemetry/api'\nimport type { ReadableSpan } from '@opentelemetry/sdk-trace-base'\n\nimport { withAttributes } from './spans'\n\nexport type CapturedContext = {\n  distinctId?: string\n  sessionId?: string\n  properties?: Record<string, unknown>\n}\n\n// Structural so declarations type-check against posthog-node versions that have no getContext.\nexport type PostHogContextSource = {\n  getContext?(): CapturedContext | undefined\n}\n\nconst DISTINCT_ID_ATTRIBUTE = 'posthog.distinct_id'\nconst SESSION_ID_ATTRIBUTE = '$session_id'\n\n// Ingestion prefers posthog.distinct_id, so adding it would override the user a span already names.\nconst IDENTITY_ATTRIBUTES = [\n  DISTINCT_ID_ATTRIBUTE,\n  'user.id',\n  'ai.telemetry.metadata.posthog_distinct_id',\n  'ai.settings.context.posthog_distinct_id',\n]\n\ntype Primitive = string | number | boolean\n\nfunction isPrimitive(value: unknown): value is Primitive {\n  return (\n    typeof value === 'string' || typeof value === 'boolean' || (typeof value === 'number' && Number.isFinite(value))\n  )\n}\n\nfunction isHomogeneousPrimitiveArray(value: unknown): value is string[] | number[] | boolean[] {\n  return Array.isArray(value) && value.every((item) => isPrimitive(item) && typeof item === typeof value[0])\n}\n\nfunction rejectNonFinite(_key: string, value: unknown): unknown {\n  if (typeof value === 'number' && !Number.isFinite(value)) {\n    throw new TypeError('non-finite number')\n  }\n  return value\n}\n\nfunction toAttributeValue(value: unknown): AttributeValue | undefined {\n  if (value === undefined || value === null || value === '') {\n    return undefined\n  }\n  if (isPrimitive(value) || isHomogeneousPrimitiveArray(value)) {\n    return value\n  }\n  try {\n    const json = JSON.stringify(value, rejectNonFinite)\n    if (json === undefined || json === 'null') {\n      return undefined\n    }\n    return json.startsWith('\"') ? String(JSON.parse(json)) || undefined : json\n  } catch {\n    return undefined\n  }\n}\n\nfunction hasValues(context: CapturedContext): boolean {\n  return Boolean(context.distinctId || context.sessionId || Object.keys(context.properties ?? {}).length > 0)\n}\n\nexport function captureContext(client: PostHogContextSource): CapturedContext | undefined {\n  try {\n    // posthog-node versions before getContext existed are still within the peer range.\n    if (typeof client.getContext !== 'function') {\n      return undefined\n    }\n    const context = client.getContext()\n    return context && hasValues(context) ? context : undefined\n  } catch {\n    // Capturing is best effort and must never break the instrumented call.\n    return undefined\n  }\n}\n\nfunction toAttributes(context: CapturedContext, spanAttributes: Attributes): Attributes {\n  const hasIdentity = IDENTITY_ATTRIBUTES.some((key) => spanAttributes[key] !== undefined)\n  const values: Record<string, unknown> = {\n    ...(context.distinctId && !hasIdentity ? { [DISTINCT_ID_ATTRIBUTE]: context.distinctId } : {}),\n    ...(context.sessionId ? { [SESSION_ID_ATTRIBUTE]: context.sessionId } : {}),\n    ...context.properties,\n  }\n  const attributes: Attributes = {}\n  for (const [key, value] of Object.entries(values)) {\n    if (hasIdentity && key === DISTINCT_ID_ATTRIBUTE) {\n      continue\n    }\n    const attribute = toAttributeValue(value)\n    if (attribute !== undefined) {\n      attributes[key] = attribute\n    }\n  }\n  return attributes\n}\n\nexport function withRequestContext(span: ReadableSpan, context: CapturedContext): ReadableSpan {\n  try {\n    const attributes = toAttributes(context, span.attributes)\n    if (Object.keys(attributes).length === 0) {\n      return span\n    }\n    return withAttributes(span, { ...attributes, ...span.attributes })\n  } catch {\n    // Conversion runs inside span.end() and must never break the instrumented call.\n    return span\n  }\n}\n","import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http'\nimport type { Context } from '@opentelemetry/api'\nimport { BatchSpanProcessor, type SpanProcessor, type ReadableSpan, type Span } from '@opentelemetry/sdk-trace-base'\n\nimport { redactSpan } from './redact'\nimport { captureContext, withRequestContext, type CapturedContext, type PostHogContextSource } from './requestContext'\nimport { isAISpan } from './spans'\nimport { warnIfPostHogAiGatewayOtelAttributes } from '../gatewayWarning'\n\nconst DEFAULT_OTEL_HOST = 'https://us.i.posthog.com'\n\nfunction normalizeToken(value?: unknown): string {\n  return typeof value === 'string' ? value.trim() : ''\n}\n\nfunction normalizeHost(value?: unknown): string {\n  const normalizedValue = typeof value === 'string' ? value.trim() : ''\n  return normalizedValue || DEFAULT_OTEL_HOST\n}\n\nexport interface PostHogSpanProcessorOptions {\n  /**\n   * Your PostHog project token (the `phc_...` key). Required; a blank token disables the\n   * processor as a defensive no-op.\n   */\n  projectToken: string\n\n  /**\n   * PostHog host URL. Defaults to `https://us.i.posthog.com`.\n   */\n  host?: string\n\n  /**\n   * Your posthog-node client. When set, each AI span this processor exports gets the distinct ID,\n   * session ID (as `$session_id`) and properties from the context entered with `client.withContext()` or\n   * `client.enterContext()`. Other processors on the provider don't see them.\n   * Attributes already on the span win over properties, which win over the context's IDs.\n   * The context is captured when a span starts, but its properties are read when the span ends,\n   * so mutating a context object while a span is open shows up in the export.\n   * Must be the same posthog-node instance you call `withContext` or `enterContext` on.\n   */\n  client?: PostHogContextSource\n\n  /**\n   * @internal Injected processor for testing — bypasses exporter creation.\n   */\n  _spanProcessor?: SpanProcessor\n}\n\nclass NoopSpanProcessor implements SpanProcessor {\n  onStart(_span: Span, _parentContext: Context): void {\n    return\n  }\n  onEnd(_span: ReadableSpan): void {\n    return\n  }\n  shutdown(): Promise<void> {\n    return Promise.resolve()\n  }\n  forceFlush(): Promise<void> {\n    return Promise.resolve()\n  }\n}\n\n/**\n * An OpenTelemetry `SpanProcessor` that sends AI traces to PostHog.\n *\n * `projectToken` is required; a blank token disables the processor as a defensive no-op.\n *\n * Internally batches spans and exports them to PostHog's OTLP ingestion\n * endpoint. Only AI-related spans (those whose name or attribute keys\n * start with `gen_ai.`, `llm.`, `ai.`, or `traceloop.`) are exported;\n * all other spans are silently dropped.\n *\n * Request-scoped and serverless runtimes should keep a reference to this\n * processor and await {@link PostHogSpanProcessor.forceFlush} before the request\n * lifecycle ends. This waits for queued exports without sending one request per span.\n *\n * This is the recommended integration point when your setup accepts a\n * `SpanProcessor`. If you need a `TraceExporter` instead (e.g. for\n * Vercel's `registerOTel`), use {@link PostHogTraceExporter}.\n *\n * @example\n * ```ts\n * import { PostHogSpanProcessor } from '@posthog/ai/otel'\n * import { NodeSDK } from '@opentelemetry/sdk-node'\n *\n * const processor = new PostHogSpanProcessor({ projectToken: 'phc_...' })\n * const sdk = new NodeSDK({ spanProcessors: [processor] })\n * sdk.start()\n *\n * // In request-scoped runtimes, wait for queued exports before returning.\n * await processor.forceFlush()\n * ```\n *\n * @example\n * ```ts\n * // Per request: pass your posthog-node client, then wrap the work in a context.\n * const processor = new PostHogSpanProcessor({ projectToken: 'phc_...', client: posthog })\n * await posthog.withContext({ distinctId: user.id, properties: { plan: 'pro' } }, () => handleRequest())\n * ```\n */\nexport class PostHogSpanProcessor implements SpanProcessor {\n  private readonly inner: SpanProcessor\n  private readonly client?: PostHogContextSource\n  private readonly capturedContexts = new WeakMap<ReadableSpan, CapturedContext>()\n\n  constructor(options: PostHogSpanProcessorOptions) {\n    const token = normalizeToken(options.projectToken)\n    if (!token) {\n      console.warn('[PostHogSpanProcessor] projectToken is missing or blank; the processor will be disabled.')\n      this.inner = new NoopSpanProcessor()\n      return\n    }\n    this.client = options.client\n\n    if (options._spanProcessor) {\n      this.inner = options._spanProcessor\n    } else {\n      const host = new URL(normalizeHost(options.host)).origin\n      const exporter = new OTLPTraceExporter({\n        url: `${host}/i/v0/ai/otel`,\n        headers: {\n          Authorization: `Bearer ${token}`,\n        },\n      })\n      this.inner = new BatchSpanProcessor(exporter)\n    }\n  }\n\n  onStart(span: Span, parentContext: Context): void {\n    const captured = this.client && captureContext(this.client)\n    if (captured) {\n      this.capturedContexts.set(span, captured)\n    }\n    // Forwarded unconditionally — filtering happens in onEnd. We can't filter\n    // here because the span hasn't finished yet and may not have AI attributes\n    // set. BatchSpanProcessor.onStart is a no-op so this is safe.