@rasputin-ai/node 0.7.1 → 0.7.2-beta.1

package/README.md

@@ -1,5 +1,5 @@
-# Official Rasputin AI SDK for Node and Bun
-
-Report application errors to Rasputin from Node or Bun services.
-
-See the [Node documentation](https://rasputinai.dev/docs/node/installation).
+# Official Rasputin AI SDK for Node and Bun
+
+Report application errors to Rasputin from Node or Bun services.
+
+See the [Node documentation](https://rasputinai.dev/docs/node/installation).

package/dist/execution-recorder/encode-frozen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encode-frozen.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/encode-frozen.ts"],"names":[],"mappings":"AAgFA,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,MAmCrD,CAAC;AA2KF,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,OAc7C,CAAC;AAWF,eAAO,MAAM,qBAAqB,GACjC,QAAQ,OAAO,EACf,cAAc,MAAM,EACpB,yBAAyB,MAAM,KAC7B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAQvD,CAAC"}
+{"version":3,"file":"encode-frozen.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/encode-frozen.ts"],"names":[],"mappings":"AAiFA,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,MAmCrD,CAAC;AA2KF,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,OAc7C,CAAC;AAWF,eAAO,MAAM,qBAAqB,GACjC,QAAQ,OAAO,EACf,cAAc,MAAM,EACpB,yBAAyB,MAAM,KAC7B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAQvD,CAAC"}

package/dist/execution-recorder/execution-recorder-types.d.ts

@@ -8,7 +8,11 @@ import type { EncodedFunctionPlan } from '@rasputin-ai/recorder';
 import type { PreparedFunctionPlan } from './function-plan';
 /** A file glob (`src/logger/**`) or a regular expression matched against a function id. */
 export type ExecutionSourceExclusion = string | RegExp;
-/** Limits and redaction for the runtime recorder. Defaults work for most apps. */
+/**
+ * Limits and redaction for the runtime recorder. Defaults work for most apps.
+ * At startup the recorder also hides values copied from likely-secret
+ * environment variables, including URL-encoded forms and connection-URL passwords.
+ */
 export type ExecutionRecorderOptions = {
     /** Turn runtime recording off. RasputinInit leaves this on unless you set `false`. */
     enabled?: boolean;

