agentid-sdk 0.1.34 → 0.1.35

package/dist/index.js

@@ -75,7 +75,7 @@ var OpenAIAdapter = class {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.34".trim().length > 0 ? "js-0.1.34" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.35".trim().length > 0 ? "js-0.1.35" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;
@@ -1188,6 +1188,7 @@ var PIIManager = class {
 
 // src/local-security-enforcer.ts
 var DEFAULT_FAIL_OPEN_CONFIG = {
+  version: null,
   shadow_mode: false,
   strict_security_mode: false,
   failure_mode: "fail_open",
@@ -1356,6 +1357,25 @@ function readOptionalFailureModeField(body, fallback) {
   }
   return fallback;
 }
+function readOptionalVersionField(body) {
+  if (!("version" in body)) {
+    return null;
+  }
+  const value = body.version;
+  if (value === null || value === void 0 || value === "") {
+    return null;
+  }
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return Math.trunc(value);
+  }
+  if (typeof value === "string") {
+    const parsed = Number.parseInt(value, 10);
+    if (Number.isFinite(parsed)) {
+      return parsed;
+    }
+  }
+  throw new Error("Invalid config field: version");
+}
 function normalizeCapabilityConfig(payload) {
   if (!payload || typeof payload !== "object") {
     throw new Error("Invalid config payload");
@@ -1373,6 +1393,7 @@ function normalizeCapabilityConfig(payload) {
     false
   );
   return {
+    version: readOptionalVersionField(body),
     shadow_mode: readOptionalBooleanField(body, "shadow_mode", false),
     strict_security_mode: effectiveStrictMode,
     failure_mode: effectiveStrictMode ? "fail_close" : "fail_open",
@@ -2314,6 +2335,9 @@ function buildSdkTimingMetadata(params) {
   setFiniteDurationMetadata(metadata, "sdk_local_scan_ms", params.sdkLocalScanMs);
   setFiniteDurationMetadata(metadata, "sdk_guard_ms", params.sdkGuardMs);
   setFiniteDurationMetadata(metadata, "sdk_ingest_ms", params.sdkIngestMs);
+  if (typeof params.sdkConfigVersion === "number" && Number.isFinite(params.sdkConfigVersion)) {
+    metadata.sdk_config_version = Math.trunc(params.sdkConfigVersion);
+  }
   return metadata;
 }
 function resolveConfiguredApiKey(value) {
@@ -2516,6 +2540,57 @@ function createCompletionChunkCollector() {
     result
   };
 }
+function getStreamingPlaceholderCarryLength(buffer, placeholders) {
+  if (!buffer || placeholders.length === 0) {
+    return 0;
+  }
+  let maxPlaceholderLength = 0;
+  for (const placeholder of placeholders) {
+    if (placeholder.length > maxPlaceholderLength) {
+      maxPlaceholderLength = placeholder.length;
+    }
+  }
+  const maxCarryLength = Math.min(buffer.length, Math.max(0, maxPlaceholderLength - 1));
+  let carryLength = 0;
+  for (let candidateLength = 1; candidateLength <= maxCarryLength; candidateLength += 1) {
+    const suffix = buffer.slice(-candidateLength);
+    if (placeholders.some((placeholder) => placeholder.startsWith(suffix))) {
+      carryLength = candidateLength;
+    }
+  }
+  return carryLength;
+}
+function createStreamingPlaceholderRewriter(piiManager, mapping) {
+  const placeholders = Object.keys(mapping).filter((placeholder) => placeholder.length > 0);
+  if (placeholders.length === 0) {
+    return null;
+  }
+  let pending = "";
+  return {
+    consume(chunk) {
+      if (!chunk) {
+        return "";
+      }
+      pending += chunk;
+      const carryLength = getStreamingPlaceholderCarryLength(pending, placeholders);
+      const flushLength = Math.max(0, pending.length - carryLength);
+      if (flushLength === 0) {
+        return "";
+      }
+      const flushable = pending.slice(0, flushLength);
+      pending = pending.slice(flushLength);
+      return piiManager.deanonymize(flushable, mapping);
+    },
+    flush() {
+      if (!pending) {
+        return "";
+      }
+      const remaining = piiManager.deanonymize(pending, mapping);
+      pending = "";
+      return remaining;