\n    this.inner.onStart(span, parentContext)\n  }\n\n  onEnd(span: ReadableSpan): void {\n    const captured = this.capturedContexts.get(span)\n    this.capturedContexts.delete(span)\n    if (isAISpan(span)) {\n      warnIfPostHogAiGatewayOtelAttributes(span.attributes)\n      this.inner.onEnd(redactSpan(captured ? withRequestContext(span, captured) : span))\n    }\n  }\n\n  shutdown(): Promise<void> {\n    return this.inner.shutdown()\n  }\n\n  forceFlush(): Promise<void> {\n    return this.inner.forceFlush()\n  }\n}\n"],"mappings":";;;;AAAA,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAI3B,IAAa,mBAAb,MAA8B;CAC5B,UAAU,OAAe,WAAsC;EAC7D,MAAM,UAAU,mBAAmB,KAAK,KAAK;EAC7C,IAAI,SAAS,OAAO;GAAE,MAAM;GAAY,WAAW,QAAQ;EAAG;EAE9D,IAAI,MAAM,SAAS,WAAW,OAAO,EAAE,MAAM,OAAO;EAEpD,MAAM,mBAAmB,MAAM,MAAM,GAAG,SAAS;EACjD,IAAI,mBAAmB,KAAK,gBAAgB,GAC1C,OAAO,EAAE,MAAM,MAAM;OAErB,OAAO,EAAE,MAAM,OAAO;CAE1B;AACF;;;ACnBA,MAAM,iBAAiB;CAAC;CAAa;CAAc;CAAY;AAAW;AAE1E,MAAM,sCAAsB,IAAI,IAAI;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,uCAAuB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,oCAAoB,IAAI,IAAI;CAAC;CAAQ;CAAc;CAAY;CAAS;AAAW,CAAC;AAC1F,MAAM,0CAA0B,IAAI,IAAI;CAAC;CAAS;CAAS;CAAS;AAAU,CAAC;AAE/E,MAAM,sCAAsB,IAAI,IAAI;CAAC;CAAO;CAAO;CAAO;CAAQ;CAAO;CAAO;AAAM,CAAC;AAEvF,IAAa,mBAAb,MAAa,iBAAiB;;EACJ,KAAA,QAAA,IAAI,iBAAiB,KAAA,GAAW,KAAA,CAAS;;CAEjE,YACE,QACA,KACA,mBACA;EAHiB,KAAA,SAAA;EACA,KAAA,MAAA;EACA,KAAA,oBAAA;CAChB;CAEH,iBAAqC;EACnC,OACE,KAAK,qBAAqB,KAAK,KAAK,uBAAuB,KAAK,KAAK,oBAAoB,KAAK,KAAK,aAAa;CAEpH;CAEA,uBAA2C;EACzC,IAAI,KAAK,mBAAmB,OAAO,KAAK;EACxC,IAAI,CAAC,KAAK,QAAQ,OAAO,KAAA;EACzB,KAAK,MAAM,QAAQ,gBAAgB;GACjC,MAAM,IAAI,KAAK,OAAO;GACtB,IAAI,OAAO,MAAM,UAAU,OAAO;EACpC;CAEF;CAEA,yBAA6C;EAC3C,IAAI,CAAC,KAAK,QAAQ,OAAO,KAAA;EACzB,MAAM,MAAM,KAAK,OAAO;EACxB,IAAI,OAAO,QAAQ,YAAY,oBAAoB,IAAI,IAAI,YAAY,CAAC,GACtE,OAAO,SAAS,IAAI,YAAY;CAGpC;CAEA,sBAA0C;EACxC,IAAI,CAAC,KAAK,QAAQ,OAAO,KAAA;EACzB,MAAM,IAAI,KAAK,OAAO;EACtB,IAAI,OAAO,MAAM,UAAU,OAAO,KAAA;EAClC,IAAI,MAAM,WAAW,MAAM,eAAe,MAAM,eAAe,OAAO;EACtE,IAAI,MAAM,WAAW,MAAM,eAAe,OAAO;EACjD,IAAI,MAAM,WAAW,MAAM,aAAa,OAAO;EAC/C,IAAI,kBAAkB,IAAI,CAAC,GAAG,OAAO;CAEvC;CAEA,eAAmC;EACjC,IAAI,CAAC,KAAK,KAAK,OAAO,KAAA;EACtB,MAAM,MAAM,KAAK,IAAI,YAAY;EACjC,IAAI,IAAI,SAAS,OAAO,GAAG,OAAO;EAClC,IAAI,IAAI,SAAS,OAAO,GAAG,OAAO;EAClC,IAAI,IAAI,SAAS,OAAO,GAAG,OAAO;EAClC,IAAI,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,UAAU,GAAG,OAAO;CAE/D;CAEA,wBAAiC;EAC/B,IACE,KAAK,UACL,KAAK,QAAQ,UACb,OAAO,KAAK,OAAO,SAAS,YAC5B,wBAAwB,IAAI,KAAK,OAAO,IAAI,GAE5C,OAAO;EACT,IAAI,CAAC,KAAK,sBAAsB,CAAC,KAAK,UAAU,CAAC,KAAK,OAAO,CAAC,oBAAoB,IAAI,KAAK,GAAG,IAAI,OAAO;EACzG,MAAM,YAAY,KAAK,qBAAqB;EAC5C,OAAO,cAAc,KAAA,KAAa,CAAC,UAAU,YAAY,CAAC,CAAC,WAAW,OAAO;CAC/E;CAEA,gBAAyB;EACvB,IAAI,KAAK,mBAAmB,OAAO;EACnC,IAAI,KAAK,QAAQ;GACf,KAAK,MAAM,QAAQ,gBACjB,IAAI,OAAO,KAAK,OAAO,UAAU,UAAU,OAAO;GAEpD,MAAM,MAAM,KAAK,OAAO;GACxB,IAAI,OAAO,QAAQ,YAAY,oBAAoB,IAAI,IAAI,YAAY,CAAC,GAAG,OAAO;GAClF,MAAM,IAAI,KAAK,OAAO;GACtB,IAAI,OAAO,MAAM,YAAY,qBAAqB,IAAI,CAAC,GAAG,OAAO;EACnE;EACA,IAAI,KAAK,OAAO,oBAAoB,IAAI,KAAK,GAAG,GAAG,OAAO;EAC1D,OAAO;CACT;AACF;;;ACtHA,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAEhC,IAAa,wBAAb,MAAmC;CAGjC,YAAY,aAAgD,IAAI,iBAAiB,GAAG;EAAvD,KAAA,aAAA;EAFM,KAAA,0BAAA,IAAI,QAAQ;CAEsC;CAGrF,OAAO,OAAgB,WAA6B;EAClD,KAAK,0BAAU,IAAI,QAAQ;EAC3B,OAAO,KAAK,KAAK,OAAO,YAAY,IAAI,iBAAiB,KAAA,GAAW,KAAA,GAAW,SAAS,IAAI,iBAAiB,KAAK;CACpH;;CAGA,WAAW,OAA4B,SAAmC;EACxE,OAAO,OAAO,UAAU,WAAW,KAAK,aAAa,OAAO,OAAO,IAAI,KAAK,eAAe,QAAQ,eAAe,CAAC;CACrH;CAEA,KAAa,OAAgB,KAAgC;EAC3D,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;EAClD,IAAI,OAAO,UAAU,UAAU,OAAO,KAAK,WAAW,OAAO,GAAG;EAChE,IAAI,OAAO,UAAU,UAAU,OAAO;EAGtC,IAAI,OAAO,eAAe,eAAe,iBAAiB,YACxD,OAAO,KAAK,WAAW,OAAO,GAAG;EAGnC,IAAI,KAAK,QAAQ,IAAI,KAAK,GAAG,OAAO;EACpC,KAAK,QAAQ,IAAI,KAAK;EAEtB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,SAAS,KAAK,KAAK,MAAM,GAAG,CAAC;EAGjD,MAAM,MAAM;EACZ,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,KAAK,OAAO,KAAK,GAAG,GAC7B,OAAO,eAAe,KAAK,GAAG;GAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,IAAI,iBAAiB,KAAK,CAAC,CAAC;GACrD,YAAY;GACZ,UAAU;GACV,cAAc;EAChB,CAAC;EAEH,OAAO;CACT;CAEA,aAAqB,OAAe,KAA+B;EACjE,MAAM,wBAAwB,IAAI,sBAAsB;EACxD,MAAM,mBAAmB,wBAAwB,MAAM,QAAQ,WAAW,EAAE,IAAI;EAChF,MAAM,YAAY,wBACd,KAAK,IAAI,iBAAiB,QAAQ,yBAAyB,IAC3D,IAAI,cAAc,IAChB,4BACA;EACN,MAAM,cAAc,KAAK,WAAW,UAAU,kBAAkB,SAAS;EACzE,QAAQ,YAAY,MAApB;GACE,KAAK,YACH,OAAO,KAAK,eAAe,YAAY,SAAS;GAClD,KAAK,OACH,OAAO,KAAK,eAAe,IAAI,eAAe,CAAC;GACjD,KAAK,QACH,OAAO;EACX;CACF;CAEA,eAAuB,WAA4B;EACjD,IAAI,CAAC,WAAW,OAAO;EACvB,IAAI,cAAc,4BAA4B,OAAO;EACrD,OAAO,WAAW,UAAU;CAC9B;AACF;;;ACzEA,MAAM,mBAAmB;CAAC;CAAW;CAAQ;CAAO;AAAY;;;;;AAMhE,SAAgB,SAAS,MAA6B;CACpD,IAAI,iBAAiB,MAAM,WAAW,KAAK,KAAK,WAAW,MAAM,CAAC,GAChE,OAAO;CAET,MAAM,aAAa,KAAK;CACxB,IAAI,YACF,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,MAAM,QAAQ,iBAAiB,MAAM,WAAW,IAAI,WAAW,MAAM,CAAC,CAAC;CAExG,OAAO;AACT;;AAGA,SAAgB,eAAe,MAAoB,YAAwB,QAAqC;CAC9G,OAAO,OAAO,OAAO,MAAM;EACzB,YAAY;GAAE,OAAO;GAAY,YAAY;GAAM,cAAc;EAAK;EACtE,GAAI,SAAS,EAAE,QAAQ;GAAE,OAAO;GAAQ,YAAY;GAAM,cAAc;EAAK,EAAE,IAAI,CAAC;CACtF,CAAC;AACH;;;ACnBA,MAAM,WAAW,IAAI,sBAAsB;AAE3C,SAAgB,WAAW,MAAkC;CAC3D,MAAM,aAAa,KAAK,aAAa,iBAAiB,KAAK,UAAU,IAAI,KAAK;CAC9E,MAAM,SAAS,KAAK,SAAS,aAAa,KAAK,MAAM,IAAI,KAAK;CAC9D,IAAI,eAAe,KAAK,cAAc,WAAW,KAAK,QACpD,OAAO;CAET,OAAO,eAAe,MAAM,YAAY,MAAM;AAChD;AAEA,SAAS,iBAAiB,YAAoC;CAC5D,IAAI,UAAU;CACd,MAAM,MAAkB,CAAC;CACzB,KAAK,MAAM,OAAO,OAAO,KAAK,UAAU,GAAG;EACzC,MAAM,QAAQ,WAAW;EACzB,MAAM,WAAW,UAAU,KAAA,IAAY,QAAQ,qBAAqB,KAAK;EACzE,IAAI,aAAa,OACf,UAAU;EAEZ,IAAI,OAAO;CACb;CACA,OAAO,UAAU,MAAM;AACzB;AAEA,SAAS,aAAa,QAAoC;CACxD,IAAI,UAAU;CACd,MAAM,MAAM,OAAO,KAAK,UAAU;EAChC,IAAI,CAAC,MAAM,YACT,OAAO;EAET,MAAM,aAAa,iBAAiB,MAAM,UAAU;EACpD,IAAI,eAAe,MAAM,YACvB,OAAO;EAET,UAAU;EACV,OAAO;GAAE,GAAG;GAAO;EAAW;CAChC,CAAC;CACD,OAAO,UAAU,MAAM;AACzB;AAEA,SAAS,qBAAqB,OAAuC;CACnE,IAAI,OAAO,UAAU,UACnB,OAAO,aAAa,KAAK;CAE3B,IAAI,cAAc,KAAK,GAAG;EACxB,IAAI,UAAU;EACd,MAAM,MAAM,MAAM,KAAK,SAAS;GAC9B,IAAI,OAAO,SAAS,UAClB,OAAO;GAET,MAAM,WAAW,aAAa,IAAI;GAClC,IAAI,aAAa,MACf,UAAU;GAEZ,OAAO;EACT,CAAC;EACD,OAAO,UAAU,MAAM;CACzB;CACA,OAAO;AACT;AAEA,SAAS,cAAc,OAAkE;CACvF,OAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,SAAS;AAC5G;AAEA,SAAS,aAAa,OAAuB;CAC3C,MAAM,UAAU,MAAM,UAAU;CAChC,IAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,GAAG;EACtD,MAAM,WAAW,WAAW,KAAK;EACjC,IAAI,aAAa,KAAA,GACf,OAAO;CAEX;CACA,OAAO,SAAS,OAAO,KAAK;AAC9B;AAEA,SAAS,WAAW,OAAmC;CACrD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,KAAK;CAC3B,QAAQ;EACN;CACF;CACA,IAAI,WAAW,QAAQ,OAAO,WAAW,UACvC;CAEF,MAAM,cAAc,KAAK,UAAU,SAAS,OAAO,MAAM,CAAC;CAE1D,OAAO,gBAAgB,KAAK,UAAU,MAAM,IAAI,QAAQ;AAC1D;;;ACzFA,MAAa,2BAA8C;CACzD;CACA;CACA;CACA;CACA;AACF;AAGA,MAAM,mBAAmB;AAEzB,MAAM,eAAe,YAAwC;CAC3D,IAAI;EAEF,MAAM,YAAY,2BAA2B,KAAK,OAAO;EACzD,OAAO,IAAI,IAAI,YAAY,UAAU,WAAW,SAAS,CAAC,CAAC,SAAS,YAAY;CAClF,QAAQ;EACN;CACF;AACF;AAEA,MAAa,yBAAyB,YAAgD;CACpF,IAAI,CAAC,SACH,OAAO;CAET,MAAM,OAAO,YAAY,OAAO;CAChC,OAAO,SAAS,KAAA,KAAa,yBAAyB,SAAS,IAAI;AACrE;AAIA,MAAa,0BAA0B,YAA6C;CAClF,IAAI,CAAC,sBAAsB,OAAO,GAChC;CAEF,QAAQ,KACN,sLAEgC,iBAAiB,EACnD;AACF;AAMA,MAAM,8BAA8B,CAAC,kBAAkB,UAAU;AAEjE,MAAa,wCAAwC,eAA0D;CAC7G,IAAI,CAAC,YACH;CAEF,KAAK,MAAM,OAAO,6BAA6B;EAC7C,MAAM,QAAQ,WAAW;EACzB,IAAI,OAAO,UAAU,YAAY,sBAAsB,KAAK,GAAG;GAC7D,uBAAuB,KAAK;GAC5B;EACF;CACF;AACF;;;AC5DA,MAAMA,sBAAoB;AAG1B,MAAM,iBAAiB;AAEvB,SAASC,iBAAe,OAAyB;CAC/C,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACpD;AAEA,SAASC,gBAAc,OAAyB;CAE9C,QADwB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,OACzCF;AAC5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,IAAa,uBAAb,cAA0CG,wCAAAA,kBAAkB;CAG1D,YAAY,SAAsC;EAChD,MAAM,QAAQF,iBAAe,QAAQ,YAAY;EACjD,MAAM,WAAW,CAAC;EAClB,MAAM,OAAO,QAAQ,IAAI,IAAIC,gBAAc,QAAQ,IAAI,CAAC,CAAC,CAAC,SAASF;EACnE,MAAM;GACJ,KAAK,GAAG,KAAK;GACb,SAAS,QACL,EACE,eAAe,UAAU,QAC3B,IACA,CAAC;EACP,CAAC;EAED,KAAK,WAAW;EAChB,IAAI,KAAK,UACP,QAAQ,KAAK,yFAAyF;CAE1G;CAEA,OAAgB,OAAuB,gBAAyE;EAC9G,IAAI,KAAK,UAAU;GAGjB,eAAe,EAAE,MAAM,eAAe,CAAC;GACvC;EACF;EAEA,MAAM,UAAU,MAAM,OAAO,QAAQ;EACrC,IAAI,QAAQ,WAAW,GAAG;GACxB,eAAe,EAAE,MAAM,eAAe,CAAC;GACvC;EACF;EACA,KAAK,MAAM,QAAQ,SACjB,qCAAqC,KAAK,UAAU;EAEtD,MAAM,OAAO,QAAQ,IAAI,UAAU,GAAG,cAAc;CACtD;AACF;;;AChGA,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAG7B,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;AACF;AAIA,SAAS,YAAY,OAAoC;CACvD,OACE,OAAO,UAAU,YAAY,OAAO,UAAU,aAAc,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AAElH;AAEA,SAAS,4BAA4B,OAA0D;CAC7F,OAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,YAAY,IAAI,KAAK,OAAO,SAAS,OAAO,MAAM,EAAE;AAC3G;AAEA,SAAS,gBAAgB,MAAc,OAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,UAAU,mBAAmB;CAEzC,OAAO;AACT;AAEA,SAAS,iBAAiB,OAA4C;CACpE,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IACrD;CAEF,IAAI,YAAY,KAAK,KAAK,4BAA4B,KAAK,GACzD,OAAO;CAET,IAAI;EACF,MAAM,OAAO,KAAK,UAAU,OAAO,eAAe;EAClD,IAAI,SAAS,KAAA,KAAa,SAAS,QACjC;EAEF,OAAO,KAAK,WAAW,IAAG,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,KAAA,IAAY;CACxE,QAAQ;EACN;CACF;AACF;AAEA,SAAS,UAAU,SAAmC;CACpD,OAAO,QAAQ,QAAQ,cAAc,QAAQ,aAAa,OAAO,KAAK,QAAQ,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5G;AAEA,SAAgB,eAAe,QAA2D;CACxF,IAAI;EAEF,IAAI,OAAO,OAAO,eAAe,YAC/B;EAEF,MAAM,UAAU,OAAO,WAAW;EAClC,OAAO,WAAW,UAAU,OAAO,IAAI,UAAU,KAAA;CACnD,QAAQ;EAEN;CACF;AACF;AAEA,SAAS,aAAa,SAA0B,gBAAwC;CACtF,MAAM,cAAc,oBAAoB,MAAM,QAAQ,eAAe,SAAS,KAAA,CAAS;CACvF,MAAM,SAAkC;EACtC,GAAI,QAAQ,cAAc,CAAC,cAAc,GAAG,wBAAwB,QAAQ,WAAW,IAAI,CAAC;EAC5F,GAAI,QAAQ,YAAY,GAAG,uBAAuB,QAAQ,UAAU,IAAI,CAAC;EACzE,GAAG,QAAQ;CACb;CACA,MAAM,aAAyB,CAAC;CAChC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;EACjD,IAAI,eAAe,QAAQ,uBACzB;EAEF,MAAM,YAAY,iBAAiB,KAAK;EACxC,IAAI,cAAc,KAAA,GAChB,WAAW,OAAO;CAEtB;CACA,OAAO;AACT;AAEA,SAAgB,mBAAmB,MAAoB,SAAwC;CAC7F,IAAI;EACF,MAAM,aAAa,aAAa,SAAS,KAAK,UAAU;EACxD,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,WAAW,GACrC,OAAO;EAET,OAAO,eAAe,MAAM;GAAE,GAAG;GAAY,GAAG,KAAK;EAAW,CAAC;CACnE,QAAQ;EAEN,OAAO;CACT;AACF;;;ACxGA,MAAM,oBAAoB;AAE1B,SAAS,eAAe,OAAyB;CAC/C,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACpD;AAEA,SAAS,cAAc,OAAyB;CAE9C,QADwB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,OACzC;AAC5B;AA+BA,IAAM,oBAAN,MAAiD;CAC/C,QAAQ,OAAa,gBAA+B,CAEpD;CACA,MAAM,OAA2B,CAEjC;CACA,WAA0B;EACxB,OAAO,QAAQ,QAAQ;CACzB;CACA,aAA4B;EAC1B,OAAO,QAAQ,QAAQ;CACzB;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAa,uBAAb,MAA2D;CAKzD,YAAY,SAAsC;EAFd,KAAA,mCAAA,IAAI,QAAuC;EAG7E,MAAM,QAAQ,eAAe,QAAQ,YAAY;EACjD,IAAI,CAAC,OAAO;GACV,QAAQ,KAAK,0FAA0F;GACvG,KAAK,QAAQ,IAAI,kBAAkB;GACnC;EACF;EACA,KAAK,SAAS,QAAQ;EAEtB,IAAI,QAAQ,gBACV,KAAK,QAAQ,QAAQ;OAChB;GACL,MAAM,OAAO,IAAI,IAAI,cAAc,QAAQ,IAAI,CAAC,CAAC,CAAC;GAClD,MAAM,WAAW,IAAII,wCAAAA,kBAAkB;IACrC,KAAK,GAAG,KAAK;IACb,SAAS,EACP,eAAe,UAAU,QAC3B;GACF,CAAC;GACD,KAAK,QAAQ,IAAIC,8BAAAA,mBAAmB,QAAQ;EAC9C;CACF;CAEA,QAAQ,MAAY,eAA8B;EAChD,MAAM,WAAW,KAAK,UAAU,eAAe,KAAK,MAAM;EAC1D,IAAI,UACF,KAAK,iBAAiB,IAAI,MAAM,QAAQ;EAK1C,KAAK,MAAM,QAAQ,MAAM,aAAa;CACxC;CAEA,MAAM,MAA0B;EAC9B,MAAM,WAAW,KAAK,iBAAiB,IAAI,IAAI;EAC/C,KAAK,iBAAiB,OAAO,IAAI;EACjC,IAAI,SAAS,IAAI,GAAG;GAClB,qCAAqC,KAAK,UAAU;GACpD,KAAK,MAAM,MAAM,WAAW,WAAW,mBAAmB,MAAM,QAAQ,IAAI,IAAI,CAAC;EACnF;CACF;CAEA,WAA0B;EACxB,OAAO,KAAK,MAAM,SAAS;CAC7B;CAEA,aAA4B;EAC1B,OAAO,KAAK,MAAM,WAAW;CAC/B;AACF"}