package/dist/execution-recorder/execution-recorder-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-recorder-types.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/execution-recorder-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EACX,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,cAAc,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,2FAA2F;AAC3F,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,kFAAkF;AAClF,MAAM,MAAM,wBAAwB,GAAG;IACtC,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sGAAsG;IACtG,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,cAAc,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC5C,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AACzD,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC;AACjD,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC;AACnD;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAEnD,gGAAgG;AAChG,MAAM,MAAM,2BAA2B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;CACxB,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,sBAAsB,GAAG;IACpC,4EAA4E;IAC5E,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sEAAsE;IACtE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,6BAA6B,EAAE,MAAM,CAAC;IACtC,+EAA+E;IAC/E,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,uBAAuB,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4DAA4D;IAC5D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,wBAAwB,EAAE,MAAM,CAAC;IACjC,8EAA8E;IAC9E,wBAAwB,EAAE,MAAM,CAAC;IACjC,4FAA4F;IAC5F,0BAA0B,EAAE,MAAM,CAAC;IACnC,sEAAsE;IACtE,2BAA2B,EAAE,MAAM,CAAC;IACpC,wDAAwD;IACxD,2BAA2B,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,wBAAwB,EAAE,MAAM,CAAC;IACjC,iGAAiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0GAA0G;IAC1G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,uBAAuB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,cAAc,GAAG;IAC5B,+FAA+F;IAC/F,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC;;;OAGG;IACH,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC;IACnD,qEAAqE;IACrE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;CACxD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG;IACpD,aAAa,EAAE,CAAC,WAAW,EAAE,gBAAgB,KAAK,cAAc,GAAG,SAAS,CAAC;CAC7E,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IACpC,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB;;;;OAIG;IACH,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,+DAA+D;IAC/D,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,4FAA4F;IAC5F,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,wFAAwF;IACxF,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,cAAc,CAAC;IAC7D;;;;;OAKG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,SAAS,OAAO,EAAE,EAAE,OAAO,EAC9C,UAAU,EAAE,MAAM,GAAG,2BAA2B,EAChD,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,KACxC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC;IAC9C,qEAAqE;IACrE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,qBAAqB,CAAC;IACpE,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,WAAW,EAAE,gBAAgB,KAAK,cAAc,GAAG,SAAS,CAAC;IAC7E,WAAW,EAAE,CAAC,CAAC,EACd,UAAU,EAAE,yBAAyB,GAAG,MAAM,EAC9C,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,QAAQ,EAAE,MAAM,CAAC,KACb,CAAC,CAAC;IACP,gBAAgB,EAAE,CAAC,CAAC,EACnB,KAAK,EAAE,SAAS,mBAAmB,EAAE,EACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,QAAQ,EAAE,MAAM,CAAC,EACjB,UAAU,CAAC,EAAE,OAAO,KAChB,CAAC,CAAC;IACP,oBAAoB,EAAE,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,CAAC;IACxF,mBAAmB,EAAE,CAAC,CAAC,EACtB,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,QAAQ,EAAE,MAAM,CAAC,EACjB,UAAU,CAAC,EAAE,OAAO,KAChB,CAAC,CAAC;IACP,qBAAqB,EAAE,CACtB,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,UAAU,CAAC,EAAE,OAAO,KAChB,kBAAkB,CAAC;CACxB,CAAC"}
+{"version":3,"file":"execution-recorder-types.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/execution-recorder-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EACX,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,cAAc,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,2FAA2F;AAC3F,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACtC,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sGAAsG;IACtG,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,cAAc,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC5C,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AACzD,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,oBAAoB,CAAC;AACjD,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC;AACnD;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAEnD,gGAAgG;AAChG,MAAM,MAAM,2BAA2B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;CACxB,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,sBAAsB,GAAG;IACpC,4EAA4E;IAC5E,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sEAAsE;IACtE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,6BAA6B,EAAE,MAAM,CAAC;IACtC,+EAA+E;IAC/E,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,uBAAuB,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4DAA4D;IAC5D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,wBAAwB,EAAE,MAAM,CAAC;IACjC,8EAA8E;IAC9E,wBAAwB,EAAE,MAAM,CAAC;IACjC,4FAA4F;IAC5F,0BAA0B,EAAE,MAAM,CAAC;IACnC,sEAAsE;IACtE,2BAA2B,EAAE,MAAM,CAAC;IACpC,wDAAwD;IACxD,2BAA2B,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,wBAAwB,EAAE,MAAM,CAAC;IACjC,iGAAiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0GAA0G;IAC1G,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,uBAAuB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,cAAc,GAAG;IAC5B,+FAA+F;IAC/F,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC;;;OAGG;IACH,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC;IACnD,qEAAqE;IACrE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;CACxD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG;IACpD,aAAa,EAAE,CAAC,WAAW,EAAE,gBAAgB,KAAK,cAAc,GAAG,SAAS,CAAC;CAC7E,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IACpC,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB;;;;OAIG;IACH,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,+DAA+D;IAC/D,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,4FAA4F;IAC5F,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,wFAAwF;IACxF,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,cAAc,CAAC;IAC7D;;;;;OAKG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,SAAS,OAAO,EAAE,EAAE,OAAO,EAC9C,UAAU,EAAE,MAAM,GAAG,2BAA2B,EAChD,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,KACxC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC;IAC9C,qEAAqE;IACrE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,qBAAqB,CAAC;IACpE,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,WAAW,EAAE,gBAAgB,KAAK,cAAc,GAAG,SAAS,CAAC;IAC7E,WAAW,EAAE,CAAC,CAAC,EACd,UAAU,EAAE,yBAAyB,GAAG,MAAM,EAC9C,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,QAAQ,EAAE,MAAM,CAAC,KACb,CAAC,CAAC;IACP,gBAAgB,EAAE,CAAC,CAAC,EACnB,KAAK,EAAE,SAAS,mBAAmB,EAAE,EACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,QAAQ,EAAE,MAAM,CAAC,EACjB,UAAU,CAAC,EAAE,OAAO,KAChB,CAAC,CAAC;IACP,oBAAoB,EAAE,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,CAAC;IACxF,mBAAmB,EAAE,CAAC,CAAC,EACtB,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,QAAQ,EAAE,MAAM,CAAC,EACjB,UAAU,CAAC,EAAE,OAAO,KAChB,CAAC,CAAC;IACP,qBAAqB,EAAE,CACtB,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EACxB,UAAU,CAAC,EAAE,OAAO,KAChB,kBAAkB,CAAC;CACxB,CAAC"}

