@posthog/ai 8.6.1 → 8.6.3

package/dist/gemini/index.mjs

@@ -1,6 +1,6 @@
 import { GoogleGenAI } from '@google/genai';
 import { v4 } from 'uuid';
-import { uuidv7 } from '@posthog/core';
+import { toJsonSafeValue, uuidv7 } from '@posthog/core';
 
 // Type guards for safer type checking
 
@@ -380,7 +380,7 @@ function addDefaults(params) {
   };
 }
 
-var version = "8.6.1";
+var version = "8.6.3";
 
 const DEFAULT_MAX_DEPTH = 3;
 const MAX_STACK_LINES = 20;
@@ -491,120 +491,131 @@ const warnIfPostHogAiGateway = baseURL => {
  * so callers can re-throw the original error reference safely.
  */
 const captureAiGeneration = async (client, options) => {
-  if (!client.capture) {
-    return;
-  }
-  warnIfPostHogAiGateway(options.baseURL);
-  const traceId = options.traceId ?? v4();
-  const eventType = options.eventType ?? AIEvent.Generation;
-  const privacyMode = options.privacyMode ?? false;
-  const usage = options.usage ?? {};
-  const safeInput = sanitizeValues(options.input);
-  const safeOutput = sanitizeValues(options.output);
-  let httpStatus = options.httpStatus;
-  let errorData = {};
-  if (options.error) {
-    if (httpStatus === undefined) {
-      if (typeof options.error === 'object' && 'status' in options.error && typeof options.error.status === 'number') {
-        httpStatus = options.error.status;
-      } else {
-        httpStatus = 500;
-      }
+  try {
+    if (!client.capture) {
+      return;
     }
-    let exceptionId;
-    if (client.options?.enableExceptionAutocapture) {
-      exceptionId = uuidv7();
-      client.captureException(options.error, undefined, {
-        $ai_trace_id: traceId
-      }, exceptionId);
-      if (typeof options.error === 'object') {
-        options.error.__posthog_previously_captured_error = true;
+    warnIfPostHogAiGateway(options.baseURL);
+    const traceId = options.traceId ?? v4();
+    const eventType = options.eventType ?? AIEvent.Generation;
+    const privacyMode = options.privacyMode ?? false;
+    const usage = options.usage ?? {};
+
+    // Check privacy before reading or traversing input/output. Besides avoiding
+    // needless work, this ensures hostile getters/proxies cannot observe a value
+    // that the caller explicitly requested us to redact.
+    const shouldRedact = withPrivacyMode(client, privacyMode, false) === null;
+    const safeInput = shouldRedact ? null : toJsonSafeValue(options.input);
+    const safeOutput = shouldRedact ? null : toJsonSafeValue(options.output);
+    let httpStatus = options.httpStatus;
+    let errorData = {};
+    if (options.error) {
+      if (httpStatus === undefined) {
+        if (typeof options.error === 'object' && 'status' in options.error && typeof options.error.status === 'number') {
+          httpStatus = options.error.status;
+        } else {
+          httpStatus = 500;
+        }
+      }
+      let exceptionId;
+      if (client.options?.enableExceptionAutocapture) {
+        exceptionId = uuidv7();
+        client.captureException(options.error, undefined, {
+          $ai_trace_id: traceId
+        }, exceptionId);
+        if (typeof options.error === 'object') {
+          ;
+          options.error.__posthog_previously_captured_error = true;
+        }
       }
+      errorData = {
+        $ai_is_error: true,
+        $ai_error: stringifyError(options.error),
+        $exception_event_id: exceptionId
+      };
     }
-    errorData = {
-      $ai_is_error: true,
-      $ai_error: stringifyError(options.error),
-      $exception_event_id: exceptionId
+    httpStatus = httpStatus ?? 200;
+    let costOverrideData = {};
+    if (options.costOverride) {
+      const inputCostUSD = (options.costOverride.inputCost ?? 0) * (usage.inputTokens ?? 0);
+      const outputCostUSD = (options.costOverride.outputCost ?? 0) * (usage.outputTokens ?? 0);
+      costOverrideData = {
+        $ai_input_cost_usd: inputCostUSD,
+        $ai_output_cost_usd: outputCostUSD,
+        $ai_total_cost_usd: inputCostUSD + outputCostUSD
+      };
+    }
+    const additionalTokenValues = {
+      ...(usage.reasoningTokens ? {
+        $ai_reasoning_tokens: usage.reasoningTokens
+      } : {}),
+      ...(usage.cacheReadInputTokens ? {
+        $ai_cache_read_input_tokens: usage.cacheReadInputTokens
+      } : {}),
+      ...(usage.cacheCreationInputTokens ? {
+        $ai_cache_creation_input_tokens: usage.cacheCreationInputTokens
+      } : {}),
+      ...(usage.webSearchCount ? {
+        $ai_web_search_count: usage.webSearchCount
+      } : {}),
+      ...(usage.rawUsage ? {
+        $ai_usage: usage.rawUsage
+      } : {})
     };
-  }
-  httpStatus = httpStatus ?? 200;
-  let costOverrideData = {};