+{"version":3,"file":"index.cjs","names":["redactJson","DEFAULT_OTEL_HOST","normalizeToken","normalizeHost","OTLPTraceExporter","OTLPTraceExporter","BatchSpanProcessor"],"sources":["../../src/sanitization/base64_recognizer.ts","../../src/sanitization/media_type_context.ts","../../src/sanitization/binary_content_redactor.ts","../../src/otel/spans.ts","../../src/typeGuards.ts","../../src/mcpCredentials.ts","../../src/otel/toolDefinitions.ts","../../src/otel/redact.ts","../../src/otel/privacy.ts","../../src/gatewayWarning.ts","../../src/otel/exporter.ts","../../src/privacyMode.ts","../../src/otel/requestContext.ts","../../src/otel/processor.ts"],"sourcesContent":["const DATA_URL_PREFIX_RE = /^data:([^;,\\s]+)(?:;[^;,\\s]+)*;base64,/i\nconst BASE64_ALPHABET_RE = /^[A-Za-z0-9+/_=-]+$/\n\nexport type Base64Recognition = { kind: 'data-url'; mediaType: string } | { kind: 'raw' } | { kind: 'none' }\n\nexport class Base64Recognizer {\n  recognize(value: string, minLength: number): Base64Recognition {\n    const dataUrl = DATA_URL_PREFIX_RE.exec(value)\n    if (dataUrl) return { kind: 'data-url', mediaType: dataUrl[1] }\n\n    if (value.length < minLength) return { kind: 'none' }\n\n    const confidencePrefix = value.slice(0, minLength)\n    if (BASE64_ALPHABET_RE.test(confidencePrefix)) {\n      return { kind: 'raw' }\n    } else {\n      return { kind: 'none' }\n    }\n  }\n}\n","const MIME_HINT_KEYS = ['mediaType', 'media_type', 'mimeType', 'mime_type'] as const\n\nconst STRONG_CONTEXT_KEYS = new Set([\n  'data',\n  'file_data',\n  'fileData',\n  'image_url',\n  'imageUrl',\n  'video_url',\n  'videoUrl',\n  'audio',\n  'audio_data',\n  'audioData',\n  'inline_data',\n  'inlineData',\n  'source',\n  'result',\n])\n\nconst STRONG_CONTEXT_TYPES = new Set([\n  'image',\n  'image_url',\n  'input_image',\n  'audio',\n  'input_audio',\n  'video',\n  'video_url',\n  'file',\n  'input_file',\n  'document',\n  'media',\n  'file-data',\n])\n\nconst FILE_FAMILY_TYPES = new Set(['file', 'input_file', 'document', 'media', 'file-data'])\nconst TYPED_BINARY_DATA_TYPES = new Set(['image', 'audio', 'video', 'document'])\n\nconst KNOWN_AUDIO_FORMATS = new Set(['wav', 'mp3', 'ogg', 'flac', 'm4a', 'aac', 'webm'])\n\nexport class MediaTypeContext {\n  static readonly EMPTY = new MediaTypeContext(undefined, undefined)\n\n  constructor(\n    private readonly parent: Record<string, unknown> | undefined,\n    private readonly key: string | undefined,\n    private readonly explicitMediaType?: string\n  ) {}\n\n  inferMediaType(): string | undefined {\n    return (\n      this.inferFromSiblingMime() ?? this.inferFromSiblingFormat() ?? this.inferFromParentType() ?? this.inferFromKey()\n    )\n  }\n\n  inferFromSiblingMime(): string | undefined {\n    if (this.explicitMediaType) return this.explicitMediaType\n    if (!this.parent) return undefined\n    for (const hint of MIME_HINT_KEYS) {\n      const v = this.parent[hint]\n      if (typeof v === 'string') return v\n    }\n    return undefined\n  }\n\n  inferFromSiblingFormat(): string | undefined {\n    if (!this.parent) return undefined\n    const fmt = this.parent.format\n    if (typeof fmt === 'string' && KNOWN_AUDIO_FORMATS.has(fmt.toLowerCase())) {\n      return `audio/${fmt.toLowerCase()}`\n    }\n    return undefined\n  }\n\n  inferFromParentType(): string | undefined {\n    if (!this.parent) return undefined\n    const t = this.parent.type\n    if (typeof t !== 'string') return undefined\n    if (t === 'image' || t === 'image_url' || t === 'input_image') return 'image'\n    if (t === 'audio' || t === 'input_audio') return 'audio'\n    if (t === 'video' || t === 'video_url') return 'video'\n    if (FILE_FAMILY_TYPES.has(t)) return 'application/octet-stream'\n    return undefined\n  }\n\n  inferFromKey(): string | undefined {\n    if (!this.key) return undefined\n    const key = this.key.toLowerCase()\n    if (key.includes('audio')) return 'audio'\n    if (key.includes('video')) return 'video'\n    if (key.includes('image')) return 'image'\n    if (key.includes('file') || key.includes('document')) return 'application/octet-stream'\n    return undefined\n  }\n\n  hasDefiniteBinaryData(): boolean {\n    if (\n      this.parent &&\n      this.key === 'data' &&\n      typeof this.parent.type === 'string' &&\n      TYPED_BINARY_DATA_TYPES.has(this.parent.type)\n    )\n      return true\n    if (!this.explicitMediaType && (!this.parent || !this.key || !STRONG_CONTEXT_KEYS.has(this.key))) return false\n    const mediaType = this.inferFromSiblingMime()\n    return mediaType !== undefined && !mediaType.toLowerCase().startsWith('text/')\n  }\n\n  signalsBinary(): boolean {\n    if (this.explicitMediaType) return true\n    if (this.parent) {\n      for (const hint of MIME_HINT_KEYS) {\n        if (typeof this.parent[hint] === 'string') return true\n      }\n      const fmt = this.parent.format\n      if (typeof fmt === 'string' && KNOWN_AUDIO_FORMATS.has(fmt.toLowerCase())) return true\n      const t = this.parent.type\n      if (typeof t === 'string' && STRONG_CONTEXT_TYPES.has(t)) return true\n    }\n    if (this.key && STRONG_CONTEXT_KEYS.has(this.key)) return true\n    return false\n  }\n}\n","import { Base64Recognizer } from './base64_recognizer'\nimport { MediaTypeContext } from './media_type_context'\n\nconst STRONG_CONTEXT_MIN_LENGTH = 64\nconst WEAK_CONTEXT_MIN_LENGTH = 1024\n\nexport class BinaryContentRedactor {\n  private visited: WeakSet<object> = new WeakSet()\n\n  constructor(private readonly recognizer: Base64Recognizer = new Base64Recognizer()) {}\n\n  redact<T>(value: T, mediaType?: string): T\n  redact(value: unknown, mediaType?: string): unknown {\n    this.visited = new WeakSet()\n    return this.walk(value, mediaType ? new MediaTypeContext(undefined, undefined, mediaType) : MediaTypeContext.EMPTY)\n  }\n\n  /** Redact one leaf while a caller owns bounded, type-preserving traversal. @internal */\n  redactLeaf(value: string | Uint8Array, context: MediaTypeContext): string {\n    return typeof value === 'string' ? this.redactString(value, context) : this.placeholderFor(context.inferMediaType())\n  }\n\n  private walk(value: unknown, ctx: MediaTypeContext): unknown {\n    if (value === null || value === undefined) return value\n    if (typeof value === 'string') return this.redactLeaf(value, ctx)\n    if (typeof value !== 'object') return value\n\n    // Buffer extends Uint8Array, so this branch catches both.\n    if (typeof Uint8Array !== 'undefined' && value instanceof Uint8Array) {\n      return this.redactLeaf(value, ctx)\n    }\n\n    if (this.visited.has(value)) return null\n    this.visited.add(value)\n\n    if (Array.isArray(value)) {\n      return value.map((item) => this.walk(item, ctx))\n    }\n\n    const obj = value as Record<string, unknown>\n    const out: Record<string, unknown> = {}\n    for (const k of Object.keys(obj)) {\n      Object.defineProperty(out, k, {\n        value: this.walk(obj[k], new MediaTypeContext(obj, k)),\n        enumerable: true,\n        writable: true,\n        configurable: true,\n      })\n    }\n    return out\n  }\n\n  private redactString(value: string, ctx: MediaTypeContext): string {\n    const hasDefiniteBinaryData = ctx.hasDefiniteBinaryData()\n    const recognitionValue = hasDefiniteBinaryData ? value.replace(/[\\r\\n]/g, '') : value\n    const minLength = hasDefiniteBinaryData\n      ? Math.min(recognitionValue.length, STRONG_CONTEXT_MIN_LENGTH)\n      : ctx.signalsBinary()\n        ? STRONG_CONTEXT_MIN_LENGTH\n        : WEAK_CONTEXT_MIN_LENGTH\n    const recognition = this.recognizer.recognize(recognitionValue, minLength)\n    switch (recognition.kind) {\n      case 'data-url':\n        return this.placeholderFor(recognition.mediaType)\n      case 'raw':\n        return this.placeholderFor(ctx.inferMediaType())\n      case 'none':\n        return value\n    }\n  }\n\n  private placeholderFor(mediaType?: string): string {\n    if (!mediaType) return '[base64 redacted]'\n    if (mediaType === 'application/octet-stream') return '[base64 file redacted]'\n    return `[base64 ${mediaType} redacted]`\n  }\n}\n","import type { Attributes } from '@opentelemetry/api'\nimport type { ReadableSpan, TimedEvent } from '@opentelemetry/sdk-trace-base'\n\nconst AI_SPAN_PREFIXES = ['gen_ai.', 'llm.', 'ai.', 'traceloop.'] as const\n\n/**\n * Returns `true` when the span is AI-related — its name or any attribute\n * key starts with `gen_ai.`, `llm.`, `ai.`, or `traceloop.`.\n */\nexport function isAISpan(span: ReadableSpan): boolean {\n  if (AI_SPAN_PREFIXES.some((prefix) => span.name.startsWith(prefix))) {\n    return true\n  }\n  const attributes = span.attributes\n  if (attributes) {\n    return Object.keys(attributes).some((key) => AI_SPAN_PREFIXES.some((prefix) => key.startsWith(prefix)))\n  }\n  return false\n}\n\n/** Copies rather than mutates: the span is shared across every registered processor/exporter. */\nexport function withAttributes(span: ReadableSpan, attributes: Attributes, events?: TimedEvent[]): ReadableSpan {\n  return Object.create(span, {\n    attributes: { value: attributes, enumerable: true, configurable: true },\n    ...