package/dist/execution-recorder/execution-recorder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-recorder.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/execution-recorder.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAGX,wBAAwB,EACxB,gBAAgB,EAGhB,MAAM,4BAA4B,CAAC;AA2OpC,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,GACnC,SAAS,wBAAwB,GAAG,SAAS,KAC3C,gBA2/CF,CAAC"}
+{"version":3,"file":"execution-recorder.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/execution-recorder.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAGX,wBAAwB,EACxB,gBAAgB,EAGhB,MAAM,4BAA4B,CAAC;AA2OpC,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,GACnC,SAAS,wBAAwB,GAAG,SAAS,KAC3C,gBA+/CF,CAAC"}

package/dist/execution-recorder/safe-serialize.d.ts

@@ -2,8 +2,7 @@
  * Values are frozen on the hot path as a redacted structural snapshot, then encoded
  * to wire JSON only when an error snapshot is materialized.
  */
-import type { ExecutionRecorderOptions } from './execution-recorder-types';
-import { type FrozenSnapshot } from './value-freeze';
+import { type FrozenSnapshot, type ValueFreezeOptions } from './value-freeze';
 export { jsonLiteralUtf8Bytes } from './encode-frozen';
 export type SafeSerializedValue = {
     value: unknown;
@@ -17,6 +16,6 @@ export type SafeSerializer = {
     serialize: (value: unknown) => unknown;
     serializeWithBytes: (value: unknown) => SafeSerializedValue;
 };
-export declare const createSafeSerializer: (options?: ExecutionRecorderOptions) => SafeSerializer;
-export declare const safeSerialize: (value: unknown, options?: ExecutionRecorderOptions) => unknown;
+export declare const createSafeSerializer: (options?: ValueFreezeOptions) => SafeSerializer;
+export declare const safeSerialize: (value: unknown, options?: ValueFreezeOptions) => unknown;
 //# sourceMappingURL=safe-serialize.d.ts.map

package/dist/execution-recorder/safe-serialize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safe-serialize.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/safe-serialize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,cAAc,CAAC;IAC3C,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACrC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACvC,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,mBAAmB,CAAC;CAC5D,CAAC;AAUF,eAAO,MAAM,oBAAoB,GAAI,UAAS,wBAA6B,KAAG,cAgB7E,CAAC;AAaF,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,EAAE,UAAS,wBAA6B,KAAG,OAC1C,CAAC"}
+{"version":3,"file":"safe-serialize.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/safe-serialize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAsB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAElG,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,cAAc,CAAC;IAC3C,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACrC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACvC,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,mBAAmB,CAAC;CAC5D,CAAC;AAWF,eAAO,MAAM,oBAAoB,GAAI,UAAS,kBAAuB,KAAG,cAgBvE,CAAC;AAaF,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,EAAE,UAAS,kBAAuB,KAAG,OACpC,CAAC"}