+    }
+  };
+}
 var SecurityBlockError = class extends Error {
   constructor(reason = "guard_denied") {
     super(`AgentID: Security Blocked (${reason})`);
@@ -2695,7 +2770,7 @@ var AgentID = class {
     }
     return config.block_on_heuristic;
   }
-  async refreshCapabilityConfigBeforeLocalEnforcement(params) {
+  async refreshCapabilityConfigBeforeClientControl(params) {
     const refreshed = await this.getCapabilityConfigWithTelemetry(true, params.options);
     return {
       capabilityConfig: refreshed.capabilityConfig,
@@ -2717,7 +2792,8 @@ var AgentID = class {
         eventId: params.clientEventId,
         clientEventId: params.clientEventId,
         telemetryMetadata: buildSdkTimingMetadata({
-          sdkConfigFetchMs: params.sdkConfigFetchMs
+          sdkConfigFetchMs: params.sdkConfigFetchMs,
+          sdkConfigVersion: params.capabilityConfig.version
         })
       });
     }
@@ -2762,15 +2838,38 @@ var AgentID = class {
       false,
       options
     );
+    let sanitizedInput = params.input;
+    let sdkLocalScanMs = 0;
+    if (this.configuredPiiMasking === null) {
+      const refreshed = await this.refreshCapabilityConfigBeforeClientControl({
+        capabilityConfig,
+        sdkConfigFetchMs,
+        options
+      });
+      capabilityConfig = refreshed.capabilityConfig;
+      sdkConfigFetchMs = refreshed.sdkConfigFetchMs;
+    }
     if (!this.clientFastFail) {
+      const effectivePiiMasking2 = this.resolveEffectivePiiMasking(capabilityConfig);
+      if (!capabilityConfig.block_pii_leakage && effectivePiiMasking2) {
+        const masked = this.pii.anonymize(sanitizedInput);
+        return {
+          sanitizedInput: masked.maskedText,
+          capabilityConfig,
+          sdkConfigFetchMs,
+          sdkLocalScanMs,
+          piiMapping: masked.mapping,
+          shouldDeanonymize: Object.keys(masked.mapping).length > 0
+        };
+      }
       return {
-        sanitizedInput: params.input,
+        sanitizedInput,
         capabilityConfig,
         sdkConfigFetchMs,
-        sdkLocalScanMs: 0
+        sdkLocalScanMs
       };
     }
-    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeClientControl({
       capabilityConfig,
       sdkConfigFetchMs,
       options
@@ -2787,11 +2886,25 @@ var AgentID = class {
       sdkConfigFetchMs,
       runPromptInjectionCheck: !params.skipInjectionScan
     });
+    sanitizedInput = enforced.sanitizedInput;
+    sdkLocalScanMs = enforced.sdkLocalScanMs;
+    const effectivePiiMasking = this.resolveEffectivePiiMasking(capabilityConfig);
+    if (!capabilityConfig.block_pii_leakage && effectivePiiMasking) {
+      const masked = this.pii.anonymize(sanitizedInput);
+      return {
+        sanitizedInput: masked.maskedText,
+        capabilityConfig,
+        sdkConfigFetchMs,
+        sdkLocalScanMs,
+        piiMapping: masked.mapping,
+        shouldDeanonymize: Object.keys(masked.mapping).length > 0
+      };
+    }
     return {
-      sanitizedInput: enforced.sanitizedInput,
+      sanitizedInput,
       capabilityConfig,
       sdkConfigFetchMs,
-      sdkLocalScanMs: enforced.sdkLocalScanMs
+      sdkLocalScanMs
     };
   }
   async applyLocalFallbackForGuardFailure(params, options) {
@@ -2800,7 +2913,7 @@ var AgentID = class {
       capabilityConfig: params.capabilityConfig,
       sdkConfigFetchMs: params.sdkConfigFetchMs
     } : await this.getCapabilityConfigWithTelemetry(false, options);
-    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeClientControl({
       capabilityConfig: resolvedConfig.capabilityConfig,
       sdkConfigFetchMs: resolvedConfig.sdkConfigFetchMs,
       options
@@ -2830,7 +2943,7 @@ var AgentID = class {
       false,
       options
     );
-    const refreshedConfig = await this.refreshCapabilityConfigBeforeLocalEnforcement({
+    const refreshedConfig = await this.refreshCapabilityConfigBeforeClientControl({