(events ? { events: { value: events, enumerable: true, configurable: true } } : {}),\n  })\n}\n","// Type guards for safer type checking\n\nexport const isString = (value: unknown): value is string => {\n  return typeof value === 'string'\n}\n\nexport const isObject = (value: unknown): value is Record<string, unknown> => {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n","import { isObject } from './typeGuards'\n\nconst MCP_CREDENTIAL_FIELDS = ['headers', 'authorization']\n\n// Vercel AI SDK provider tools that configure a remote MCP server, keyed by their `id`.\nconst MCP_PROVIDER_TOOL_IDS = new Set(['openai.mcp', 'xai.mcp', 'google.mcp_server'])\n\nconst isMcpProviderTool = (tool: Record<string, unknown>): boolean =>\n  (tool.type === 'provider' || tool.type === 'provider-defined') &&\n  typeof tool.id === 'string' &&\n  MCP_PROVIDER_TOOL_IDS.has(tool.id)\n\nconst withoutMcpCredentials = (config: Record<string, unknown>): Record<string, unknown> => {\n  const redacted: Record<string, unknown> = { ...config }\n  for (const field of MCP_CREDENTIAL_FIELDS) {\n    if (field in redacted) {\n      redacted[field] = '[REDACTED]'\n    }\n  }\n  return redacted\n}\n\n/** Hides the credentials of a remote MCP tool definition; everything else is kept as sent. */\nexport function redactMcpToolDefinition(tool: unknown): unknown {\n  if (!isObject(tool)) {\n    return tool\n  }\n  if (tool.type === 'mcp') {\n    return withoutMcpCredentials(tool)\n  }\n  if (isMcpProviderTool(tool) && isObject(tool.args)) {\n    return { ...tool, args: withoutMcpCredentials(tool.args) }\n  }\n  return tool\n}\n\nexport function redactMcpToolCredentials(tools: unknown): unknown {\n  return Array.isArray(tools) ? tools.map(redactMcpToolDefinition) : tools\n}\n","import type { AttributeValue } from '@opentelemetry/api'\n\nimport { redactMcpToolCredentials, redactMcpToolDefinition } from '../mcpCredentials'\n\n// Instrumentations serialize tool definitions, remote MCP tools and their credentials included,\n// as a JSON array, an array of JSON tools, or one JSON tool per attribute.\nconst TOOL_DEFINITION_ATTRIBUTES = new Set(['gen_ai.tool.definitions', 'ai.prompt.tools'])\nconst TOOL_DEFINITION_PATTERN = /^llm\\.tools\\.\\d+\\.tool\\.json_schema$/\n\nexport const isToolDefinitionAttribute = (key: string): boolean =>\n  TOOL_DEFINITION_ATTRIBUTES.has(key) || TOOL_DEFINITION_PATTERN.test(key)\n\nconst parseToolDefinitionJson = (value: string): object | undefined => {\n  try {\n    const parsed: unknown = JSON.parse(value)\n    return parsed !== null && typeof parsed === 'object' ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\nconst redactJson = (value: string): string => {\n  const parsed = parseToolDefinitionJson(value)\n  if (parsed === undefined) {\n    return value\n  }\n  const redacted = JSON.stringify(\n    Array.isArray(parsed) ? redactMcpToolCredentials(parsed) : redactMcpToolDefinition(parsed)\n  )\n  return redacted === JSON.stringify(parsed) ? value : redacted\n}\n\n/** Replaces MCP credentials in a tool definition attribute; values that are not JSON are kept as is. */\nexport function redactToolDefinitionCredentials(value: AttributeValue): AttributeValue {\n  if (typeof value === 'string') {\n    return redactJson(value)\n  }\n  if (Array.isArray(value) && value.every((item) => typeof item === 'string' || item == null)) {\n    const redacted = value.map((item) => (typeof item === 'string' ? redactJson(item) : item))\n    return redacted.some((item, index) => item !== value[index]) ? redacted : value\n  }\n  return value\n}\n\n/** Drops the parts of a tool definition attribute that are not JSON, since their credentials cannot be found. */\nexport function withoutUnparseableToolDefinitions(value: AttributeValue): AttributeValue | undefined {\n  if (typeof value === 'string') {\n    return parseToolDefinitionJson(value) === undefined ? undefined : value\n  }\n  if (Array.isArray(value)) {\n    return value.filter(\n      (item): item is string => typeof item === 'string' && parseToolDefinitionJson(item) !== undefined\n    )\n  }\n  return undefined\n}\n","import type { Attributes, AttributeValue } from '@opentelemetry/api'\nimport type { ReadableSpan, TimedEvent } from '@opentelemetry/sdk-trace-base'\n\nimport { BinaryContentRedactor } from '../sanitization/binary_content_redactor'\nimport { withAttributes } from './spans'\nimport { isToolDefinitionAttribute, redactToolDefinitionCredentials } from './toolDefinitions'\n\n// Deliberately always redacts here — the OTLP export path has no per-client passthrough gate.\nconst redactor = new BinaryContentRedactor()\n\nexport function redactSpan(span: ReadableSpan): ReadableSpan {\n  const attributes = span.attributes ? redactAttributes(span.attributes) : span.attributes\n  const events = span.events ? redactEvents(span.events) : span.events\n  if (attributes === span.attributes && events === span.events) {\n    return span\n  }\n  return withAttributes(span, attributes, events)\n}\n\nfunction redactAttributes(attributes: Attributes): Attributes {\n  let changed = false\n  const out: Attributes = {}\n  for (const key of Object.keys(attributes)) {\n    const original = attributes[key]\n    const value =\n      original !== undefined && isToolDefinitionAttribute(key) ? redactToolDefinitionCredentials(original) : original\n    const redacted = value === undefined ? value : redactAttributeValue(value)\n    if (redacted !== original) {\n      changed = true\n    }\n    out[key] = redacted\n  }\n  return changed ? out : attributes\n}\n\nfunction redactEvents(events: TimedEvent[]): TimedEvent[] {\n  let changed = false\n  const out = events.map((event) => {\n    if (!event.attributes) {\n      return event\n    }\n    const attributes = redactAttributes(event.attributes)\n    if (attributes === event.attributes) {\n      return event\n    }\n    changed = true\n    return { ...event, attributes }\n  })\n  return changed ? out : events\n}\n\nfunction redactAttributeValue(value: AttributeValue): AttributeValue {\n  if (typeof value === 'string') {\n    return redactString(value)\n  }\n  if (isStringArray(value)) {\n    let changed = false\n    const out = value.map((item) => {\n      if (typeof item !== 'string') {\n        return item\n      }\n      const redacted = redactString(item)\n      if (redacted !== item) {\n        changed = true\n      }\n      return redacted\n    })\n    return changed ? out : value\n  }\n  return value\n}\n\nfunction isStringArray(value: AttributeValue): value is Array<string | null | undefined> {\n  return Array.isArray(value) && value.every((item) => typeof item !== 'number' && typeof item !== 'boolean')\n}\n\nfunction redactString(value: string): string {\n  const trimmed = value.trimStart()\n  if (trimmed.startsWith('{') || trimmed.startsWith('[')) {\n    const redacted = redactJson(value)\n    if (redacted !== undefined) {\n      return redacted\n    }\n  }\n  return redactor.redact(value)\n}\n\nfunction redactJson(value: string): string | undefined {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(value)\n  } catch {\n    return undefined\n  }\n  if (parsed === null || typeof parsed !== 'object') {\n    return undefined\n  }\n  const redactedStr = JSON.stringify(redactor.redact(parsed))\n  // Preserve the original string (and its formatting) when nothing was redacted.\n  return redactedStr === JSON.stringify(parsed) ? value : redactedStr\n}\n","import type { Attributes } from '@opentelemetry/api'\nimport type { ReadableSpan, TimedEvent } from '@opentelemetry/sdk-trace-base'\n\nimport { withAttributes } from './spans'\nimport { isToolDefinitionAttribute, withoutUnparseableToolDefinitions } from './toolDefinitions'\n\n// Every attribute PostHog ingestion turns into prompt, output, tool call or error text. Ingestion\n// keeps unmapped attributes as event properties, so this also covers attributes it does not map.\nconst CONTENT_ATTRIBUTES = new Set([\n  // Vercel AI SDK\n  'ai.prompt',\n  'ai.prompt.messages',\n  'ai.response.text',\n  'ai.response.object',\n  'ai.response.toolCalls',\n  'ai.response.reasoning',\n  'ai.response.reasoningDetails',\n  'ai.response.files',\n  'ai.toolCall.args',\n  'ai.toolCall.result',\n  'ai.value',\n  'ai.values',\n  'ai.embedding',\n  'ai.embeddings',\n  'ai.documents',\n  'ai.request.text',\n  'ai.decision.state',\n  'ai.decision.questions',\n  'ai.decision.answers',\n  // OpenTelemetry GenAI semantic conventions\n  'gen_ai.input.messages',\n  'gen_ai.output.messages',\n  'gen_ai.system_instructions',\n  'gen_ai.prompt',\n  'gen_ai.completion',\n  'gen_ai.tool.call.arguments',\n  'gen_ai.tool.call.result',\n  'gen_ai.retrieval.documents',\n  'gen_ai.retrieval.query.text',\n  'gen_ai.memory.query.text',\n  'gen_ai.memory.records',\n  'gen_ai.evaluation.explanation',\n  // Traceloop / OpenLLMetry\n  'traceloop.entity.input',\n  'traceloop.entity.output',\n  'traceloop.prompt.template',\n  'gen_ai.task.input',\n  'gen_ai.task.output',\n  'gen_ai.guardrail.input',\n  'gen_ai.guardrail.output',\n  'gen_ai.guardrail.error.message',\n  'gen_ai.response.revised_prompt',\n  'mcp.response.value',\n  'db.marqo.search.query',\n  // Anthropic\n  'anthropic.tool_result.content',\n  // Pydantic AI / Logfire\n  'pydantic_ai.all_messages',\n  'final_result',\n  'tool_arguments',\n  'tool_response',\n  'events',\n  'model_request_parameters',\n  'inputs',\n  'prompt',\n  // OpenInference\n  'input.value',\n  'output.value',\n  'llm.function_call',\n  'llm.prompt_template.template',\n  'llm.prompt_template.variables',\n  // Holds request parameters such as Responses `instructions`.