package/dist/execution-recorder/value-freeze.d.ts

@@ -1,5 +1,4 @@
 import type { ExecutionRecorderOptions } from './execution-recorder-types';
-export declare const REDACTED = "[RASPUTIN_REDACTED]";
 export type FreezeLimits = {
     maxDepth: number;
     maxObjectKeys: number;
@@ -35,7 +34,10 @@ export type FrozenSnapshot = {
     oversize: boolean;
 };
 export declare const isFrozenAtom: (value: unknown) => value is FrozenAtom;
-export declare const createValueFreezer: (options?: ExecutionRecorderOptions) => {
+export type ValueFreezeOptions = ExecutionRecorderOptions & {
+    redactSecretValues?: (text: string) => string;
+};
+export declare const createValueFreezer: (options?: ValueFreezeOptions) => {
     freeze: (value: unknown) => FrozenSnapshot;
     limits: FreezeLimits;
 };

package/dist/execution-recorder/value-freeze.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"value-freeze.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/value-freeze.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAG3E,eAAO,MAAM,QAAQ,wBAAwB,CAAC;AAU9C,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;CAChC,CAAC;AAUF,eAAO,MAAM,MAAM,eAA4B,CAAC;AAEhD,MAAM,MAAM,UAAU,GACnB,WAAW,GACX,KAAK,GACL,UAAU,GACV,WAAW,GACX,IAAI,GACJ,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,OAAO,GACP,UAAU,GACV,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,GACT,KAAK,GACL,KAAK,GACL,UAAU,GACV,gBAAgB,GAChB,WAAW,GACX,UAAU,GACV,MAAM,CAAC;AAEV,MAAM,MAAM,UAAU,GAAG;IACxB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CAClB,CAAC;AAsXF,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,UACQ,CAAC;AAoBhE,eAAO,MAAM,kBAAkB,GAAI,UAAS,wBAA6B;oBA+ZjD,OAAO,KAAG,cAAc;;CA8B/C,CAAC"}
+{"version":3,"file":"value-freeze.d.ts","sourceRoot":"","sources":["../../src/execution-recorder/value-freeze.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAW3E,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;CAChC,CAAC;AAUF,eAAO,MAAM,MAAM,eAA4B,CAAC;AAEhD,MAAM,MAAM,UAAU,GACnB,WAAW,GACX,KAAK,GACL,UAAU,GACV,WAAW,GACX,IAAI,GACJ,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,OAAO,GACP,UAAU,GACV,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,GACT,KAAK,GACL,KAAK,GACL,UAAU,GACV,gBAAgB,GAChB,WAAW,GACX,UAAU,GACV,MAAM,CAAC;AAEV,MAAM,MAAM,UAAU,GAAG;IACxB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CAClB,CAAC;AAsXF,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,UACQ,CAAC;AAoBhE,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAC3D,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,UAAS,kBAAuB;oBAqa3C,OAAO,KAAG,cAAc;;CA8B/C,CAAC"}

package/dist/index.js

@@ -689,6 +689,7 @@ var scheduleInstrumentationManifestUpload = (options) => {
 // src/execution-recorder/execution-recorder.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 import {
+  createEnvSecretMatcher,
   rasputinOmitted,
   rasputinTagKind,
   runtimeFunctionId as runtimeFunctionId2
@@ -1414,11 +1415,12 @@ var enforceRuntimeStateSizeBudget = (input, options = {}) => {
 
 // src/execution-recorder/encode-frozen.ts
 import { Buffer as Buffer3 } from "node:buffer";
+import { RASPUTIN_REDACTED as RASPUTIN_REDACTED2 } from "@rasputin-ai/core";
 
 // src/execution-recorder/value-freeze.ts
 import { Buffer as Buffer2 } from "node:buffer";
 import { types } from "node:util";
-import { RASPUTIN_WIRE_TAG } from "@rasputin-ai/core";
+import { MAX_ENV_SECRET_NEEDLE_LENGTH, RASPUTIN_REDACTED, RASPUTIN_WIRE_TAG } from "@rasputin-ai/core";
 
