agentid-sdk 0.1.35 → 0.1.37

package/README.md

@@ -87,18 +87,16 @@ await agent.log({
 npm install agentid-sdk openai
 ```
 
-```ts
-import OpenAI from "openai";
-import { AgentID } from "agentid-sdk";
-
-const agent = new AgentID({
-  piiMasking: true,
-});
-
-const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY! });
-const secured = agent.wrapOpenAI(openai, {
-  system_id: process.env.AGENTID_SYSTEM_ID!,
-  user_id: "customer-123",
+```ts
+import OpenAI from "openai";
+import { AgentID } from "agentid-sdk";
+
+const agent = new AgentID();
+
+const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY! });
+const secured = agent.wrapOpenAI(openai, {
+  system_id: process.env.AGENTID_SYSTEM_ID!,
+  user_id: "customer-123",
   expected_languages: ["en"],
 });
 
@@ -107,8 +105,12 @@ const response = await secured.chat.completions.create({
   messages: [{ role: "user", content: "What is the capital of the Czech Republic?" }],
 });
 
-console.log(response.choices[0]?.message?.content ?? "");
-```
+console.log(response.choices[0]?.message?.content ?? "");
+```
+
+By default, official AgentID SDK integrations inherit `enable_sdk_pii_masking`
+from the dashboard/runtime config. You only need to set `piiMasking: true` in
+code if you want to force local masking on even when the dashboard policy is off.
 
 Wrapped OpenAI calls persist telemetry for both regular and streamed completions. For `stream: true`, logging happens when the stream finishes.
 

package/dist/{agentid-IonlG0NB.d.mts → agentid-JQx2Iy7B.d.mts}

@@ -157,6 +157,7 @@ declare class AgentID {
     get piiMasking(): boolean | undefined;
     private resolveEffectivePiiMasking;
     getEffectivePiiMasking(options?: RequestOptions): boolean;
+    getEffectivePiiMaskingForConfig(capabilityConfig?: CapabilityConfig): boolean;
     private buildClientCapabilities;
     private resolveApiKey;
     private resolveClientEventId;

package/dist/{agentid-IonlG0NB.d.ts → agentid-JQx2Iy7B.d.ts}

@@ -157,6 +157,7 @@ declare class AgentID {
     get piiMasking(): boolean | undefined;
     private resolveEffectivePiiMasking;
     getEffectivePiiMasking(options?: RequestOptions): boolean;
+    getEffectivePiiMaskingForConfig(capabilityConfig?: CapabilityConfig): boolean;
     private buildClientCapabilities;
     private resolveApiKey;
     private resolveClientEventId;

package/dist/{chunk-XFSIAH3F.mjs → chunk-HWES3LI2.mjs}

@@ -1810,7 +1810,7 @@ function getInjectionScanner() {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.35".trim().length > 0 ? "js-0.1.35" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.37".trim().length > 0 ? "js-0.1.37" : FALLBACK_SDK_VERSION;
 
 // src/local-security-enforcer.ts
 var DEFAULT_FAIL_OPEN_CONFIG = {
@@ -2604,14 +2604,20 @@ var AgentID = class {
     return this.configuredPiiMasking ?? void 0;
   }
   resolveEffectivePiiMasking(config) {
+    if (config?.enable_sdk_pii_masking === true) {
+      return true;
+    }
     if (this.configuredPiiMasking !== null) {
       return this.configuredPiiMasking;
     }
-    return config?.enable_sdk_pii_masking === true;
+    return false;
   }
   getEffectivePiiMasking(options) {
     return this.resolveEffectivePiiMasking(this.getCachedCapabilityConfig(options));
   }
+  getEffectivePiiMaskingForConfig(capabilityConfig) {
+    return this.resolveEffectivePiiMasking(capabilityConfig);
+  }
   buildClientCapabilities(framework = "js_sdk", hasFeedbackHandler = false, capabilityConfig) {
     return {
