@raindrop-ai/ai-sdk 0.0.27 → 0.0.29

package/dist/{chunk-YP2VKVP7.mjs → chunk-QGI4SABN.mjs}

@@ -1,6 +1,6 @@
 import { AsyncLocalStorage } from 'async_hooks';
 
-// ../core/dist/chunk-LMIWKHOH.js
+// ../core/dist/chunk-VUNUOE2X.js
 function getCrypto() {
   const c = globalThis.crypto;
   return c;
@@ -223,6 +223,114 @@ function buildExportTraceServiceRequest(spans, serviceName = "raindrop.core", se
     ]
   };
 }
+var LOCAL_DEBUGGER_ENV_VAR = "RAINDROP_LOCAL_DEBUGGER";
+var WORKSHOP_ENV_VAR = "RAINDROP_WORKSHOP";
+var DEFAULT_LOCAL_WORKSHOP_URL = "http://localhost:5899/v1/";
+function readEnvVar(name) {
+  var _a;
+  try {
+    const env = (_a = globalThis == null ? void 0 : globalThis.process) == null ? void 0 : _a.env;
+    if (env && typeof env[name] === "string" && env[name].length > 0) {
+      return env[name];
+    }
+  } catch (e) {
+  }
+  return void 0;
+}
+function readWorkshopEnv() {
+  const raw = readEnvVar(WORKSHOP_ENV_VAR);
+  if (raw === void 0) return void 0;
+  const trimmed = raw.trim();
+  if (trimmed.length === 0) return void 0;
+  if (/^https?:\/\//i.test(trimmed)) return { url: trimmed };
+  if (/^(1|true|yes|on)$/i.test(trimmed)) return "enable";
+  if (/^(0|false|no|off)$/i.test(trimmed)) return "disable";
+  return void 0;
+}
+function isLocalDevHost(hostname) {
+  if (!hostname) return false;
+  if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "0.0.0.0" || hostname === "::1") {
+    return true;
+  }
+  if (hostname.endsWith(".localhost")) return true;
+  return false;
+}
+function readRuntimeHostname() {
+  try {
+    const loc = globalThis == null ? void 0 : globalThis.location;
+    if (loc && typeof loc.hostname === "string" && loc.hostname.length > 0) {
+      return loc.hostname;
+    }
+  } catch (e) {
+  }
+  return void 0;
+}
+function shouldAutoEnableLocalWorkshop() {
+  if (isLocalDevHost(readRuntimeHostname())) return true;
+  if (readEnvVar("NODE_ENV") === "development") return true;
+  return false;
+}
+function resolveLocalDebuggerBaseUrl(baseUrl) {
+  var _a, _b, _c;
+  if (baseUrl === null) return null;
+  if (typeof baseUrl === "string" && baseUrl.length > 0) {
+    return (_a = formatEndpoint(baseUrl)) != null ? _a : null;
+  }
+  const explicitUrlEnv = readEnvVar(LOCAL_DEBUGGER_ENV_VAR);
+  if (explicitUrlEnv) return (_b = formatEndpoint(explicitUrlEnv)) != null ? _b : null;
+  const workshopEnv = readWorkshopEnv();
+  if (workshopEnv === "disable") return null;
+  if (workshopEnv === "enable") return DEFAULT_LOCAL_WORKSHOP_URL;
+  if (workshopEnv && "url" in workshopEnv) return (_c = formatEndpoint(workshopEnv.url)) != null ? _c : null;
+  if (shouldAutoEnableLocalWorkshop()) return DEFAULT_LOCAL_WORKSHOP_URL;
+  return null;
+}
+function localDebuggerEnabled(baseUrl) {
+  return resolveLocalDebuggerBaseUrl(baseUrl) !== null;
+}
+function mirrorTraceExportToLocalDebugger(body, options = {}) {
+  var _a;
+  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
+  if (!baseUrl) return;
+  void postJson(`${baseUrl}traces`, body, {}, {
+    maxAttempts: 1,
+    debug: (_a = options.debug) != null ? _a : false,
+    sdkName: options.sdkName
+  }).catch(() => {
+  });
+}
+function mirrorPartialEventToLocalDebugger(event, options = {}) {
+  var _a;
+  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
+  if (!baseUrl) return;
+  const headers = options.writeKey ? { Authorization: `Bearer ${options.writeKey}` } : {};
+  void postJson(`${baseUrl}events/track_partial`, event, headers, {
+    maxAttempts: 1,
+    debug: (_a = options.debug) != null ? _a : false,
+    sdkName: options.sdkName
+  }).catch(() => {
+  });
+}
+function sendLocalDebuggerLiveEvent(event, options = {}) {
+  var _a, _b;
+  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
+  if (!baseUrl) return;
+  void postJson(
+    `${baseUrl}live`,
+    {
+      ...event,
+      type: event.type,
+      timestamp: (_a = event.timestamp) != null ? _a : Date.now()
+    },
+    {},
+    {