 // src/execution-recorder/redact-keys.ts
 import { defaultSensitivePropertyNames, propertyNameIsSensitive } from "@rasputin-ai/core";
@@ -1454,7 +1456,6 @@ var keyIsRedacted = (key, redactKeys) => {
 };
 
 // src/execution-recorder/value-freeze.ts
-var REDACTED = "[RASPUTIN_REDACTED]";
 var defaults = {
   maxDepth: 3,
   maxObjectKeys: 30,
@@ -1766,7 +1767,7 @@ var redactSensitiveQuery = (text, redactKeys) => {
     }
     if (!keyIsRedacted(decoded, redactKeys) && !keyIsRedacted(rawKey, redactKeys)) return part;
     changed = true;
-    return `${rawKey}=${REDACTED}`;
+    return `${rawKey}=${RASPUTIN_REDACTED}`;
   });
   if (!changed) return text;
   return `${prefix}${next.join("&")}${suffix}`;
@@ -1783,7 +1784,7 @@ var redactUrlUserinfo = (text) => {
   const authority = rest.slice(0, authorityEnd);
   const userinfoEnd = authority.lastIndexOf("@");
   if (userinfoEnd < 0) return text;
-  return `${text.slice(0, schemeEnd + 3)}${REDACTED}@${authority.slice(userinfoEnd + 1)}${rest.slice(authorityEnd)}`;
+  return `${text.slice(0, schemeEnd + 3)}${RASPUTIN_REDACTED}@${authority.slice(userinfoEnd + 1)}${rest.slice(authorityEnd)}`;
 };
 var redactUrlLikeString = (text, redactKeys) => redactSensitiveQuery(redactUrlUserinfo(text), redactKeys);
 var isFrozenAtom = (value) => typeof value === "object" && value !== null && FROZEN in value;
@@ -1805,6 +1806,7 @@ var BYTE_LIMIT = "max_serialized_value_bytes";
 var createValueFreezer = (options = {}) => {
   const limits = compileFreezeLimits(options);
   const redactKeys = compileRedactKeys(options.redactKeys);
+  const redactSecretValues = options.redactSecretValues;
   const sharedPath = /* @__PURE__ */ new Set();
   let freezing = false;
   const add = (metrics, count) => {
@@ -1832,11 +1834,16 @@ var createValueFreezer = (options = {}) => {
       return value;
     }
     if (typeof value === "string") {
-      if (value.length <= limits.maxStringLength) {
-        add(metrics, stringEstimate(value));
-        return value;
+      let text = value;
+      if (redactSecretValues) {
+        const cap = limits.maxStringLength + MAX_ENV_SECRET_NEEDLE_LENGTH;
+        text = redactSecretValues(value.length > cap ? value.slice(0, cap) : value);
+      }
+      if (text.length <= limits.maxStringLength) {
+        add(metrics, stringEstimate(text));
+        return text;
       }
-      const sliced = value.slice(0, limits.maxStringLength);
+      const sliced = text.slice(0, limits.maxStringLength);
       add(metrics, NODE + stringEstimate(sliced) + 48);
       return atom("truncated", {
         reason: "max_string_length",
@@ -1936,9 +1943,9 @@ var createValueFreezer = (options = {}) => {
           const key = freezeInner(mapKey, depth + 1, path, metrics);
           if (!keepOverflowChild(key, metrics.oversize)) break;
           if (typeof mapKey === "string" && keyIsRedacted(mapKey, redactKeys)) {
-            add(metrics, stringEstimate(REDACTED));
+            add(metrics, stringEstimate(RASPUTIN_REDACTED));
             if (metrics.oversize) break;
-            entries.push([key, REDACTED]);
+            entries.push([key, RASPUTIN_REDACTED]);
           } else {
             const mapValue = freezeInner(
               Map.prototype.get.call(value, mapKey),
@@ -2014,9 +2021,9 @@ var createValueFreezer = (options = {}) => {
             continue;
           }
           if (redactNext) {
-            add(metrics, stringEstimate(REDACTED));
+            add(metrics, stringEstimate(RASPUTIN_REDACTED));
             if (metrics.oversize) break;
-            items.push(REDACTED);
+            items.push(RASPUTIN_REDACTED);
             redactNext = false;
           } else {
             const frozen = freezeInner(descriptor.value, depth + 1, path, metrics);
@@ -2149,9 +2156,9 @@ var createValueFreezer = (options = {}) => {
         add(metrics, stringEstimate(key));
         if (metrics.oversize) break;
         if (keyIsRedacted(key, redactKeys) || key === "value" && pairIsSensitive) {
-          add(metrics, stringEstimate(REDACTED));
+          add(metrics, stringEstimate(RASPUTIN_REDACTED));
           if (metrics.oversize) break;
-          assignFrozenField(fields, key, REDACTED);
+          assignFrozenField(fields, key, RASPUTIN_REDACTED);
           kept++;
           continue;
         }
@@ -2479,7 +2486,7 @@ var encodeAtom = (frozen) => {
   }
 };
 var encodeFrozen = (value) => {
-  if (value === REDACTED) return REDACTED;
+  if (value === RASPUTIN_REDACTED2) return RASPUTIN_REDACTED2;
   if (isFrozenAtom(value)) return encodeAtom(value);
   if (Array.isArray(value)) {
     const items = new Array(value.length);
@@ -2816,7 +2823,11 @@ var createExecutionRecorder = (options) => {
     maxActiveMemoryBytes,
     options.maxSerializedValueBytes ?? 16 * 1024
   );
-  const serializer = createSafeSerializer(options);
+  const envSecretMatcher = createEnvSecretMatcher();
+  const serializer = createSafeSerializer({
+    ...options,
+    ...envSecretMatcher.needleCount > 0 ? { redactSecretValues: envSecretMatcher.redact } : {}
+  });
   const excludesSource = createSourceExclusionMatcher(options.excludeSources);
   const journalPool = new ExecutionJournalPool(maxEventsPerExecution);
   const runtimeStateSizeBudget = {
@@ -4265,7 +4276,7 @@ var installGlobalHandlers = (client, options = {}) => {
 