       capabilityConfig: initialConfig.capabilityConfig,
       sdkConfigFetchMs: initialConfig.sdkConfigFetchMs,
       options
@@ -2851,7 +2964,8 @@ var AgentID = class {
       eventId: options?.clientEventId,
       clientEventId: options?.clientEventId,
       telemetryMetadata: buildSdkTimingMetadata({
-        sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs
+        sdkConfigFetchMs: refreshedConfig.sdkConfigFetchMs,
+        sdkConfigVersion: refreshedConfig.capabilityConfig.version
       })
     });
   }
@@ -2904,7 +3018,10 @@ var AgentID = class {
         action_taken: params.actionTaken,
         ...buildSdkTimingMetadata({
           sdkConfigFetchMs: params.sdkConfigFetchMs,
-          sdkLocalScanMs: params.sdkLocalScanMs
+          sdkLocalScanMs: params.sdkLocalScanMs,
+          sdkConfigVersion: this.getCachedCapabilityConfig({
+            apiKey: params.apiKey
+          }).version
         })
       }
     }, { apiKey: params.apiKey });
@@ -3243,7 +3360,123 @@ var AgentID = class {
     const usage = chunk.usage;
     return usage && typeof usage === "object" && !Array.isArray(usage) ? usage : void 0;
   }
-  wrapCompletion(completion) {
+  isOpenAIStreamFinishChunk(chunk) {
+    if (!chunk || typeof chunk !== "object") {
+      return false;
+    }
+    const choices = chunk.choices;
+    if (!Array.isArray(choices)) {
+      return false;
+    }
+    return choices.some(
+      (choice) => choice && typeof choice === "object" && typeof choice.finish_reason === "string" && (choice.finish_reason ?? "").length > 0
+    );
+  }
+  setOpenAIStreamChunkText(chunk, text) {
+    if (!chunk || typeof chunk !== "object") {
+      return false;
+    }
+    const choices = chunk.choices;
+    if (!Array.isArray(choices)) {
+      return false;
+    }
+    let assigned = false;
+    const replaceInContainer = (container) => {
+      if (!container || typeof container !== "object") {
+        return false;
+      }
+      const content = container.content;
+      if (typeof content === "string") {
+        if (!assigned) {
+          container.content = text;
+          assigned = true;
+        } else {
+          container.content = "";
+        }
+        return true;
+      }
+      if (Array.isArray(content)) {
+        let replacedInArray = false;
+        for (const part of content) {
+          if (!part || typeof part !== "object") continue;
+          const typedPart = part;
+          if (typeof typedPart.text !== "string") continue;
+          if (!assigned && !replacedInArray) {
+            typedPart.text = text;
+            assigned = true;
+            replacedInArray = true;
+          } else {
+            typedPart.text = "";
+          }
+        }
+        if (!assigned && text.length > 0) {
+          content.unshift({ type: "text", text });
+          assigned = true;
+        }
+        return replacedInArray || assigned;
+      }
+      if (!assigned && text.length > 0) {
+        container.content = text;
+        assigned = true;
+        return true;
+      }
+      return false;
+    };
+    for (const choice of choices) {
+      if (!choice || typeof choice !== "object") {
+        continue;
+      }
+      const typedChoice = choice;
+      const replacedDelta = replaceInContainer(typedChoice.delta);
+      const replacedMessage = replaceInContainer(typedChoice.message);
+      if (!replacedDelta && !replacedMessage && !assigned && text.length > 0) {
+        if (!typedChoice.delta || typeof typedChoice.delta !== "object") {
+          typedChoice.delta = {};
+        }
+        typedChoice.delta.content = text;
+        assigned = true;
+      }
+    }
+    return assigned;
+  }
+  createSyntheticOpenAIStreamChunk(text, template) {
+    const synthetic = {};
+    if (template && typeof template === "object" && !Array.isArray(template)) {
+      const typedTemplate = template;