       capabilities: {

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { P as PIIManager } from './agentid-IonlG0NB.mjs';
-export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, b as PIIMapping, c as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-IonlG0NB.mjs';
+import { P as PIIManager } from './agentid-JQx2Iy7B.mjs';
+export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, b as PIIMapping, c as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-JQx2Iy7B.mjs';
 
 type TokenUsage = Record<string, unknown>;
 interface LLMAdapter {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { P as PIIManager } from './agentid-IonlG0NB.js';
-export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, b as PIIMapping, c as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-IonlG0NB.js';
+import { P as PIIManager } from './agentid-JQx2Iy7B.js';
+export { A as AgentID, D as DependencyError, G as GuardParams, a as GuardResponse, L as LogParams, b as PIIMapping, c as PreparedInput, R as RequestOptions, S as SecurityBlockError, T as TransparencyMetadata } from './agentid-JQx2Iy7B.js';
 
 type TokenUsage = Record<string, unknown>;
 interface LLMAdapter {

package/dist/index.js

@@ -75,7 +75,7 @@ var OpenAIAdapter = class {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.35".trim().length > 0 ? "js-0.1.35" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.37".trim().length > 0 ? "js-0.1.37" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;
@@ -2637,14 +2637,20 @@ var AgentID = class {
     return this.configuredPiiMasking ?? void 0;
   }
   resolveEffectivePiiMasking(config) {
+    if (config?.enable_sdk_pii_masking === true) {
+      return true;
+    }
     if (this.configuredPiiMasking !== null) {
       return this.configuredPiiMasking;
     }
-    return config?.enable_sdk_pii_masking === true;
+    return false;
   }
   getEffectivePiiMasking(options) {
     return this.resolveEffectivePiiMasking(this.getCachedCapabilityConfig(options));
   }
+  getEffectivePiiMaskingForConfig(capabilityConfig) {
+    return this.resolveEffectivePiiMasking(capabilityConfig);
+  }
   buildClientCapabilities(framework = "js_sdk", hasFeedbackHandler = false, capabilityConfig) {
     return {
       capabilities: {

package/dist/index.mjs

@@ -7,7 +7,7 @@ import {
   SecurityBlockError,
   getInjectionScanner,
   scanWithRegex
-} from "./chunk-XFSIAH3F.mjs";
+} from "./chunk-HWES3LI2.mjs";
 export {
   AgentID,
   DependencyError,

package/dist/langchain.d.mts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { A as AgentID } from './agentid-IonlG0NB.mjs';
+import { A as AgentID } from './agentid-JQx2Iy7B.mjs';
 
 /**
  * LangChainJS callback handler (dependency-free shape).
@@ -23,6 +23,7 @@ declare class AgentIDCallbackHandler extends BaseCallbackHandler {
     });
     private get requestOptions();
     private getLangchainCapabilities;
+    private resolvePreparedPiiMaskingEnabled;
     private preflight;
     handleLLMStart(serialized: unknown, prompts: unknown, runId?: string, _parentRunId?: string, extraParams?: unknown): Promise<void>;
     handleChatModelStart(serialized: unknown, messages: unknown, runId?: string, _parentRunId?: string, extraParams?: unknown): Promise<void>;

package/dist/langchain.d.ts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { A as AgentID } from './agentid-IonlG0NB.js';
+import { A as AgentID } from './agentid-JQx2Iy7B.js';
 
 /**
  * LangChainJS callback handler (dependency-free shape).