 // src/sdk-meta.ts
 var SDK_NAME = "@rasputin-ai/node";
-var SDK_VERSION = "0.7.1";
+var SDK_VERSION = "0.7.2-beta.1";
 
 // src/rasputin-init.ts
 var publicExecution = (runtime) => ({

package/dist/instrument/bun.js

@@ -1606,7 +1606,7 @@ import ts14 from "typescript";
 import { originalPositionFor as originalPositionFor2, TraceMap as TraceMap3 } from "@jridgewell/trace-mapping";
 
 // src/sdk-meta.ts
-var SDK_VERSION = "0.7.1";
+var SDK_VERSION = "0.7.2-beta.1";
 
 // src/auto-instrumentation/source-map-locations.ts
 import { readFileSync } from "node:fs";

package/dist/instrument/node.js

@@ -1668,7 +1668,7 @@ import ts14 from "typescript";
 import { originalPositionFor as originalPositionFor3, TraceMap as TraceMap4 } from "@jridgewell/trace-mapping";
 
 // src/sdk-meta.ts
-var SDK_VERSION = "0.7.1";
+var SDK_VERSION = "0.7.2-beta.1";
 
 // src/auto-instrumentation/transform-disk-cache.ts
 var projectCacheDir = () => {

package/dist/internal.js

@@ -660,6 +660,7 @@ var scheduleInstrumentationManifestUpload = (options) => {
 // src/execution-recorder/execution-recorder.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 import {
+  createEnvSecretMatcher,
   rasputinOmitted,
   rasputinTagKind,
   runtimeFunctionId as runtimeFunctionId2
@@ -1385,11 +1386,12 @@ var enforceRuntimeStateSizeBudget = (input, options = {}) => {
 
 // src/execution-recorder/encode-frozen.ts
 import { Buffer as Buffer3 } from "node:buffer";
+import { RASPUTIN_REDACTED as RASPUTIN_REDACTED2 } from "@rasputin-ai/core";
 