\n  'llm.invocation_parameters',\n  'reranker.query',\n  // Langfuse\n  'langfuse.trace.input',\n  'langfuse.trace.output',\n  'langfuse.observation.input',\n  'langfuse.observation.output',\n  'langfuse.observation.status_message',\n  'langfuse.experiment.item.expected_output',\n  // Errors\n  'exception.message',\n  'exception.stacktrace',\n  'error.message',\n])\n\nconst CONTENT_ATTRIBUTE_PREFIXES = [\n  'gen_ai.prompt.',\n  'gen_ai.completion.',\n  'llm.prompts.',\n  'llm.completions.',\n  'llm.input_messages.',\n  'llm.output_messages.',\n  'llm.choices.',\n  'traceloop.prompt.template_variables.',\n]\n\nconst CONTENT_ATTRIBUTE_PATTERNS = [\n  /^db\\.chroma\\.(query|get|delete)\\.where_document$/,\n  /^embedding\\.embeddings\\.\\d+\\.embedding\\.(text|vector)$/,\n  /^retrieval\\.documents\\.\\d+\\.document\\.(content|metadata)$/,\n  /^reranker\\.(input|output)_documents\\.\\d+\\.document\\.content$/,\n  /^(input|output)\\.images\\.\\d+\\.image\\.url$/,\n  /^mastra\\.[a-z_]+\\.(input|output)$/,\n]\n\n// Prompt management metadata that shares the `gen_ai.prompt.` prefix with prompt content.\nconst NON_CONTENT_ATTRIBUTES = new Set(['gen_ai.prompt.name', 'gen_ai.prompt.version'])\n\n// Ingestion only reads exception events. Every other event (GenAI semconv messages, vector\n// database results, framework logs) can carry content.\nconst EXCEPTION_EVENT_NAME = 'exception'\n\nconst PROVIDER_METADATA_ATTRIBUTE = 'ai.response.providerMetadata'\n\nconst isContentAttribute = (key: string): boolean =>\n  !NON_CONTENT_ATTRIBUTES.has(key) &&\n  (CONTENT_ATTRIBUTES.has(key) ||\n    CONTENT_ATTRIBUTE_PREFIXES.some((prefix) => key.startsWith(prefix) || prefix === `${key}.`) ||\n    CONTENT_ATTRIBUTE_PATTERNS.some((pattern) => pattern.test(key)))\n\n// Provider metadata can carry content, such as Google grounding search queries. Ingestion only\n// reads the Vercel AI Gateway cost from it.\nfunction gatewayCostOnly(value: unknown): string | undefined {\n  if (typeof value !== 'string') {\n    return undefined\n  }\n  try {\n    const cost: unknown = JSON.parse(value)?.gateway?.cost\n    return typeof cost === 'number' || typeof cost === 'string' ? JSON.stringify({ gateway: { cost } }) : undefined\n  } catch {\n    return undefined\n  }\n}\n\nfunction stripAttributes(attributes: Attributes): Attributes {\n  const out: Attributes = {}\n  for (const [key, value] of Object.entries(attributes)) {\n    if (isContentAttribute(key)) {\n      continue\n    }\n    if (isToolDefinitionAttribute(key)) {\n      const definitions = value === undefined ? undefined : withoutUnparseableToolDefinitions(value)\n      if (definitions !== undefined) {\n        out[key] = definitions\n      }\n      continue\n    }\n    if (key === PROVIDER_METADATA_ATTRIBUTE) {\n      const metadata = gatewayCostOnly(value)\n      if (metadata !== undefined) {\n        out[key] = metadata\n      }\n      continue\n    }\n    out[key] = value\n  }\n  return out\n}\n\nfunction stripEvents(events: TimedEvent[]): TimedEvent[] {\n  return events\n    .filter((event) => event.name === EXCEPTION_EVENT_NAME)\n    .map((event) => (event.attributes ? { ...event, attributes: stripAttributes(event.attributes) } : event))\n}\n\n/** Returns a copy of the span without the attributes, events and status message that carry content. */\nexport function stripContent(span: ReadableSpan): ReadableSpan {\n  const stripped = withAttributes(\n    span,\n    span.attributes ? stripAttributes(span.attributes) : span.attributes,\n    span.events ? stripEvents(span.events) : span.events\n  )\n  if (span.status?.message) {\n    Object.defineProperty(stripped, 'status', {\n      value: { code: span.status.code },\n      enumerable: true,\n      configurable: true,\n    })\n  }\n  return stripped\n}\n","// Warn when a wrapper's base_url points at the PostHog AI Gateway: the gateway\n// emits its own $ai_generation, so each call would be captured (and, for billable\n// products, billed) twice. We only warn — the wrapper's event carries data the\n// gateway never sees (groups, custom properties, trace hierarchy).\n\n// Keep in sync with the gateway's deployed hosts (see services/llm-gateway in the\n// main repo). gateway.us.posthog.com is live today; the rest are listed ahead of\n// any traffic moving to them.\nexport const POSTHOG_AI_GATEWAY_HOSTS: readonly string[] = [\n  'gateway.posthog.com',\n  'gateway.us.posthog.com',\n  'gateway.eu.posthog.com',\n  'ai-gateway.us.posthog.com',\n  'ai-gateway.eu.posthog.com',\n]\n\n// Swap for the dedicated AI Gateway page once it ships.\nconst GATEWAY_DOCS_URL = 'https://posthog.com/docs/ai-observability'\n\nconst extractHost = (baseURL: string): string | undefined => {\n  try {\n    // Tolerate bare hosts that omit a scheme, e.g. \"gateway.us.posthog.com/v1\".\n    const hasScheme = /^[a-z][a-z0-9+.-]*:\\/\\//i.test(baseURL)\n    return new URL(hasScheme ? baseURL : `https://${baseURL}`).hostname.toLowerCase()\n  } catch {\n    return undefined\n  }\n}\n\nexport const isPostHogAiGatewayUrl = (baseURL: string | undefined | null): boolean => {\n  if (!baseURL) {\n    return false\n  }\n  const host = extractHost(baseURL)\n  return host !== undefined && POSTHOG_AI_GATEWAY_HOSTS.includes(host)\n}\n\n// Warns on every gateway call by design: the misconfiguration is impossible to\n// miss that way, and a doubled bill is worse than noisy logs.\nexport const warnIfPostHogAiGateway = (baseURL: string | undefined | null): void => {\n  if (!isPostHogAiGatewayUrl(baseURL)) {\n    return\n  }\n  console.warn(\n    '[PostHog] The PostHog AI wrapper is pointed at the PostHog AI Gateway. ' +\n      'Both capture $ai_generation, so every call is double-counted and double-billed. ' +\n      `Use one or the other — see ${GATEWAY_DOCS_URL}.`\n  )\n}\n\n// OTel spans don't pass through captureAiGeneration, so detect the gateway from\n// the span's host/URL attributes instead. These follow the GenAI / HTTP semantic\n// conventions: `server.address` is a bare host, `url.full` a full URL, both of\n// which isPostHogAiGatewayUrl accepts.\nconst OTEL_GATEWAY_URL_ATTRIBUTES = ['server.address', 'url.full'] as const\n\nexport const warnIfPostHogAiGatewayOtelAttributes = (attributes: Record<string, unknown> | undefined): void => {\n  if (!attributes) {\n    return\n  }\n  for (const key of OTEL_GATEWAY_URL_ATTRIBUTES) {\n    const value = attributes[key]\n    if (typeof value === 'string' && isPostHogAiGatewayUrl(value)) {\n      warnIfPostHogAiGateway(value)\n      return\n    }\n  }\n}\n","import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http'\nimport type { ReadableSpan } from '@opentelemetry/sdk-trace-base'\n\nimport { redactSpan } from './redact'\nimport { stripContent } from './privacy'\nimport { isAISpan } from './spans'\nimport { warnIfPostHogAiGatewayOtelAttributes } from '../gatewayWarning'\n\nconst DEFAULT_OTEL_HOST = 'https://us.i.posthog.com'\n// OpenTelemetry's ExportResultCode.SUCCESS is 0. Keep this local so loading the\n// published subpath does not require the exporter package's transitive dependencies.\nconst EXPORT_SUCCESS = 0\n\nfunction normalizeToken(value?: unknown): string {\n  return typeof value === 'string' ? value.trim() : ''\n}\n\nfunction normalizeHost(value?: unknown): string {\n  const normalizedValue = typeof value === 'string' ? value.trim() : ''\n  return normalizedValue || DEFAULT_OTEL_HOST\n}\n\n/**\n * Options for the PostHogTraceExporter. `projectToken` is required; a blank token disables the\n * exporter as a defensive no-op. You can also optionally override the `host` URL. `host` defaults to `https://us.i.posthog.com`.\n *\n * @example\n * ```ts\n * import { PostHogTraceExporter } from '@posthog/ai/otel'\n *\n * new PostHogTraceExporter({ projectToken: 'phc_...' })\n * ```\n *\n * @example\n * ```ts\n * import { PostHogTraceExporter } from '@posthog/ai/otel'\n *\n * new PostHogTraceExporter({ projectToken: 'phc_...', host: 'https://eu.i.posthog.com' })\n * ```\n */\nexport type PostHogTraceExporterOptions = {\n  projectToken: string\n  host?: string\n  /** Drop prompts, outputs, tool arguments and results, and error messages from exported spans. Defaults to false. */\n  privacyMode?: boolean\n}\n\n/**\n * An OpenTelemetry `TraceExporter` that sends AI traces to PostHog's OTLP\n * ingestion endpoint. PostHog converts `gen_ai.*` spans into\n * `$ai_generation` events server-side.\n *\n * Only AI-related spans (those whose name or attribute keys start with\n * `gen_ai.`, `llm.`, `ai.`, or `traceloop.`) are exported; all other\n * spans are silently dropped.\n *\n * Use this when the API you're integrating with only accepts a\n * `TraceExporter` (e.g. Vercel's `registerOTel`) or when you need to\n * plug PostHog into an existing processor chain. Otherwise prefer\n * {@link PostHogSpanProcessor}, which is self-contained.\n *\n * `projectToken` is required; a blank token disables the exporter as a defensive no-op.\n * You can also optionally override the `host` URL.\n *\n * Exporters only see finished spans, so they can't add per-request PostHog context;\n * use {@link PostHogSpanProcessor} with `client` for that.