+      for (const key of ["id", "object", "created", "model"]) {
+        if (Object.prototype.hasOwnProperty.call(typedTemplate, key)) {
+          synthetic[key] = typedTemplate[key];
+        }
+      }
+    }
+    synthetic.choices = [
+      {
+        index: 0,
+        delta: { content: text },
+        finish_reason: null
+      }
+    ];
+    return synthetic;
+  }
+  rewriteOpenAIStreamChunkForClient(chunk, rewriter, isFinishChunk) {
+    const rawText = this.extractStreamChunkText(chunk);
+    const rewrittenText = rawText ? rewriter.consume(rawText) : "";
+    const finalText = isFinishChunk ? `${rewrittenText}${rewriter.flush()}` : rewrittenText;
+    if (typeof chunk === "string") {
+      return finalText ? [finalText] : [];
+    }
+    if (rawText) {
+      if (this.setOpenAIStreamChunkText(chunk, finalText)) {
+        return [chunk];
+      }
+      return finalText.length > 0 ? [this.createSyntheticOpenAIStreamChunk(finalText, chunk), chunk] : [chunk];
+    }
+    if (isFinishChunk && finalText.length > 0) {
+      return [this.createSyntheticOpenAIStreamChunk(finalText, chunk), chunk];
+    }
+    return [chunk];
+  }
+  wrapCompletion(completion, options) {
     if (typeof completion === "string") {
       const masked = this.pii.anonymize(completion);
       return {
@@ -3267,7 +3500,11 @@ var AgentID = class {
     const collector = createCompletionChunkCollector();
     const extractStreamChunkText = this.extractStreamChunkText.bind(this);
     const extractStreamChunkUsage = this.extractStreamChunkUsage.bind(this);
+    const isOpenAIStreamFinishChunk = this.isOpenAIStreamFinishChunk.bind(this);
+    const rewriteOpenAIStreamChunkForClient = this.rewriteOpenAIStreamChunkForClient.bind(this);
+    const createSyntheticOpenAIStreamChunk = this.createSyntheticOpenAIStreamChunk.bind(this);
     const piiManager = this.pii;
+    const streamRewriter = options?.deanonymizeForClient === true && options.piiMapping ? createStreamingPlaceholderRewriter(piiManager, options.piiMapping) : null;
     let lastUsage;
     let resolveDone = null;
     let rejectDone = null;
@@ -3278,17 +3515,44 @@ var AgentID = class {
     const wrapped = {
       [Symbol.asyncIterator]: async function* () {
         try {
+          let finishChunkFlushed = false;
+          let lastChunkTemplate;
           for await (const chunk of source) {
             const chunkText = extractStreamChunkText(chunk);
+            const isFinishChunk = streamRewriter ? isOpenAIStreamFinishChunk(chunk) : false;
             if (chunkText) {
               await collector.push(chunkText);
+              lastChunkTemplate = chunk;
             }
             const chunkUsage = extractStreamChunkUsage(chunk);
             if (chunkUsage) {
               lastUsage = chunkUsage;
             }
+            if (streamRewriter) {
+              const rewrittenChunks = rewriteOpenAIStreamChunkForClient(
+                chunk,
+                streamRewriter,
+                isFinishChunk
+              );
+              if (isFinishChunk) {
+                finishChunkFlushed = true;
+              }
+              for (const rewrittenChunk of rewrittenChunks) {
+                yield rewrittenChunk;
+              }
+              continue;
+            }
             yield chunk;
           }
+          if (streamRewriter && !finishChunkFlushed) {
+            const trailingText = streamRewriter.flush();
+            if (trailingText.length > 0) {
+              yield createSyntheticOpenAIStreamChunk(
+                trailingText,
+                lastChunkTemplate
+              );
+            }
+          }
           await collector.close();
           const rawOutput = await collector.result;
           const masked = piiManager.anonymize(rawOutput);
@@ -3401,6 +3665,8 @@ var AgentID = class {
                   }, requestOptions);