@@ -23,6 +23,7 @@ declare class AgentIDCallbackHandler extends BaseCallbackHandler {
     });
     private get requestOptions();
     private getLangchainCapabilities;
+    private resolvePreparedPiiMaskingEnabled;
     private preflight;
     handleLLMStart(serialized: unknown, prompts: unknown, runId?: string, _parentRunId?: string, extraParams?: unknown): Promise<void>;
     handleChatModelStart(serialized: unknown, messages: unknown, runId?: string, _parentRunId?: string, extraParams?: unknown): Promise<void>;

package/dist/langchain.js

@@ -27,7 +27,7 @@ var import_base = require("@langchain/core/callbacks/base");
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.35".trim().length > 0 ? "js-0.1.35" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.37".trim().length > 0 ? "js-0.1.37" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;
@@ -1495,16 +1495,23 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
   get requestOptions() {
     return this.apiKeyOverride ? { apiKey: this.apiKeyOverride } : void 0;
   }
-  getLangchainCapabilities() {
-    const piiMaskingEnabled = this.agent.getEffectivePiiMasking(this.requestOptions);
+  getLangchainCapabilities(piiMaskingEnabled) {
+    const resolvedPiiMaskingEnabled = typeof piiMaskingEnabled === "boolean" ? piiMaskingEnabled : this.agent.getEffectivePiiMasking(this.requestOptions);
     return {
       capabilities: {
         has_feedback_handler: true,
-        pii_masking_enabled: piiMaskingEnabled,
+        pii_masking_enabled: resolvedPiiMaskingEnabled,
         framework: "langchain"
       }
     };
   }
+  resolvePreparedPiiMaskingEnabled(prepared) {
+    const agentWithResolvedConfig = this.agent;
+    if (typeof agentWithResolvedConfig.getEffectivePiiMaskingForConfig === "function") {
+      return agentWithResolvedConfig.getEffectivePiiMaskingForConfig(prepared.capabilityConfig);
+    }
+    return this.agent.getEffectivePiiMasking(this.requestOptions);
+  }
   async preflight(input, stream, clientEventId) {
     const prepared = await this.agent.prepareInputForDispatch({
       input,
@@ -1525,6 +1532,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
     const stream = extractStreamFlag(serialized, extraParams);
     const prepared = await this.preflight(input, stream, requestedClientEventId);
     const sanitizedInput = prepared.sanitizedInput;
+    const piiMaskingEnabled = this.resolvePreparedPiiMaskingEnabled(prepared);
     if (sanitizedInput !== input) {
       const mutated = setPromptInPrompts(prompts, sanitizedInput);
       if (!mutated) {
@@ -1541,7 +1549,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       model: modelName,
       client_event_id: requestedClientEventId,
       expected_languages: this.expectedLanguages,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(piiMaskingEnabled)
     }, this.requestOptions);
     let transformedForRun = sanitizedInput;
     let sdkLocalScanMs = prepared.sdkLocalScanMs;
@@ -1599,7 +1607,8 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       piiMapping: normalizePiiMapping(prepared.piiMapping),
       shouldDeanonymize: prepared.shouldDeanonymize === true,
       responseStreamed: stream,
-      sdkConfigVersion: prepared.capabilityConfig?.version ?? null
+      sdkConfigVersion: prepared.capabilityConfig?.version ?? null,
+      piiMaskingEnabled
     });
     logCallbackDebug("handleLLMStart state_set", {
       runId: id,
@@ -1618,6 +1627,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
     const stream = extractStreamFlag(serialized, extraParams);
     const prepared = await this.preflight(input, stream, requestedClientEventId);
     const sanitizedInput = prepared.sanitizedInput;
+    const piiMaskingEnabled = this.resolvePreparedPiiMaskingEnabled(prepared);
     if (sanitizedInput !== input) {
       const mutated = setPromptInMessages(messages, sanitizedInput);
       if (!mutated) {
@@ -1634,7 +1644,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       model: modelName,
       client_event_id: requestedClientEventId,
       expected_languages: this.expectedLanguages,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(piiMaskingEnabled)
     }, this.requestOptions);
     let transformedForRun = sanitizedInput;
     let sdkLocalScanMs = prepared.sdkLocalScanMs;
@@ -1692,7 +1702,8 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       piiMapping: normalizePiiMapping(prepared.piiMapping),
       shouldDeanonymize: prepared.shouldDeanonymize === true,
       responseStreamed: stream,