+      maxAttempts: 1,
+      debug: (_b = options.debug) != null ? _b : false,
+      sdkName: options.sdkName
+    }
+  ).catch(() => {
+  });
+}
 function mergePatches(target, source) {
   var _a, _b, _c, _d;
   const out = { ...target, ...source };
@@ -240,7 +348,7 @@ var EventShipper = class {
     this.sticky = /* @__PURE__ */ new Map();
     this.timers = /* @__PURE__ */ new Map();
     this.inFlight = /* @__PURE__ */ new Set();
-    var _a, _b, _c, _d, _e, _f, _g;
+    var _a, _b, _c, _d, _e, _f, _g, _h;
     this.writeKey = (_a = opts.writeKey) == null ? void 0 : _a.trim();
     this.baseUrl = (_b = formatEndpoint(opts.endpoint)) != null ? _b : "https://api.raindrop.ai/v1/";
     this.enabled = opts.enabled !== false;
@@ -249,11 +357,15 @@ var EventShipper = class {
     this.sdkName = (_d = opts.sdkName) != null ? _d : "core";
     this.prefix = `[raindrop-ai/${this.sdkName}]`;
     this.defaultEventName = (_e = opts.defaultEventName) != null ? _e : "ai_generation";
+    this.localDebuggerUrl = (_f = resolveLocalDebuggerBaseUrl(opts.localDebuggerUrl)) != null ? _f : void 0;
+    if (this.debug && this.localDebuggerUrl) {
+      console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
+    }
     const isNode = typeof process !== "undefined" && typeof process.version === "string";
     this.context = {
       library: {
-        name: (_f = opts.libraryName) != null ? _f : "@raindrop-ai/core",
-        version: (_g = opts.libraryVersion) != null ? _g : "0.0.0"
+        name: (_g = opts.libraryName) != null ? _g : "@raindrop-ai/core",
+        version: (_h = opts.libraryVersion) != null ? _h : "0.0.0"
       },
       metadata: {
         jsRuntime: isNode ? "node" : "web",
@@ -339,6 +451,7 @@ var EventShipper = class {
         }
       }
     ];
+    if (!this.writeKey) return;
     const url = `${this.baseUrl}signals/track`;
     try {
       await postJson(url, body, this.authHeaders(), {
@@ -369,6 +482,7 @@ var EventShipper = class {
         traits: (_a = user.traits) != null ? _a : {}
       };
     });
+    if (!this.writeKey) return;
     if (body.length === 0) return;
     const url = `${this.baseUrl}users/identify`;
     try {
@@ -445,6 +559,18 @@ var EventShipper = class {
         endpoint: url
       });
     }
+    if (this.localDebuggerUrl) {
+      mirrorPartialEventToLocalDebugger(payload, {
+        baseUrl: this.localDebuggerUrl,
+        writeKey: this.writeKey,
+        debug: this.debug,
+        sdkName: this.sdkName
+      });
+    }
+    if (!this.writeKey) {
+      if (!isPending) this.sticky.delete(eventId);
+      return;
+    }
     const p = postJson(url, payload, this.authHeaders(), {
       maxAttempts: 3,
       debug: this.debug,
@@ -469,101 +595,94 @@ var EventShipper = class {
     }
   }
 };
-var LOCAL_DEBUGGER_ENV_VAR = "RAINDROP_LOCAL_DEBUGGER";
-var WORKSHOP_ENV_VAR = "RAINDROP_WORKSHOP";
-var DEFAULT_LOCAL_WORKSHOP_URL = "http://localhost:5899/v1/";
-function readEnvVar(name) {
-  var _a;
-  try {
-    const env = (_a = globalThis == null ? void 0 : globalThis.process) == null ? void 0 : _a.env;
-    if (env && typeof env[name] === "string" && env[name].length > 0) {
-      return env[name];
+var DEFAULT_SECRET_KEY_NAMES = [
+  "apikey",
+  "apisecret",
+  "apitoken",
+  "secretaccesskey",
+  "sessiontoken",
+  "privatekey",
+  "privatekeyid",
+  "clientsecret",
+  "accesstoken",
+  "refreshtoken",
+  "oauthtoken",
+  "bearertoken",
+  "authorization",
+  "password",
+  "passphrase"
+];
+var REDACTED_PLACEHOLDER = "[REDACTED]";
+function normalizeKeyName(name) {
+  return name.toLowerCase().replace(/[-_.]/g, "");
+}
+function redactSecretsInObject(value, options) {
+  var _a, _b;
+  const normalizedSecretSet = buildSecretSet((_a = options == null ? void 0 : options.secretKeyNames) != null ? _a : DEFAULT_SECRET_KEY_NAMES);
+  const placeholder = (_b = options == null ? void 0 : options.placeholder) != null ? _b : REDACTED_PLACEHOLDER;
+  const seen = /* @__PURE__ */ new WeakSet();