 // src/execution-recorder/value-freeze.ts
 import { Buffer as Buffer2 } from "node:buffer";
 import { types } from "node:util";
-import { RASPUTIN_WIRE_TAG } from "@rasputin-ai/core";
+import { MAX_ENV_SECRET_NEEDLE_LENGTH, RASPUTIN_REDACTED, RASPUTIN_WIRE_TAG } from "@rasputin-ai/core";
 
 // src/execution-recorder/redact-keys.ts
 import { defaultSensitivePropertyNames, propertyNameIsSensitive } from "@rasputin-ai/core";
@@ -1425,7 +1427,6 @@ var keyIsRedacted = (key, redactKeys) => {
 };
 
 // src/execution-recorder/value-freeze.ts
-var REDACTED = "[RASPUTIN_REDACTED]";
 var defaults = {
   maxDepth: 3,
   maxObjectKeys: 30,
@@ -1737,7 +1738,7 @@ var redactSensitiveQuery = (text, redactKeys) => {
     }
     if (!keyIsRedacted(decoded, redactKeys) && !keyIsRedacted(rawKey, redactKeys)) return part;
     changed = true;
-    return `${rawKey}=${REDACTED}`;
+    return `${rawKey}=${RASPUTIN_REDACTED}`;
   });
   if (!changed) return text;
   return `${prefix}${next.join("&")}${suffix}`;
@@ -1754,7 +1755,7 @@ var redactUrlUserinfo = (text) => {
   const authority = rest.slice(0, authorityEnd);
   const userinfoEnd = authority.lastIndexOf("@");
   if (userinfoEnd < 0) return text;
-  return `${text.slice(0, schemeEnd + 3)}${REDACTED}@${authority.slice(userinfoEnd + 1)}${rest.slice(authorityEnd)}`;
+  return `${text.slice(0, schemeEnd + 3)}${RASPUTIN_REDACTED}@${authority.slice(userinfoEnd + 1)}${rest.slice(authorityEnd)}`;
 };
 var redactUrlLikeString = (text, redactKeys) => redactSensitiveQuery(redactUrlUserinfo(text), redactKeys);
 var isFrozenAtom = (value) => typeof value === "object" && value !== null && FROZEN in value;
@@ -1776,6 +1777,7 @@ var BYTE_LIMIT = "max_serialized_value_bytes";
 var createValueFreezer = (options = {}) => {
   const limits = compileFreezeLimits(options);
   const redactKeys = compileRedactKeys(options.redactKeys);
+  const redactSecretValues = options.redactSecretValues;
   const sharedPath = /* @__PURE__ */ new Set();
   let freezing = false;
   const add = (metrics, count) => {
@@ -1803,11 +1805,16 @@ var createValueFreezer = (options = {}) => {
       return value;
     }
     if (typeof value === "string") {
-      if (value.length <= limits.maxStringLength) {
-        add(metrics, stringEstimate(value));
-        return value;
+      let text = value;
+      if (redactSecretValues) {
+        const cap = limits.maxStringLength + MAX_ENV_SECRET_NEEDLE_LENGTH;
+        text = redactSecretValues(value.length > cap ? value.slice(0, cap) : value);
+      }
+      if (text.length <= limits.maxStringLength) {
+        add(metrics, stringEstimate(text));
+        return text;
       }
-      const sliced = value.slice(0, limits.maxStringLength);
+      const sliced = text.slice(0, limits.maxStringLength);
       add(metrics, NODE + stringEstimate(sliced) + 48);
       return atom("truncated", {
         reason: "max_string_length",
@@ -1907,9 +1914,9 @@ var createValueFreezer = (options = {}) => {
           const key = freezeInner(mapKey, depth + 1, path, metrics);
           if (!keepOverflowChild(key, metrics.oversize)) break;
           if (typeof mapKey === "string" && keyIsRedacted(mapKey, redactKeys)) {
-            add(metrics, stringEstimate(REDACTED));
+            add(metrics, stringEstimate(RASPUTIN_REDACTED));
             if (metrics.oversize) break;
-            entries.push([key, REDACTED]);
+            entries.push([key, RASPUTIN_REDACTED]);
           } else {
             const mapValue = freezeInner(
               Map.prototype.get.call(value, mapKey),
@@ -1985,9 +1992,9 @@ var createValueFreezer = (options = {}) => {
             continue;
           }
           if (redactNext) {
-            add(metrics, stringEstimate(REDACTED));
+            add(metrics, stringEstimate(RASPUTIN_REDACTED));
             if (metrics.oversize) break;
-            items.push(REDACTED);
+            items.push(RASPUTIN_REDACTED);
             redactNext = false;
           } else {
             const frozen = freezeInner(descriptor.value, depth + 1, path, metrics);
@@ -2120,9 +2127,9 @@ var createValueFreezer = (options = {}) => {
         add(metrics, stringEstimate(key));
         if (metrics.oversize) break;
         if (keyIsRedacted(key, redactKeys) || key === "value" && pairIsSensitive) {
-          add(metrics, stringEstimate(REDACTED));
+          add(metrics, stringEstimate(RASPUTIN_REDACTED));
           if (metrics.oversize) break;
-          assignFrozenField(fields, key, REDACTED);
+          assignFrozenField(fields, key, RASPUTIN_REDACTED);
           kept++;
           continue;
         }
@@ -2450,7 +2457,7 @@ var encodeAtom = (frozen) => {
   }
 };
 var encodeFrozen = (value) => {
-  if (value === REDACTED) return REDACTED;
+  if (value === RASPUTIN_REDACTED2) return RASPUTIN_REDACTED2;
   if (isFrozenAtom(value)) return encodeAtom(value);
   if (Array.isArray(value)) {
     const items = new Array(value.length);
@@ -2787,7 +2794,11 @@ var createExecutionRecorder = (options) => {
     maxActiveMemoryBytes,
     options.maxSerializedValueBytes ?? 16 * 1024
   );
-  const serializer = createSafeSerializer(options);
+  const envSecretMatcher = createEnvSecretMatcher();
+  const serializer = createSafeSerializer({
+    ...options,
+    ...envSecretMatcher.needleCount > 0 ? { redactSecretValues: envSecretMatcher.redact } : {}
+  });
   const excludesSource = createSourceExclusionMatcher(options.excludeSources);
   const journalPool = new ExecutionJournalPool(maxEventsPerExecution);
   const runtimeStateSizeBudget = {