\n *\n * @example\n * ```ts\n * import { PostHogTraceExporter } from '@posthog/ai/otel'\n * import { registerOTel } from '@vercel/otel'\n *\n * registerOTel({\n *   serviceName: 'my-app',\n *   traceExporter: new PostHogTraceExporter({ projectToken: 'phc_...' }),\n * })\n * ```\n */\nexport class PostHogTraceExporter extends OTLPTraceExporter {\n  private readonly disabled: boolean\n  private readonly privacyMode: boolean\n\n  constructor(options: PostHogTraceExporterOptions) {\n    const token = normalizeToken(options.projectToken)\n    const disabled = !token\n    const host = token ? new URL(normalizeHost(options.host)).origin : DEFAULT_OTEL_HOST\n    super({\n      url: `${host}/i/v0/ai/otel`,\n      headers: token\n        ? {\n            Authorization: `Bearer ${token}`,\n          }\n        : {},\n    })\n\n    this.disabled = disabled\n    this.privacyMode = options.privacyMode === true\n    if (this.disabled) {\n      console.warn('[PostHogTraceExporter] projectToken is missing or blank; the exporter will be disabled.')\n    }\n  }\n\n  override export(spans: ReadableSpan[], resultCallback: (result: { code: number; error?: Error }) => void): void {\n    if (this.disabled) {\n      // Intentionally report success: missing or blank tokens disable exporting as a compatibility no-op.\n      // Reporting failure would make OpenTelemetry treat every span as an export error.\n      resultCallback({ code: EXPORT_SUCCESS })\n      return\n    }\n\n    const aiSpans = spans.filter(isAISpan)\n    if (aiSpans.length === 0) {\n      resultCallback({ code: EXPORT_SUCCESS })\n      return\n    }\n    for (const span of aiSpans) {\n      warnIfPostHogAiGatewayOtelAttributes(span.attributes)\n    }\n    const shareable = this.privacyMode ? aiSpans.map(stripContent) : aiSpans\n    super.export(shareable.map(redactSpan), resultCallback)\n  }\n}\n","/** @internal */\nexport type PrivacyModeGate = {\n  readonly privacyMode?: boolean\n  /** Legacy spelling, still honored for callers that set it directly. */\n  readonly privacy_mode?: boolean\n  /** Read for posthog-node versions that predate the `privacyMode` accessor. */\n  readonly options?: { readonly privacyMode?: boolean }\n}\n\n/** Per-call settings can turn redaction on but never off. */\nexport const isPrivacyModeEnabled = (client: PrivacyModeGate | undefined, privacyMode = false): boolean =>\n  privacyMode === true ||\n  client?.privacyMode === true ||\n  client?.privacy_mode === true ||\n  client?.options?.privacyMode === true\n","import type { AttributeValue, Attributes } from '@opentelemetry/api'\nimport type { ReadableSpan } from '@opentelemetry/sdk-trace-base'\n\nimport { withAttributes } from './spans'\n\nexport type CapturedContext = {\n  distinctId?: string\n  sessionId?: string\n  properties?: Record<string, unknown>\n}\n\n// Structural so declarations type-check against posthog-node versions that have no getContext.\nexport type PostHogContextSource = {\n  getContext?(): CapturedContext | undefined\n}\n\nconst DISTINCT_ID_ATTRIBUTE = 'posthog.distinct_id'\nconst SESSION_ID_ATTRIBUTE = '$session_id'\n\n// Ingestion prefers posthog.distinct_id, so adding it would override the user a span already names.\nconst IDENTITY_ATTRIBUTES = [\n  DISTINCT_ID_ATTRIBUTE,\n  'user.id',\n  'ai.telemetry.metadata.posthog_distinct_id',\n  'ai.settings.context.posthog_distinct_id',\n]\n\ntype Primitive = string | number | boolean\n\nfunction isPrimitive(value: unknown): value is Primitive {\n  return (\n    typeof value === 'string' || typeof value === 'boolean' || (typeof value === 'number' && Number.isFinite(value))\n  )\n}\n\nfunction isHomogeneousPrimitiveArray(value: unknown): value is string[] | number[] | boolean[] {\n  return Array.isArray(value) && value.every((item) => isPrimitive(item) && typeof item === typeof value[0])\n}\n\nfunction rejectNonFinite(_key: string, value: unknown): unknown {\n  if (typeof value === 'number' && !Number.isFinite(value)) {\n    throw new TypeError('non-finite number')\n  }\n  return value\n}\n\nfunction toAttributeValue(value: unknown): AttributeValue | undefined {\n  if (value === undefined || value === null || value === '') {\n    return undefined\n  }\n  if (isPrimitive(value) || isHomogeneousPrimitiveArray(value)) {\n    return value\n  }\n  try {\n    const json = JSON.stringify(value, rejectNonFinite)\n    if (json === undefined || json === 'null') {\n      return undefined\n    }\n    return json.startsWith('\"') ? String(JSON.parse(json)) || undefined : json\n  } catch {\n    return undefined\n  }\n}\n\nfunction hasValues(context: CapturedContext): boolean {\n  return Boolean(context.distinctId || context.sessionId || Object.keys(context.properties ?? {}).length > 0)\n}\n\nexport function captureContext(client: PostHogContextSource): CapturedContext | undefined {\n  try {\n    // posthog-node versions before getContext existed are still within the peer range.\n    if (typeof client.getContext !== 'function') {\n      return undefined\n    }\n    const context = client.getContext()\n    return context && hasValues(context) ? context : undefined\n  } catch {\n    // Capturing is best effort and must never break the instrumented call.\n    return undefined\n  }\n}\n\nfunction toAttributes(context: CapturedContext, spanAttributes: Attributes): Attributes {\n  const hasIdentity = IDENTITY_ATTRIBUTES.some((key) => spanAttributes[key] !== undefined)\n  const values: Record<string, unknown> = {\n    ...(context.distinctId && !hasIdentity ? { [DISTINCT_ID_ATTRIBUTE]: context.distinctId } : {}),\n    ...(context.sessionId ? { [SESSION_ID_ATTRIBUTE]: context.sessionId } : {}),\n    ...context.properties,\n  }\n  const attributes: Attributes = {}\n  for (const [key, value] of Object.entries(values)) {\n    if (hasIdentity && key === DISTINCT_ID_ATTRIBUTE) {\n      continue\n    }\n    const attribute = toAttributeValue(value)\n    if (attribute !== undefined) {\n      attributes[key] = attribute\n    }\n  }\n  return attributes\n}\n\nexport function withRequestContext(span: ReadableSpan, context: CapturedContext): ReadableSpan {\n  try {\n    const attributes = toAttributes(context, span.attributes)\n    if (Object.keys(attributes).length === 0) {\n      return span\n    }\n    return withAttributes(span, { ...attributes, ...span.attributes })\n  } catch {\n    // Conversion runs inside span.end() and must never break the instrumented call.\n    return span\n  }\n}\n","import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http'\nimport type { Context } from '@opentelemetry/api'\nimport { BatchSpanProcessor, type SpanProcessor, type ReadableSpan, type Span } from '@opentelemetry/sdk-trace-base'\n\nimport { redactSpan } from './redact'\nimport { stripContent } from './privacy'\nimport { isPrivacyModeEnabled, type PrivacyModeGate } from '../privacyMode'\nimport { captureContext, withRequestContext, type CapturedContext, type PostHogContextSource } from './requestContext'\nimport { isAISpan } from './spans'\nimport { warnIfPostHogAiGatewayOtelAttributes } from '../gatewayWarning'\n\nconst DEFAULT_OTEL_HOST = 'https://us.i.posthog.com'\n\nfunction normalizeToken(value?: unknown): string {\n  return typeof value === 'string' ? value.trim() : ''\n}\n\nfunction normalizeHost(value?: unknown): string {\n  const normalizedValue = typeof value === 'string' ? value.trim() : ''\n  return normalizedValue || DEFAULT_OTEL_HOST\n}\n\nexport interface PostHogSpanProcessorOptions {\n  /**\n   * Your PostHog project token (the `phc_...` key). Required; a blank token disables the\n   * processor as a defensive no-op.\n   */\n  projectToken: string\n\n  /**\n   * PostHog host URL. Defaults to `https://us.i.posthog.com`.\n   */\n  host?: string\n\n  /**\n   * Your posthog-node client. When set, each AI span this processor exports gets the distinct ID,\n   * session ID (as `$session_id`) and properties from the context entered with `client.withContext()` or\n   * `client.enterContext()`. Other processors on the provider don't see them.\n   * Attributes already on the span win over properties, which win over the context's IDs.\n   * The context is captured when a span starts, but its properties are read when the span ends,\n   * so mutating a context object while a span is open shows up in the export.\n   * Must be the same posthog-node instance you call `withContext` or `enterContext` on.\n   */\n  client?: PostHogContextSource & PrivacyModeGate\n\n  /**\n   * Drop prompts, outputs, tool arguments and results, and error messages from exported spans.\n   * Also on when the `client` was created with `privacyMode: true`. Defaults to false.\n   */\n  privacyMode?: boolean\n\n  /**\n   * @internal Injected processor for testing — bypasses exporter creation.\n   */\n  _spanProcessor?: SpanProcessor\n}\n\nclass NoopSpanProcessor implements SpanProcessor {\n  onStart(_span: Span, _parentContext: Context): void {\n    return\n  }\n  onEnd(_span: ReadableSpan): void {\n    return\n  }\n  shutdown(): Promise<void> {\n    return Promise.resolve()\n  }\n  forceFlush(): Promise<void> {\n    return Promise.resolve()\n  }\n}\n\n/**\n * An OpenTelemetry `SpanProcessor` that sends AI traces to PostHog.\n *\n * `projectToken` is required; a blank token disables the processor as a defensive no-op.\n *\n * Internally batches spans and exports them to PostHog's OTLP ingestion\n * endpoint. Only AI-related spans (those whose name or attribute keys\n * start with `gen_ai.`, `llm.`, `ai.`, or `traceloop.`) are exported;\n * all other spans are silently dropped.\n *\n * Request-scoped and serverless runtimes should keep a reference to this\n * processor and await {@link PostHogSpanProcessor.forceFlush} before the request\n * lifecycle ends. This waits for queued exports without sending one request per span.\n *\n * This is the recommended integration point when your setup accepts a\n * `SpanProcessor`. If you need a `TraceExporter` instead (e.g. for\n * Vercel's `registerOTel`), use {@link PostHogTraceExporter}.