+  const walk = (node) => {
+    if (node === null || typeof node !== "object") return node;
+    if (seen.has(node)) return "[CIRCULAR]";
+    seen.add(node);
+    if (Array.isArray(node)) {
+      return node.map((item) => walk(item));
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(node)) {
+      if (normalizedSecretSet.has(normalizeKeyName(k))) {
+        out[k] = placeholder;
+      } else {
+        out[k] = walk(v);
+      }
     }
+    return out;
+  };
+  return walk(value);
+}
+function buildSecretSet(names) {
+  const set = /* @__PURE__ */ new Set();
+  for (const name of names) set.add(normalizeKeyName(name));
+  return set;
+}
+var DEFAULT_REDACT_ATTRIBUTE_KEYS = [
+  "ai.request.providerOptions",
+  "ai.response.providerMetadata"
+];
+function defaultTransformSpan(span) {
+  const attrs = span.attributes;
+  if (!attrs || attrs.length === 0) return span;
+  let nextAttrs;
+  for (let i = 0; i < attrs.length; i++) {
+    const attr = attrs[i];
+    const redacted = redactJsonAttributeValue(attr.key, attr.value);
+    if (redacted === void 0) continue;
+    if (!nextAttrs) nextAttrs = attrs.slice();
+    nextAttrs[i] = { key: attr.key, value: redacted };
+  }
+  if (!nextAttrs) return span;
+  return { ...span, attributes: nextAttrs };
+}
+var REDACT_JSON_ATTRIBUTE_KEYS = new Set(DEFAULT_REDACT_ATTRIBUTE_KEYS);
+function redactJsonAttributeValue(key, value) {
+  if (!REDACT_JSON_ATTRIBUTE_KEYS.has(key)) return void 0;
+  const json = value.stringValue;
+  if (typeof json !== "string" || json.length === 0) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
   } catch (e) {
+    return void 0;
   }
-  return void 0;
-}
-function readWorkshopEnv() {
-  const raw = readEnvVar(WORKSHOP_ENV_VAR);
-  if (raw === void 0) return void 0;
-  const trimmed = raw.trim();
-  if (trimmed.length === 0) return void 0;
-  if (/^https?:\/\//i.test(trimmed)) return { url: trimmed };
-  if (/^(1|true|yes|on)$/i.test(trimmed)) return "enable";
-  if (/^(0|false|no|off)$/i.test(trimmed)) return "disable";
-  return void 0;
-}
-function isLocalDevHost(hostname) {
-  if (!hostname) return false;
-  if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "0.0.0.0" || hostname === "::1") {
-    return true;
-  }
-  if (hostname.endsWith(".localhost")) return true;
-  return false;
-}
-function readRuntimeHostname() {
+  const scrubbed = redactSecretsInObject(parsed);
+  let scrubbedJson;
   try {
-    const loc = globalThis == null ? void 0 : globalThis.location;
-    if (loc && typeof loc.hostname === "string" && loc.hostname.length > 0) {
-      return loc.hostname;
-    }
+    scrubbedJson = JSON.stringify(scrubbed);
   } catch (e) {
+    return void 0;
   }
-  return void 0;
-}
-function shouldAutoEnableLocalWorkshop() {
-  if (isLocalDevHost(readRuntimeHostname())) return true;
-  if (readEnvVar("NODE_ENV") === "development") return true;
-  return false;
-}
-function resolveLocalDebuggerBaseUrl(baseUrl) {
-  var _a, _b, _c;
-  if (baseUrl === null) return null;
-  if (typeof baseUrl === "string" && baseUrl.length > 0) {
-    return (_a = formatEndpoint(baseUrl)) != null ? _a : null;
-  }
-  const explicitUrlEnv = readEnvVar(LOCAL_DEBUGGER_ENV_VAR);
-  if (explicitUrlEnv) return (_b = formatEndpoint(explicitUrlEnv)) != null ? _b : null;
-  const workshopEnv = readWorkshopEnv();
-  if (workshopEnv === "disable") return null;
-  if (workshopEnv === "enable") return DEFAULT_LOCAL_WORKSHOP_URL;
-  if (workshopEnv && "url" in workshopEnv) return (_c = formatEndpoint(workshopEnv.url)) != null ? _c : null;
-  if (shouldAutoEnableLocalWorkshop()) return DEFAULT_LOCAL_WORKSHOP_URL;
-  return null;
-}
-function localDebuggerEnabled(baseUrl) {
-  return resolveLocalDebuggerBaseUrl(baseUrl) !== null;
-}
-function mirrorTraceExportToLocalDebugger(body, options = {}) {
-  var _a;
-  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
-  if (!baseUrl) return;
-  void postJson(`${baseUrl}traces`, body, {}, {