package/dist/sdk-meta.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/generate-sdk-meta.ts — do not edit. */
 export declare const SDK_NAME = "@rasputin-ai/node";
-export declare const SDK_VERSION = "0.7.1";
+export declare const SDK_VERSION = "0.7.2-beta.1";
 //# sourceMappingURL=sdk-meta.d.ts.map

package/dist/sdk-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-meta.d.ts","sourceRoot":"","sources":["../src/sdk-meta.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,eAAO,MAAM,QAAQ,sBAAsB,CAAC;AAC5C,eAAO,MAAM,WAAW,UAAU,CAAC"}
+{"version":3,"file":"sdk-meta.d.ts","sourceRoot":"","sources":["../src/sdk-meta.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,eAAO,MAAM,QAAQ,sBAAsB,CAAC;AAC5C,eAAO,MAAM,WAAW,iBAAiB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rasputin-ai/node",
-	"version": "0.7.1",
+	"version": "0.7.2-beta.1",
 	"description": "Official Rasputin AI SDK for Node and Bun.",
 	"type": "module",
 	"exports": {
@@ -49,7 +49,7 @@
 	},
 	"dependencies": {
 		"@jridgewell/trace-mapping": "0.3.31",
-		"@rasputin-ai/core": "0.7.1",
+		"@rasputin-ai/core": "0.7.2-beta.1",
 		"typescript": "5"
 	},
 	"devDependencies": {