@posthog/ai 8.6.0 → 8.6.2

package/dist/openai/index.mjs

@@ -1,6 +1,6 @@
 import { AzureOpenAI, OpenAI } from 'openai';
 import { v4 } from 'uuid';
-import { uuidv7 } from '@posthog/core';
+import { toJsonSafeValue, uuidv7 } from '@posthog/core';
 
 // Type guards for safer type checking
 
@@ -533,7 +533,7 @@ function formatOpenAIResponsesInput(input, instructions) {
   return messages;
 }
 
-var version = "8.6.0";
+var version = "8.6.2";
 
 const DEFAULT_MAX_DEPTH = 3;
 const MAX_STACK_LINES = 20;
@@ -652,8 +652,13 @@ const captureAiGeneration$1 = async (client, options) => {
   const eventType = options.eventType ?? AIEvent.Generation;
   const privacyMode = options.privacyMode ?? false;
   const usage = options.usage ?? {};
-  const safeInput = sanitizeValues(options.input);
-  const safeOutput = sanitizeValues(options.output);
+
+  // Check privacy before reading or traversing input/output. Besides avoiding
+  // needless work, this ensures hostile getters/proxies cannot observe a value
+  // that the caller explicitly requested us to redact.
+  const shouldRedact = withPrivacyMode(client, privacyMode, false) === null;
+  const safeInput = shouldRedact ? null : toJsonSafeValue(options.input);
+  const safeOutput = shouldRedact ? null : toJsonSafeValue(options.output);
   let httpStatus = options.httpStatus;
   let errorData = {};
   if (options.error) {
@@ -714,8 +719,8 @@ const captureAiGeneration$1 = async (client, options) => {
     $ai_provider: options.providerOverride ?? options.provider,
     $ai_model: options.modelOverride ?? options.model,
     $ai_model_parameters: options.modelParameters ?? {},
-    $ai_input: withPrivacyMode(client, privacyMode, safeInput),
-    $ai_output_choices: withPrivacyMode(client, privacyMode, safeOutput),
+    $ai_input: safeInput,
+    $ai_output_choices: safeOutput,
     $ai_http_status: httpStatus,
     $ai_input_tokens: usage.inputTokens ?? 0,
     ...(usage.outputTokens !== undefined ? {