-    maxAttempts: 1,
-    debug: (_a = options.debug) != null ? _a : false,
-    sdkName: options.sdkName
-  }).catch(() => {
-  });
-}
-function sendLocalDebuggerLiveEvent(event, options = {}) {
-  var _a, _b;
-  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
-  if (!baseUrl) return;
-  void postJson(
-    `${baseUrl}live`,
-    {
-      ...event,
-      type: event.type,
-      timestamp: (_a = event.timestamp) != null ? _a : Date.now()
-    },
-    {},
-    {
-      maxAttempts: 1,
-      debug: (_b = options.debug) != null ? _b : false,
-      sdkName: options.sdkName
-    }
-  ).catch(() => {
-  });
+  if (scrubbedJson === json) return void 0;
+  return { stringValue: scrubbedJson };
 }
 var TraceShipper = class {
   constructor(opts) {
@@ -586,6 +705,42 @@ var TraceShipper = class {
     if (this.debug && this.localDebuggerUrl) {
       console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
     }
+    this.transformSpanHook = opts.transformSpan;
+    this.disableDefaultRedaction = opts.disableDefaultRedaction === true;
+  }
+  /**
+   * Apply the user `transformSpan` hook (if any) followed by the default
+   * redactor (unless disabled). Returns either the (possibly new) span to
+   * ship, or `null` to drop the span entirely.
+   *
+   * Ordering: user hook runs first so callers can rewrite the span freely
+   * (rename attrs, add new ones, scrub things the default doesn't know
+   * about). The default redactor then runs on whatever the user produced,
+   * acting as the always-on floor for documented BYOK secrets. If the user
+   * sets `disableDefaultRedaction: true`, the floor is skipped.
+   *
+   * Fail-closed: if the user hook throws, the span is dropped — a buggy
+   * hook can never accidentally ship raw, un-redacted spans.
+   */
+  redactSpan(span) {
+    let current = span;
+    if (this.transformSpanHook) {
+      try {
+        const result = this.transformSpanHook(current);
+        if (result === null) return null;
+        if (result !== void 0) current = result;
+      } catch (err) {
+        if (this.debug) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.warn(`${this.prefix} transformSpan hook threw: ${msg}`);
+        }
+        return null;
+      }
+    }
+    if (!this.disableDefaultRedaction) {
+      current = defaultTransformSpan(current);
+    }
+    return current;
   }
   isDebugEnabled() {
     return this.debug;
@@ -603,8 +758,8 @@ var TraceShipper = class {
     ];
     if ((_b = args.attributes) == null ? void 0 : _b.length) attrs.push(...args.attributes);
     const span = { ids, name: args.name, startTimeUnixNano: started, attributes: attrs };
-    if (this.localDebuggerUrl) {
-      const openSpan = buildOtlpSpan({
+    this.mirrorToLocalDebugger(
+      buildOtlpSpan({
         ids: span.ids,
         name: span.name,
         startTimeUnixNano: span.startTimeUnixNano,
@@ -612,16 +767,21 @@ var TraceShipper = class {
         // placeholder — will be updated on endSpan
         attributes: span.attributes,
         status: { code: SpanStatusCode.UNSET }
-      });
-      const body = buildExportTraceServiceRequest([openSpan], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+      })
+    );
     return span;
   }
+  mirrorToLocalDebugger(span) {
+    if (!this.localDebuggerUrl) return;
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
+    const body = buildExportTraceServiceRequest([redacted], this.serviceName, this.serviceVersion);
+    mirrorTraceExportToLocalDebugger(body, {
+      baseUrl: this.localDebuggerUrl,
+      debug: false,
+      sdkName: this.sdkName
+    });
+  }
   endSpan(span, extra) {
     var _a, _b;
     if (span.endTimeUnixNano) return;
@@ -643,14 +803,7 @@ var TraceShipper = class {
       status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   createSpan(args) {
     var _a;
@@ -668,14 +821,7 @@ var TraceShipper = class {
       status: args.status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   enqueue(span) {