                   capabilityConfig = prepared.capabilityConfig;
                   maskedText = prepared.sanitizedInput;
+                  mapping = prepared.piiMapping ?? {};
+                  shouldDeanonymize = prepared.shouldDeanonymize === true;
                   sdkConfigFetchMs = prepared.sdkConfigFetchMs ?? 0;
                   sdkLocalScanMs = prepared.sdkLocalScanMs ?? 0;
                   if (maskedText !== userText) {
@@ -3412,24 +3678,6 @@ var AgentID = class {
                     nextCreateArgs[0] = maskedReq;
                     createArgs = nextCreateArgs;
                   }
-                  const effectivePiiMasking = this.resolveEffectivePiiMasking(capabilityConfig);
-                  if (!capabilityConfig.block_pii_leakage && effectivePiiMasking) {
-                    if (stream) {
-                      console.warn("AgentID: PII masking is disabled for streaming responses.");
-                    } else {
-                      const masked = this.pii.anonymize(maskedText);
-                      maskedText = masked.maskedText;
-                      mapping = masked.mapping;
-                      shouldDeanonymize = Object.keys(mapping).length > 0;
-                      maskedReq = this.withMaskedOpenAIRequest(
-                        req,
-                        maskedText
-                      );
-                      const nextCreateArgs = [...normalizedCreateArgs];
-                      nextCreateArgs[0] = maskedReq;
-                      createArgs = nextCreateArgs;
-                    }
-                  }
                 }
                 if (!maskedText) {
                   throw new Error(
@@ -3508,7 +3756,11 @@ var AgentID = class {
                       if (typeof streamResponse !== "undefined") {
                         yield streamResponse;
                       }
-                    })()
+                    })(),
+                    {
+                      piiMapping: mapping,
+                      deanonymizeForClient: shouldDeanonymize
+                    }
                   );
                   if (maskedText && wrappedCompletion.mode === "stream") {
                     void wrappedCompletion.done.then(async (result) => {
@@ -3545,7 +3797,8 @@ var AgentID = class {
                           ...buildSdkTimingMetadata({
                             sdkConfigFetchMs,
                             sdkLocalScanMs,
-                            sdkGuardMs: guardLatencyMs
+                            sdkGuardMs: guardLatencyMs,
+                            sdkConfigVersion: capabilityConfig.version
                           })
                         },
                         client_capabilities: this.buildClientCapabilities(
@@ -3612,7 +3865,8 @@ var AgentID = class {
                       ...buildSdkTimingMetadata({
                         sdkConfigFetchMs,
                         sdkLocalScanMs,
-                        sdkGuardMs: guardLatencyMs
+                        sdkGuardMs: guardLatencyMs,
+                        sdkConfigVersion: capabilityConfig.version
                       })
                     },
                     client_capabilities: this.buildClientCapabilities(

package/dist/index.mjs

@@ -7,7 +7,7 @@ import {
   SecurityBlockError,
   getInjectionScanner,
   scanWithRegex
-} from "./chunk-FCOSLPMF.mjs";
+} from "./chunk-XFSIAH3F.mjs";
 export {
   AgentID,
   DependencyError,

package/dist/langchain.d.mts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { A as AgentID } from './agentid-M5I7-YqI.mjs';
+import { A as AgentID } from './agentid-IonlG0NB.mjs';
 
 /**
  * LangChainJS callback handler (dependency-free shape).

package/dist/langchain.d.ts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { A as AgentID } from './agentid-M5I7-YqI.js';
+import { A as AgentID } from './agentid-IonlG0NB.js';
 
 /**
  * LangChainJS callback handler (dependency-free shape).