\n *\n * @example\n * ```ts\n * import { PostHogSpanProcessor } from '@posthog/ai/otel'\n * import { NodeSDK } from '@opentelemetry/sdk-node'\n *\n * const processor = new PostHogSpanProcessor({ projectToken: 'phc_...' })\n * const sdk = new NodeSDK({ spanProcessors: [processor] })\n * sdk.start()\n *\n * // In request-scoped runtimes, wait for queued exports before returning.\n * await processor.forceFlush()\n * ```\n *\n * @example\n * ```ts\n * // Per request: pass your posthog-node client, then wrap the work in a context.\n * const processor = new PostHogSpanProcessor({ projectToken: 'phc_...', client: posthog })\n * await posthog.withContext({ distinctId: user.id, properties: { plan: 'pro' } }, () => handleRequest())\n * ```\n */\nexport class PostHogSpanProcessor implements SpanProcessor {\n  private readonly inner: SpanProcessor\n  private readonly client?: PostHogContextSource & PrivacyModeGate\n  private readonly privacyMode: boolean = false\n  private readonly capturedContexts = new WeakMap<ReadableSpan, CapturedContext>()\n\n  constructor(options: PostHogSpanProcessorOptions) {\n    const token = normalizeToken(options.projectToken)\n    if (!token) {\n      console.warn('[PostHogSpanProcessor] projectToken is missing or blank; the processor will be disabled.')\n      this.inner = new NoopSpanProcessor()\n      return\n    }\n    this.client = options.client\n    this.privacyMode = options.privacyMode === true\n\n    if (options._spanProcessor) {\n      this.inner = options._spanProcessor\n    } else {\n      const host = new URL(normalizeHost(options.host)).origin\n      const exporter = new OTLPTraceExporter({\n        url: `${host}/i/v0/ai/otel`,\n        headers: {\n          Authorization: `Bearer ${token}`,\n        },\n      })\n      this.inner = new BatchSpanProcessor(exporter)\n    }\n  }\n\n  onStart(span: Span, parentContext: Context): void {\n    const captured = this.client && captureContext(this.client)\n    if (captured) {\n      this.capturedContexts.set(span, captured)\n    }\n    // Forwarded unconditionally — filtering happens in onEnd. We can't filter\n    // here because the span hasn't finished yet and may not have AI attributes\n    // set. BatchSpanProcessor.onStart is a no-op so this is safe.\n    this.inner.onStart(span, parentContext)\n  }\n\n  onEnd(span: ReadableSpan): void {\n    const captured = this.capturedContexts.get(span)\n    this.capturedContexts.delete(span)\n    if (isAISpan(span)) {\n      warnIfPostHogAiGatewayOtelAttributes(span.attributes)\n      const contextual = captured ? withRequestContext(span, captured) : span\n      const shareable = isPrivacyModeEnabled(this.client, this.privacyMode) ? stripContent(contextual) : contextual\n      this.inner.onEnd(redactSpan(shareable))\n    }\n  }\n\n  shutdown(): Promise<void> {\n    return this.inner.shutdown()\n  }\n\n  forceFlush(): Promise<void> {\n    return this.inner.forceFlush()\n  }\n}\n"],"mappings":";;;;AAAA,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAI3B,IAAa,mBAAb,MAA8B;CAC5B,UAAU,OAAe,WAAsC;EAC7D,MAAM,UAAU,mBAAmB,KAAK,KAAK;EAC7C,IAAI,SAAS,OAAO;GAAE,MAAM;GAAY,WAAW,QAAQ;EAAG;EAE9D,IAAI,MAAM,SAAS,WAAW,OAAO,EAAE,MAAM,OAAO;EAEpD,MAAM,mBAAmB,MAAM,MAAM,GAAG,SAAS;EACjD,IAAI,mBAAmB,KAAK,gBAAgB,GAC1C,OAAO,EAAE,MAAM,MAAM;OAErB,OAAO,EAAE,MAAM,OAAO;CAE1B;AACF;;;ACnBA,MAAM,iBAAiB;CAAC;CAAa;CAAc;CAAY;AAAW;AAE1E,MAAM,sCAAsB,IAAI,IAAI;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,uCAAuB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,oCAAoB,IAAI,IAAI;CAAC;CAAQ;CAAc;CAAY;CAAS;AAAW,CAAC;AAC1F,MAAM,0CAA0B,IAAI,IAAI;CAAC;CAAS;CAAS;CAAS;AAAU,CAAC;AAE/E,MAAM,sCAAsB,IAAI,IAAI;CAAC;CAAO;CAAO;CAAO;CAAQ;CAAO;CAAO;AAAM,CAAC;AAEvF,IAAa,mBAAb,MAAa,iBAAiB;;EACJ,KAAA,QAAA,IAAI,iBAAiB,KAAA,GAAW,KAAA,CAAS;;CAEjE,YACE,QACA,KACA,mBACA;EAHiB,KAAA,SAAA;EACA,KAAA,MAAA;EACA,KAAA,oBAAA;CAChB;CAEH,iBAAqC;EACnC,OACE,KAAK,qBAAqB,KAAK,KAAK,uBAAuB,KAAK,KAAK,oBAAoB,KAAK,KAAK,aAAa;CAEpH;CAEA,uBAA2C;EACzC,IAAI,KAAK,mBAAmB,OAAO,KAAK;EACxC,IAAI,CAAC,KAAK,QAAQ,OAAO,KAAA;EACzB,KAAK,MAAM,QAAQ,gBAAgB;GACjC,MAAM,IAAI,KAAK,OAAO;GACtB,IAAI,OAAO,MAAM,UAAU,OAAO;EACpC;CAEF;CAEA,yBAA6C;EAC3C,IAAI,CAAC,KAAK,QAAQ,OAAO,KAAA;EACzB,MAAM,MAAM,KAAK,OAAO;EACxB,IAAI,OAAO,QAAQ,YAAY,oBAAoB,IAAI,IAAI,YAAY,CAAC,GACtE,OAAO,SAAS,IAAI,YAAY;CAGpC;CAEA,sBAA0C;EACxC,IAAI,CAAC,KAAK,QAAQ,OAAO,KAAA;EACzB,MAAM,IAAI,KAAK,OAAO;EACtB,IAAI,OAAO,MAAM,UAAU,OAAO,KAAA;EAClC,IAAI,MAAM,WAAW,MAAM,eAAe,MAAM,eAAe,OAAO;EACtE,IAAI,MAAM,WAAW,MAAM,eAAe,OAAO;EACjD,IAAI,MAAM,WAAW,MAAM,aAAa,OAAO;EAC/C,IAAI,kBAAkB,IAAI,CAAC,GAAG,OAAO;CAEvC;CAEA,eAAmC;EACjC,IAAI,CAAC,KAAK,KAAK,OAAO,KAAA;EACtB,MAAM,MAAM,KAAK,IAAI,YAAY;EACjC,IAAI,IAAI,SAAS,OAAO,GAAG,OAAO;EAClC,IAAI,IAAI,SAAS,OAAO,GAAG,OAAO;EAClC,IAAI,IAAI,SAAS,OAAO,GAAG,OAAO;EAClC,IAAI,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,UAAU,GAAG,OAAO;CAE/D;CAEA,wBAAiC;EAC/B,IACE,KAAK,UACL,KAAK,QAAQ,UACb,OAAO,KAAK,OAAO,SAAS,YAC5B,wBAAwB,IAAI,KAAK,OAAO,IAAI,GAE5C,OAAO;EACT,IAAI,CAAC,KAAK,sBAAsB,CAAC,KAAK,UAAU,CAAC,KAAK,OAAO,CAAC,oBAAoB,IAAI,KAAK,GAAG,IAAI,OAAO;EACzG,MAAM,YAAY,KAAK,qBAAqB;EAC5C,OAAO,cAAc,KAAA,KAAa,CAAC,UAAU,YAAY,CAAC,CAAC,WAAW,OAAO;CAC/E;CAEA,gBAAyB;EACvB,IAAI,KAAK,mBAAmB,OAAO;EACnC,IAAI,KAAK,QAAQ;GACf,KAAK,MAAM,QAAQ,gBACjB,IAAI,OAAO,KAAK,OAAO,UAAU,UAAU,OAAO;GAEpD,MAAM,MAAM,KAAK,OAAO;GACxB,IAAI,OAAO,QAAQ,YAAY,oBAAoB,IAAI,IAAI,YAAY,CAAC,GAAG,OAAO;GAClF,MAAM,IAAI,KAAK,OAAO;GACtB,IAAI,OAAO,MAAM,YAAY,qBAAqB,IAAI,CAAC,GAAG,OAAO;EACnE;EACA,IAAI,KAAK,OAAO,oBAAoB,IAAI,KAAK,GAAG,GAAG,OAAO;EAC1D,OAAO;CACT;AACF;;;ACtHA,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAEhC,IAAa,wBAAb,MAAmC;CAGjC,YAAY,aAAgD,IAAI,iBAAiB,GAAG;EAAvD,KAAA,aAAA;EAFM,KAAA,0BAAA,IAAI,QAAQ;CAEsC;CAGrF,OAAO,OAAgB,WAA6B;EAClD,KAAK,0BAAU,IAAI,QAAQ;EAC3B,OAAO,KAAK,KAAK,OAAO,YAAY,IAAI,iBAAiB,KAAA,GAAW,KAAA,GAAW,SAAS,IAAI,iBAAiB,KAAK;CACpH;;CAGA,WAAW,OAA4B,SAAmC;EACxE,OAAO,OAAO,UAAU,WAAW,KAAK,aAAa,OAAO,OAAO,IAAI,KAAK,eAAe,QAAQ,eAAe,CAAC;CACrH;CAEA,KAAa,OAAgB,KAAgC;EAC3D,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;EAClD,IAAI,OAAO,UAAU,UAAU,OAAO,KAAK,WAAW,OAAO,GAAG;EAChE,IAAI,OAAO,UAAU,UAAU,OAAO;EAGtC,IAAI,OAAO,eAAe,eAAe,iBAAiB,YACxD,OAAO,KAAK,WAAW,OAAO,GAAG;EAGnC,IAAI,KAAK,QAAQ,IAAI,KAAK,GAAG,OAAO;EACpC,KAAK,QAAQ,IAAI,KAAK;EAEtB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,SAAS,KAAK,KAAK,MAAM,GAAG,CAAC;EAGjD,MAAM,MAAM;EACZ,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,KAAK,OAAO,KAAK,GAAG,GAC7B,OAAO,eAAe,KAAK,GAAG;GAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,IAAI,iBAAiB,KAAK,CAAC,CAAC;GACrD,YAAY;GACZ,UAAU;GACV,cAAc;EAChB,CAAC;EAEH,OAAO;CACT;CAEA,aAAqB,OAAe,KAA+B;EACjE,MAAM,wBAAwB,IAAI,sBAAsB;EACxD,MAAM,mBAAmB,wBAAwB,MAAM,QAAQ,WAAW,EAAE,IAAI;EAChF,MAAM,YAAY,wBACd,KAAK,IAAI,iBAAiB,QAAQ,yBAAyB,IAC3D,IAAI,cAAc,IAChB,4BACA;EACN,MAAM,cAAc,KAAK,WAAW,UAAU,kBAAkB,SAAS;EACzE,QAAQ,YAAY,MAApB;GACE,KAAK,YACH,OAAO,KAAK,eAAe,YAAY,SAAS;GAClD,KAAK,OACH,OAAO,KAAK,eAAe,IAAI,eAAe,CAAC;GACjD,KAAK,QACH,OAAO;EACX;CACF;CAEA,eAAuB,WAA4B;EACjD,IAAI,CAAC,WAAW,OAAO;EACvB,IAAI,cAAc,4BAA4B,OAAO;EACrD,OAAO,WAAW,UAAU;CAC9B;AACF;;;ACzEA,MAAM,mBAAmB;CAAC;CAAW;CAAQ;CAAO;AAAY;;;;;AAMhE,SAAgB,SAAS,MAA6B;CACpD,IAAI,iBAAiB,MAAM,WAAW,KAAK,KAAK,WAAW,MAAM,CAAC,GAChE,OAAO;CAET,MAAM,aAAa,KAAK;CACxB,IAAI,YACF,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,MAAM,QAAQ,iBAAiB,MAAM,WAAW,IAAI,WAAW,MAAM,CAAC,CAAC;CAExG,OAAO;AACT;;AAGA,SAAgB,eAAe,MAAoB,YAAwB,QAAqC;CAC9G,OAAO,OAAO,OAAO,MAAM;EACzB,YAAY;GAAE,OAAO;GAAY,YAAY;GAAM,cAAc;EAAK;EACtE,GAAI,SAAS,EAAE,QAAQ;GAAE,OAAO;GAAQ,YAAY;GAAM,cAAc;EAAK,EAAE,IAAI,CAAC;CACtF,CAAC;AACH;;;ACpBA,MAAa,YAAY,UAAqD;CAC5E,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;;;ACNA,MAAM,wBAAwB,CAAC,WAAW,eAAe;AAGzD,MAAM,wCAAwB,IAAI,IAAI;CAAC;CAAc;CAAW;AAAmB,CAAC;AAEpF,MAAM,qBAAqB,UACxB,KAAK,SAAS,cAAc,KAAK,SAAS,uBAC3C,OAAO,KAAK,OAAO,YACnB,sBAAsB,IAAI,KAAK,EAAE;AAEnC,MAAM,yBAAyB,WAA6D;CAC1F,MAAM,WAAoC,EAAE,GAAG,OAAO;CACtD,KAAK,MAAM,SAAS,uBAClB,IAAI,SAAS,UACX,SAAS,SAAS;CAGtB,OAAO;AACT;;AAGA,SAAgB,wBAAwB,MAAwB;CAC9D,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;CAET,IAAI,KAAK,SAAS,OAChB,OAAO,sBAAsB,IAAI;CAEnC,IAAI,kBAAkB,IAAI,KAAK,SAAS,KAAK,IAAI,GAC/C,OAAO;EAAE,GAAG;EAAM,MAAM,sBAAsB,KAAK,IAAI;CAAE;CAE3D,OAAO;AACT;AAEA,SAAgB,yBAAyB,OAAyB;CAChE,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,uBAAuB,IAAI;AACrE;;;AChCA,MAAM,6CAA6B,IAAI,IAAI,CAAC,2BAA2B,iBAAiB,CAAC;AACzF,MAAM,0BAA0B;AAEhC,MAAa,6BAA6B,QACxC,2BAA2B,IAAI,GAAG,KAAK,wBAAwB,KAAK,GAAG;AAEzE,MAAM,2BAA2B,UAAsC;CACrE,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,KAAK;EACxC,OAAO,WAAW,QAAQ,OAAO,WAAW,WAAW,SAAS,KAAA;CAClE,QAAQ;EACN;CACF;AACF;AAEA,MAAMA,gBAAc,UAA0B;CAC5C,MAAM,SAAS,wBAAwB,KAAK;CAC5C,IAAI,WAAW,KAAA,GACb,OAAO;CAET,MAAM,WAAW,KAAK,UACpB,MAAM,QAAQ,MAAM,IAAI,yBAAyB,MAAM,IAAI,wBAAwB,MAAM,CAC3F;CACA,OAAO,aAAa,KAAK,UAAU,MAAM,IAAI,QAAQ;AACvD;;AAGA,SAAgB,gCAAgC,OAAuC;CACrF,IAAI,OAAO,UAAU,UACnB,OAAOA,aAAW,KAAK;CAEzB,IAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,OAAO,SAAS,YAAY,QAAQ,IAAI,GAAG;EAC3F,MAAM,WAAW,MAAM,KAAK,SAAU,OAAO,SAAS,WAAWA,aAAW,IAAI,IAAI,IAAK;EACzF,OAAO,SAAS,MAAM,MAAM,UAAU,SAAS,MAAM,MAAM,IAAI,WAAW;CAC5E;CACA,OAAO;AACT;;AAGA,SAAgB,kCAAkC,OAAmD;CACnG,IAAI,OAAO,UAAU,UACnB,OAAO,wBAAwB,KAAK,MAAM,KAAA,IAAY,KAAA,IAAY;CAEpE,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,QACV,SAAyB,OAAO,SAAS,YAAY,wBAAwB,IAAI,MAAM,KAAA,CAC1F;AAGJ;;;AC/CA,MAAM,WAAW,IAAI,sBAAsB;AAE3C,SAAgB,WAAW,MAAkC;CAC3D,MAAM,aAAa,KAAK,aAAa,iBAAiB,KAAK,UAAU,IAAI,KAAK;CAC9E,MAAM,SAAS,KAAK,SAAS,aAAa,KAAK,MAAM,IAAI,KAAK;CAC9D,IAAI,eAAe,KAAK,cAAc,WAAW,KAAK,QACpD,OAAO;CAET,OAAO,eAAe,MAAM,YAAY,MAAM;AAChD;AAEA,SAAS,iBAAiB,YAAoC;CAC5D,IAAI,UAAU;CACd,MAAM,MAAkB,CAAC;CACzB,KAAK,MAAM,OAAO,OAAO,KAAK,UAAU,GAAG;EACzC,MAAM,WAAW,WAAW;EAC5B,MAAM,QACJ,aAAa,KAAA,KAAa,0BAA0B,GAAG,IAAI,gCAAgC,QAAQ,IAAI;EACzG,MAAM,WAAW,UAAU,KAAA,IAAY,QAAQ,qBAAqB,KAAK;EACzE,IAAI,aAAa,UACf,UAAU;EAEZ,IAAI,OAAO;CACb;CACA,OAAO,UAAU,MAAM;AACzB;AAEA,SAAS,aAAa,QAAoC;CACxD,IAAI,UAAU;CACd,MAAM,MAAM,OAAO,KAAK,UAAU;EAChC,IAAI,CAAC,MAAM,YACT,OAAO;EAET,MAAM,aAAa,iBAAiB,MAAM,UAAU;EACpD,IAAI,eAAe,MAAM,YACvB,OAAO;EAET,UAAU;EACV,OAAO;GAAE,GAAG;GAAO;EAAW;CAChC,CAAC;CACD,OAAO,UAAU,MAAM;AACzB;AAEA,SAAS,qBAAqB,OAAuC;CACnE,IAAI,OAAO,UAAU,UACnB,OAAO,aAAa,KAAK;CAE3B,IAAI,cAAc,KAAK,GAAG;EACxB,IAAI,UAAU;EACd,MAAM,MAAM,MAAM,KAAK,SAAS;GAC9B,IAAI,OAAO,SAAS,UAClB,OAAO;GAET,MAAM,WAAW,aAAa,IAAI;GAClC,IAAI,aAAa,MACf,UAAU;GAEZ,OAAO;EACT,CAAC;EACD,OAAO,UAAU,MAAM;CACzB;CACA,OAAO;AACT;AAEA,SAAS,cAAc,OAAkE;CACvF,OAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,SAAS;AAC5G;AAEA,SAAS,aAAa,OAAuB;CAC3C,MAAM,UAAU,MAAM,UAAU;CAChC,IAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,GAAG;EACtD,MAAM,WAAW,WAAW,KAAK;EACjC,IAAI,aAAa,KAAA,GACf,OAAO;CAEX;CACA,OAAO,SAAS,OAAO,KAAK;AAC9B;AAEA,SAAS,WAAW,OAAmC;CACrD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,KAAK;CAC3B,QAAQ;EACN;CACF;CACA,IAAI,WAAW,QAAQ,OAAO,WAAW,UACvC;CAEF,MAAM,cAAc,KAAK,UAAU,SAAS,OAAO,MAAM,CAAC;CAE1D,OAAO,gBAAgB,KAAK,UAAU,MAAM,IAAI,QAAQ;AAC1D;;;AC5FA,MAAM,qCAAqB,IAAI,IAAI;CAEjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,MAAM,6BAA6B;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,6BAA6B;CACjC;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAM,yCAAyB,IAAI,IAAI,CAAC,sBAAsB,uBAAuB,CAAC;AAItF,MAAM,uBAAuB;AAE7B,MAAM,8BAA8B;AAEpC,MAAM,sBAAsB,QAC1B,CAAC,uBAAuB,IAAI,GAAG,MAC9B,mBAAmB,IAAI,GAAG,KACzB,2BAA2B,MAAM,WAAW,IAAI,WAAW,MAAM,KAAK,WAAW,GAAG,IAAI,EAAE,KAC1F,2BAA2B,MAAM,YAAY,QAAQ,KAAK,GAAG,CAAC;AAIlE,SAAS,gBAAgB,OAAoC;CAC3D,IAAI,OAAO,UAAU,UACnB;CAEF,IAAI;EACF,MAAM,OAAgB,KAAK,MAAM,KAAK,CAAC,EAAE,SAAS;EAClD,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,WAAW,KAAK,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,IAAI,KAAA;CACxG,QAAQ;EACN;CACF;AACF;AAEA,SAAS,gBAAgB,YAAoC;CAC3D,MAAM,MAAkB,CAAC;CACzB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACrD,IAAI,mBAAmB,GAAG,GACxB;EAEF,IAAI,0BAA0B,GAAG,GAAG;GAClC,MAAM,cAAc,UAAU,KAAA,IAAY,KAAA,IAAY,kCAAkC,KAAK;GAC7F,IAAI,gBAAgB,KAAA,GAClB,IAAI,OAAO;GAEb;EACF;EACA,IAAI,QAAQ,6BAA6B;GACvC,MAAM,WAAW,gBAAgB,KAAK;GACtC,IAAI,aAAa,KAAA,GACf,IAAI,OAAO;GAEb;EACF;EACA,IAAI,OAAO;CACb;CACA,OAAO;AACT;AAEA,SAAS,YAAY,QAAoC;CACvD,OAAO,OACJ,QAAQ,UAAU,MAAM,SAAS,oBAAoB,CAAC,CACtD,KAAK,UAAW,MAAM,aAAa;EAAE,GAAG;EAAO,YAAY,gBAAgB,MAAM,UAAU;CAAE,IAAI,KAAM;AAC5G;;AAGA,SAAgB,aAAa,MAAkC;CAC7D,MAAM,WAAW,eACf,MACA,KAAK,aAAa,gBAAgB,KAAK,UAAU,IAAI,KAAK,YAC1D,KAAK,SAAS,YAAY,KAAK,MAAM,IAAI,KAAK,MAChD;CACA,IAAI,KAAK,QAAQ,SACf,OAAO,eAAe,UAAU,UAAU;EACxC,OAAO,EAAE,MAAM,KAAK,OAAO,KAAK;EAChC,YAAY;EACZ,cAAc;CAChB,CAAC;CAEH,OAAO;AACT;;;AC9KA,MAAa,2BAA8C;CACzD;CACA;CACA;CACA;CACA;AACF;AAGA,MAAM,mBAAmB;AAEzB,MAAM,eAAe,YAAwC;CAC3D,IAAI;EAEF,MAAM,YAAY,2BAA2B,KAAK,OAAO;EACzD,OAAO,IAAI,IAAI,YAAY,UAAU,WAAW,SAAS,CAAC,CAAC,SAAS,YAAY;CAClF,QAAQ;EACN;CACF;AACF;AAEA,MAAa,yBAAyB,YAAgD;CACpF,IAAI,CAAC,SACH,OAAO;CAET,MAAM,OAAO,YAAY,OAAO;CAChC,OAAO,SAAS,KAAA,KAAa,yBAAyB,SAAS,IAAI;AACrE;AAIA,MAAa,0BAA0B,YAA6C;CAClF,IAAI,CAAC,sBAAsB,OAAO,GAChC;CAEF,QAAQ,KACN,sLAEgC,iBAAiB,EACnD;AACF;AAMA,MAAM,8BAA8B,CAAC,kBAAkB,UAAU;AAEjE,MAAa,wCAAwC,eAA0D;CAC7G,IAAI,CAAC,YACH;CAEF,KAAK,MAAM,OAAO,6BAA6B;EAC7C,MAAM,QAAQ,WAAW;EACzB,IAAI,OAAO,UAAU,YAAY,sBAAsB,KAAK,GAAG;GAC7D,uBAAuB,KAAK;GAC5B;EACF;CACF;AACF;;;AC3DA,MAAMC,sBAAoB;AAG1B,MAAM,iBAAiB;AAEvB,SAASC,iBAAe,OAAyB;CAC/C,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACpD;AAEA,SAASC,gBAAc,OAAyB;CAE9C,QADwB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,OACzCF;AAC5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,IAAa,uBAAb,cAA0CG,wCAAAA,kBAAkB;CAI1D,YAAY,SAAsC;EAChD,MAAM,QAAQF,iBAAe,QAAQ,YAAY;EACjD,MAAM,WAAW,CAAC;EAClB,MAAM,OAAO,QAAQ,IAAI,IAAIC,gBAAc,QAAQ,IAAI,CAAC,CAAC,CAAC,SAASF;EACnE,MAAM;GACJ,KAAK,GAAG,KAAK;GACb,SAAS,QACL,EACE,eAAe,UAAU,QAC3B,IACA,CAAC;EACP,CAAC;EAED,KAAK,WAAW;EAChB,KAAK,cAAc,QAAQ,gBAAgB;EAC3C,IAAI,KAAK,UACP,QAAQ,KAAK,yFAAyF;CAE1G;CAEA,OAAgB,OAAuB,gBAAyE;EAC9G,IAAI,KAAK,UAAU;GAGjB,eAAe,EAAE,MAAM,eAAe,CAAC;GACvC;EACF;EAEA,MAAM,UAAU,MAAM,OAAO,QAAQ;EACrC,IAAI,QAAQ,WAAW,GAAG;GACxB,eAAe,EAAE,MAAM,eAAe,CAAC;GACvC;EACF;EACA,KAAK,MAAM,QAAQ,SACjB,qCAAqC,KAAK,UAAU;EAEtD,MAAM,YAAY,KAAK,cAAc,QAAQ,IAAI,YAAY,IAAI;EACjE,MAAM,OAAO,UAAU,IAAI,UAAU,GAAG,cAAc;CACxD;AACF;;;;AC/GA,MAAa,wBAAwB,QAAqC,cAAc,UACtF,gBAAgB,QAChB,QAAQ,gBAAgB,QACxB,QAAQ,iBAAiB,QACzB,QAAQ,SAAS,gBAAgB;;;ACEnC,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAG7B,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;AACF;AAIA,SAAS,YAAY,OAAoC;CACvD,OACE,OAAO,UAAU,YAAY,OAAO,UAAU,aAAc,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AAElH;AAEA,SAAS,4BAA4B,OAA0D;CAC7F,OAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,YAAY,IAAI,KAAK,OAAO,SAAS,OAAO,MAAM,EAAE;AAC3G;AAEA,SAAS,gBAAgB,MAAc,OAAyB;CAC9D,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,UAAU,mBAAmB;CAEzC,OAAO;AACT;AAEA,SAAS,iBAAiB,OAA4C;CACpE,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IACrD;CAEF,IAAI,YAAY,KAAK,KAAK,4BAA4B,KAAK,GACzD,OAAO;CAET,IAAI;EACF,MAAM,OAAO,KAAK,UAAU,OAAO,eAAe;EAClD,IAAI,SAAS,KAAA,KAAa,SAAS,QACjC;EAEF,OAAO,KAAK,WAAW,IAAG,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,KAAA,IAAY;CACxE,QAAQ;EACN;CACF;AACF;AAEA,SAAS,UAAU,SAAmC;CACpD,OAAO,QAAQ,QAAQ,cAAc,QAAQ,aAAa,OAAO,KAAK,QAAQ,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5G;AAEA,SAAgB,eAAe,QAA2D;CACxF,IAAI;EAEF,IAAI,OAAO,OAAO,eAAe,YAC/B;EAEF,MAAM,UAAU,OAAO,WAAW;EAClC,OAAO,WAAW,UAAU,OAAO,IAAI,UAAU,KAAA;CACnD,QAAQ;EAEN;CACF;AACF;AAEA,SAAS,aAAa,SAA0B,gBAAwC;CACtF,MAAM,cAAc,oBAAoB,MAAM,QAAQ,eAAe,SAAS,KAAA,CAAS;CACvF,MAAM,SAAkC;EACtC,GAAI,QAAQ,cAAc,CAAC,cAAc,GAAG,wBAAwB,QAAQ,WAAW,IAAI,CAAC;EAC5F,GAAI,QAAQ,YAAY,GAAG,uBAAuB,QAAQ,UAAU,IAAI,CAAC;EACzE,GAAG,QAAQ;CACb;CACA,MAAM,aAAyB,CAAC;CAChC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;EACjD,IAAI,eAAe,QAAQ,uBACzB;EAEF,MAAM,YAAY,iBAAiB,KAAK;EACxC,IAAI,cAAc,KAAA,GAChB,WAAW,OAAO;CAEtB;CACA,OAAO;AACT;AAEA,SAAgB,mBAAmB,MAAoB,SAAwC;CAC7F,IAAI;EACF,MAAM,aAAa,aAAa,SAAS,KAAK,UAAU;EACxD,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,WAAW,GACrC,OAAO;EAET,OAAO,eAAe,MAAM;GAAE,GAAG;GAAY,GAAG,KAAK;EAAW,CAAC;CACnE,QAAQ;EAEN,OAAO;CACT;AACF;;;ACtGA,MAAM,oBAAoB;AAE1B,SAAS,eAAe,OAAyB;CAC/C,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACpD;AAEA,SAAS,cAAc,OAAyB;CAE9C,QADwB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,OACzC;AAC5B;AAqCA,IAAM,oBAAN,MAAiD;CAC/C,QAAQ,OAAa,gBAA+B,CAEpD;CACA,MAAM,OAA2B,CAEjC;CACA,WAA0B;EACxB,OAAO,QAAQ,QAAQ;CACzB;CACA,aAA4B;EAC1B,OAAO,QAAQ,QAAQ;CACzB;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAa,uBAAb,MAA2D;CAMzD,YAAY,SAAsC;EAHV,KAAA,cAAA;EACJ,KAAA,mCAAA,IAAI,QAAuC;EAG7E,MAAM,QAAQ,eAAe,QAAQ,YAAY;EACjD,IAAI,CAAC,OAAO;GACV,QAAQ,KAAK,0FAA0F;GACvG,KAAK,QAAQ,IAAI,kBAAkB;GACnC;EACF;EACA,KAAK,SAAS,QAAQ;EACtB,KAAK,cAAc,QAAQ,gBAAgB;EAE3C,IAAI,QAAQ,gBACV,KAAK,QAAQ,QAAQ;OAChB;GACL,MAAM,OAAO,IAAI,IAAI,cAAc,QAAQ,IAAI,CAAC,CAAC,CAAC;GAClD,MAAM,WAAW,IAAII,wCAAAA,kBAAkB;IACrC,KAAK,GAAG,KAAK;IACb,SAAS,EACP,eAAe,UAAU,QAC3B;GACF,CAAC;GACD,KAAK,QAAQ,IAAIC,8BAAAA,mBAAmB,QAAQ;EAC9C;CACF;CAEA,QAAQ,MAAY,eAA8B;EAChD,MAAM,WAAW,KAAK,UAAU,eAAe,KAAK,MAAM;EAC1D,IAAI,UACF,KAAK,iBAAiB,IAAI,MAAM,QAAQ;EAK1C,KAAK,MAAM,QAAQ,MAAM,aAAa;CACxC;CAEA,MAAM,MAA0B;EAC9B,MAAM,WAAW,KAAK,iBAAiB,IAAI,IAAI;EAC/C,KAAK,iBAAiB,OAAO,IAAI;EACjC,IAAI,SAAS,IAAI,GAAG;GAClB,qCAAqC,KAAK,UAAU;GACpD,MAAM,aAAa,WAAW,mBAAmB,MAAM,QAAQ,IAAI;GACnE,MAAM,YAAY,qBAAqB,KAAK,QAAQ,KAAK,WAAW,IAAI,aAAa,UAAU,IAAI;GACnG,KAAK,MAAM,MAAM,WAAW,SAAS,CAAC;EACxC;CACF;CAEA,WAA0B;EACxB,OAAO,KAAK,MAAM,SAAS;CAC7B;CAEA,aAA4B;EAC1B,OAAO,KAAK,MAAM,WAAW;CAC/B;AACF"}

package/dist/otel/index.d.ts

@@ -23,6 +23,8 @@ import { Context } from "@opentelemetry/api";
 type PostHogTraceExporterOptions = {
   projectToken: string;
   host?: string;
+  /** Drop prompts, outputs, tool arguments and results, and error messages from exported spans. Defaults to false. */
+  privacyMode?: boolean;
 };
 /**
  * An OpenTelemetry `TraceExporter` that sends AI traces to PostHog's OTLP
@@ -57,6 +59,7 @@ type PostHogTraceExporterOptions = {
  */
 declare class PostHogTraceExporter extends OTLPTraceExporter {
   private readonly disabled;
+  private readonly privacyMode;
   constructor(options: PostHogTraceExporterOptions);
   export(spans: ReadableSpan[], resultCallback: (result: {
     code: number;
@@ -64,6 +67,18 @@ declare class PostHogTraceExporter extends OTLPTraceExporter {
   }) => void): void;
 }
 //#endregion
+//#region src/privacyMode.d.ts
+/** @internal */
+type PrivacyModeGate = {
+  readonly privacyMode?: boolean;
+  /** Legacy spelling, still honored for callers that set it directly. */
+  readonly privacy_mode?: boolean;
+  /** Read for posthog-node versions that predate the `privacyMode` accessor. */
+  readonly options?: {
+    readonly privacyMode?: boolean;
+  };
+};
+//#endregion
 //#region src/otel/requestContext.d.ts
 type CapturedContext = {
   distinctId?: string;
@@ -94,7 +109,12 @@ interface PostHogSpanProcessorOptions {
    * so mutating a context object while a span is open shows up in the export.
    * Must be the same posthog-node instance you call `withContext` or `enterContext` on.
    */
-  client?: PostHogContextSource;
+  client?: PostHogContextSource & PrivacyModeGate;
+  /**
+   * Drop prompts, outputs, tool arguments and results, and error messages from exported spans.
+   * Also on when the `client` was created with `privacyMode: true`. Defaults to false.
+   */
+  privacyMode?: boolean;
   /**
    * @internal Injected processor for testing — bypasses exporter creation.
    */
@@ -141,6 +161,7 @@ interface PostHogSpanProcessorOptions {
 declare class PostHogSpanProcessor implements SpanProcessor {
   private readonly inner;
   private readonly client?;
+  private readonly privacyMode;
   private readonly capturedContexts;
   constructor(options: PostHogSpanProcessorOptions);
   onStart(span: Span, parentContext: Context): void;