     if (!this.enabled) return;
@@ -687,10 +833,12 @@ var TraceShipper = class {
         )}`
       );
     }
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
     if (this.queue.length >= this.maxQueueSize) {
       this.queue.shift();
     }
-    this.queue.push(span);
+    this.queue.push(redacted);
     if (this.queue.length >= this.maxBatchSize) {
       void this.flush().catch(() => {
       });
@@ -712,6 +860,7 @@ var TraceShipper = class {
     }
     while (this.queue.length > 0) {
       const batch = this.queue.splice(0, this.maxBatchSize);
+      if (!this.writeKey) continue;
       const body = buildExportTraceServiceRequest(batch, this.serviceName, this.serviceVersion);
       const url = `${this.baseUrl}traces`;
       if (this.debug) {
@@ -1488,6 +1637,11 @@ function attrsFromGenAiRequest(options) {
     )
   ];
 }
+function attrProviderOptions(options) {
+  if (!isRecord(options) || !isRecord(options["providerOptions"])) return void 0;
+  const json = safeJsonWithUint8(options["providerOptions"]);
+  return json ? attrString("ai.request.providerOptions", json) : void 0;
+}
 
 // src/internal/call-metadata.ts
 var SyncFallbackStorage = class {
@@ -4022,7 +4176,8 @@ function startDoGenerateSpan(operationId, options, modelInfo, parent, ctx) {
       ],
       attrString("gen_ai.system", modelInfo.provider),
       attrString("gen_ai.request.model", modelInfo.modelId),
-      ...attrsFromGenAiRequest(options)
+      ...attrsFromGenAiRequest(options),
+      attrProviderOptions(options)
     ]
   });
 }
@@ -4104,7 +4259,8 @@ function startDoStreamSpan(operationId, options, modelInfo, parent, ctx) {
       ],
       attrString("gen_ai.system", modelInfo.provider),
       attrString("gen_ai.request.model", modelInfo.modelId),
-      ...attrsFromGenAiRequest(options)
+      ...attrsFromGenAiRequest(options),
+      attrProviderOptions(options)
     ]
   });
 }
@@ -4177,7 +4333,7 @@ function extractNestedTokens(usage, key) {
 // package.json
 var package_default = {
   name: "@raindrop-ai/ai-sdk",
-  version: "0.0.27"};
+  version: "0.0.29"};
 
 // src/internal/version.ts
 var libraryName = package_default.name;
@@ -4264,7 +4420,7 @@ function envDebugEnabled() {
   return flag === "1" || flag === "true";
 }
 function createRaindropAISDK(opts) {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
   const writeKey = opts.writeKey;
   const eventsRequested = ((_a = opts.events) == null ? void 0 : _a.enabled) !== false;
   const tracesRequested = ((_b = opts.traces) == null ? void 0 : _b.enabled) !== false;
@@ -4293,7 +4449,9 @@ function createRaindropAISDK(opts) {
     flushIntervalMs: (_g = opts.traces) == null ? void 0 : _g.flushIntervalMs,
     maxBatchSize: (_h = opts.traces) == null ? void 0 : _h.maxBatchSize,
     maxQueueSize: (_i = opts.traces) == null ? void 0 : _i.maxQueueSize,
-    localDebuggerUrl
+    localDebuggerUrl,
+    transformSpan: (_j = opts.traces) == null ? void 0 : _j.transformSpan,
+    disableDefaultRedaction: (_k = opts.traces) == null ? void 0 : _k.disableDefaultRedaction
   });
   return {
     wrap(aiSDK, options) {
@@ -4416,4 +4574,4 @@ function createRaindropAISDK(opts) {
   };
 }
 
-export { RaindropTelemetryIntegration, _resetRaindropCallMetadataStorage, _resetWarnedMissingUserId, createRaindropAISDK, currentSpan, eventMetadata, eventMetadataFromChatRequest, getContextManager, getCurrentRaindropCallMetadata, readRaindropCallMetadataFromArgs, runWithRaindropCallMetadata, withCurrent };
+export { DEFAULT_REDACT_ATTRIBUTE_KEYS, DEFAULT_SECRET_KEY_NAMES, REDACTED_PLACEHOLDER, RaindropTelemetryIntegration, _resetRaindropCallMetadataStorage, _resetWarnedMissingUserId, createRaindropAISDK, currentSpan, defaultTransformSpan, eventMetadata, eventMetadataFromChatRequest, getContextManager, getCurrentRaindropCallMetadata, readRaindropCallMetadataFromArgs, redactJsonAttributeValue, redactSecretsInObject, runWithRaindropCallMetadata, withCurrent };