-  if (options.costOverride) {
-    const inputCostUSD = (options.costOverride.inputCost ?? 0) * (usage.inputTokens ?? 0);
-    const outputCostUSD = (options.costOverride.outputCost ?? 0) * (usage.outputTokens ?? 0);
-    costOverrideData = {
-      $ai_input_cost_usd: inputCostUSD,
-      $ai_output_cost_usd: outputCostUSD,
-      $ai_total_cost_usd: inputCostUSD + outputCostUSD
+    const properties = {
+      $ai_lib: 'posthog-ai',
+      $ai_lib_version: version,
+      $ai_provider: options.providerOverride ?? options.provider,
+      $ai_model: options.modelOverride ?? options.model,
+      $ai_model_parameters: options.modelParameters ?? {},
+      $ai_input: safeInput,
+      $ai_output_choices: safeOutput,
+      $ai_http_status: httpStatus,
+      $ai_input_tokens: usage.inputTokens ?? 0,
+      ...(usage.outputTokens !== undefined ? {
+        $ai_output_tokens: usage.outputTokens
+      } : {}),
+      ...additionalTokenValues,
+      $ai_latency: options.latency ?? 0,
+      ...(options.timeToFirstToken !== undefined ? {
+        $ai_time_to_first_token: options.timeToFirstToken
+      } : {}),
+      $ai_trace_id: traceId,
+      $ai_base_url: options.baseURL ?? '',
+      ...options.properties,
+      $ai_tokens_source: getTokensSource(options.properties),
+      ...(options.distinctId ? {} : {
+        $process_person_profile: false
+      }),
+      ...(options.stopReason ? {
+        $ai_stop_reason: options.stopReason
+      } : {}),
+      ...(options.tools ? {
+        $ai_tools: options.tools
+      } : {}),
+      ...(options.completionId ? {
+        $ai_completion_id: options.completionId
+      } : {}),
+      ...(options.providerMetadata && Object.keys(options.providerMetadata).length > 0 ? {
+        $ai_provider_metadata: options.providerMetadata
+      } : {}),
+      ...errorData,
+      ...costOverrideData
     };
-  }
-  const additionalTokenValues = {
-    ...(usage.reasoningTokens ? {
-      $ai_reasoning_tokens: usage.reasoningTokens
-    } : {}),
-    ...(usage.cacheReadInputTokens ? {
-      $ai_cache_read_input_tokens: usage.cacheReadInputTokens
-    } : {}),
-    ...(usage.cacheCreationInputTokens ? {
-      $ai_cache_creation_input_tokens: usage.cacheCreationInputTokens
-    } : {}),
-    ...(usage.webSearchCount ? {
-      $ai_web_search_count: usage.webSearchCount
-    } : {}),
-    ...(usage.rawUsage ? {
-      $ai_usage: usage.rawUsage
-    } : {})
-  };
-  const properties = {
-    $ai_lib: 'posthog-ai',
-    $ai_lib_version: version,
-    $ai_provider: options.providerOverride ?? options.provider,
-    $ai_model: options.modelOverride ?? options.model,
-    $ai_model_parameters: options.modelParameters ?? {},
-    $ai_input: withPrivacyMode(client, privacyMode, safeInput),
-    $ai_output_choices: withPrivacyMode(client, privacyMode, safeOutput),
-    $ai_http_status: httpStatus,
-    $ai_input_tokens: usage.inputTokens ?? 0,
-    ...(usage.outputTokens !== undefined ? {
-      $ai_output_tokens: usage.outputTokens
-    } : {}),
-    ...additionalTokenValues,
-    $ai_latency: options.latency ?? 0,
-    ...(options.timeToFirstToken !== undefined ? {
-      $ai_time_to_first_token: options.timeToFirstToken
-    } : {}),
-    $ai_trace_id: traceId,
-    $ai_base_url: options.baseURL ?? '',
-    ...options.properties,
-    $ai_tokens_source: getTokensSource(options.properties),
-    ...(options.distinctId ? {} : {
-      $process_person_profile: false
-    }),
-    ...(options.stopReason ? {
-      $ai_stop_reason: options.stopReason
-    } : {}),
-    ...(options.tools ? {
-      $ai_tools: options.tools
-    } : {}),
-    ...(options.completionId ? {
-      $ai_completion_id: options.completionId
-    } : {}),
-    ...(options.providerMetadata && Object.keys(options.providerMetadata).length > 0 ? {
-      $ai_provider_metadata: options.providerMetadata
-    } : {}),
-    ...errorData,
-    ...costOverrideData
-  };
-  const event = {
-    distinctId: options.distinctId ?? traceId,
-    event: eventType,
-    properties,
-    groups: options.groups
-  };
-  if (options.captureImmediate) {
-    await client.captureImmediate(event);
-  } else {
-    client.capture(event);
+    const event = {
+      distinctId: options.distinctId ?? traceId,
+      event: eventType,
+      properties,
+      groups: options.groups
+    };
+    if (options.captureImmediate) {
+      await client.captureImmediate(event);
+    } else {
+      client.capture(event);
+    }
+  } catch (error) {
+    // Telemetry failures must never affect the instrumented provider call.
+    console.warn('[PostHog AI] Failed to capture generation telemetry:', error);
   }
 };