@posthog/ai 8.6.1 → 8.6.2

package/dist/openai/index.cjs

@@ -537,7 +537,7 @@ function formatOpenAIResponsesInput(input, instructions) {
   return messages;
 }
 
-var version = "8.6.1";
+var version = "8.6.2";
 
 const DEFAULT_MAX_DEPTH = 3;
 const MAX_STACK_LINES = 20;
@@ -656,8 +656,13 @@ const captureAiGeneration$1 = async (client, options) => {
   const eventType = options.eventType ?? AIEvent.Generation;
   const privacyMode = options.privacyMode ?? false;
   const usage = options.usage ?? {};
-  const safeInput = sanitizeValues(options.input);
-  const safeOutput = sanitizeValues(options.output);
+
+  // Check privacy before reading or traversing input/output. Besides avoiding
+  // needless work, this ensures hostile getters/proxies cannot observe a value
+  // that the caller explicitly requested us to redact.
+  const shouldRedact = withPrivacyMode(client, privacyMode, false) === null;
+  const safeInput = shouldRedact ? null : core.toJsonSafeValue(options.input);
+  const safeOutput = shouldRedact ? null : core.toJsonSafeValue(options.output);
   let httpStatus = options.httpStatus;
   let errorData = {};
   if (options.error) {
@@ -718,8 +723,8 @@ const captureAiGeneration$1 = async (client, options) => {
     $ai_provider: options.providerOverride ?? options.provider,
     $ai_model: options.modelOverride ?? options.model,
     $ai_model_parameters: options.modelParameters ?? {},
-    $ai_input: withPrivacyMode(client, privacyMode, safeInput),
-    $ai_output_choices: withPrivacyMode(client, privacyMode, safeOutput),
+    $ai_input: safeInput,
+    $ai_output_choices: safeOutput,
     $ai_http_status: httpStatus,
     $ai_input_tokens: usage.inputTokens ?? 0,
     ...(usage.outputTokens !== undefined ? {