-      sdkConfigVersion: prepared.capabilityConfig?.version ?? null
+      sdkConfigVersion: prepared.capabilityConfig?.version ?? null,
+      piiMaskingEnabled
     });
     logCallbackDebug("handleChatModelStart state_set", {
       runId: id,
@@ -1756,7 +1767,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       usage,
       latency: modelLatencyMs,
       metadata: Object.keys(metadata).length > 0 ? metadata : void 0,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(state.piiMaskingEnabled)
     }, this.requestOptions);
     logCallbackDebug("handleLLMEnd logged", {
       runId: id,
@@ -1798,7 +1809,7 @@ var AgentIDCallbackHandler = class extends import_base.BaseCallbackHandler {
       event_type: "error",
       severity: "error",
       metadata,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(state?.piiMaskingEnabled)
     }, this.requestOptions);
   }
 };

package/dist/langchain.mjs

@@ -1,7 +1,7 @@
 import {
   PIIManager,
   SecurityBlockError
-} from "./chunk-XFSIAH3F.mjs";
+} from "./chunk-HWES3LI2.mjs";
 
 // src/langchain.ts
 import { BaseCallbackHandler } from "@langchain/core/callbacks/base";
@@ -348,16 +348,23 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
   get requestOptions() {
     return this.apiKeyOverride ? { apiKey: this.apiKeyOverride } : void 0;
   }
-  getLangchainCapabilities() {
-    const piiMaskingEnabled = this.agent.getEffectivePiiMasking(this.requestOptions);
+  getLangchainCapabilities(piiMaskingEnabled) {
+    const resolvedPiiMaskingEnabled = typeof piiMaskingEnabled === "boolean" ? piiMaskingEnabled : this.agent.getEffectivePiiMasking(this.requestOptions);
     return {
       capabilities: {
         has_feedback_handler: true,
-        pii_masking_enabled: piiMaskingEnabled,
+        pii_masking_enabled: resolvedPiiMaskingEnabled,
         framework: "langchain"
       }
     };
   }
+  resolvePreparedPiiMaskingEnabled(prepared) {
+    const agentWithResolvedConfig = this.agent;
+    if (typeof agentWithResolvedConfig.getEffectivePiiMaskingForConfig === "function") {
+      return agentWithResolvedConfig.getEffectivePiiMaskingForConfig(prepared.capabilityConfig);
+    }
+    return this.agent.getEffectivePiiMasking(this.requestOptions);
+  }
   async preflight(input, stream, clientEventId) {
     const prepared = await this.agent.prepareInputForDispatch({
       input,
@@ -378,6 +385,7 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
     const stream = extractStreamFlag(serialized, extraParams);
     const prepared = await this.preflight(input, stream, requestedClientEventId);
     const sanitizedInput = prepared.sanitizedInput;
+    const piiMaskingEnabled = this.resolvePreparedPiiMaskingEnabled(prepared);
     if (sanitizedInput !== input) {
       const mutated = setPromptInPrompts(prompts, sanitizedInput);
       if (!mutated) {
@@ -394,7 +402,7 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
       model: modelName,
       client_event_id: requestedClientEventId,
       expected_languages: this.expectedLanguages,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(piiMaskingEnabled)
     }, this.requestOptions);
     let transformedForRun = sanitizedInput;
     let sdkLocalScanMs = prepared.sdkLocalScanMs;
@@ -452,7 +460,8 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
       piiMapping: normalizePiiMapping(prepared.piiMapping),
       shouldDeanonymize: prepared.shouldDeanonymize === true,
       responseStreamed: stream,
-      sdkConfigVersion: prepared.capabilityConfig?.version ?? null
+      sdkConfigVersion: prepared.capabilityConfig?.version ?? null,
+      piiMaskingEnabled
     });
     logCallbackDebug("handleLLMStart state_set", {
       runId: id,
@@ -471,6 +480,7 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
     const stream = extractStreamFlag(serialized, extraParams);
     const prepared = await this.preflight(input, stream, requestedClientEventId);
     const sanitizedInput = prepared.sanitizedInput;
+    const piiMaskingEnabled = this.resolvePreparedPiiMaskingEnabled(prepared);
     if (sanitizedInput !== input) {
       const mutated = setPromptInMessages(messages, sanitizedInput);
       if (!mutated) {
@@ -487,7 +497,7 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
       model: modelName,
       client_event_id: requestedClientEventId,
       expected_languages: this.expectedLanguages,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(piiMaskingEnabled)
     }, this.requestOptions);
     let transformedForRun = sanitizedInput;
     let sdkLocalScanMs = prepared.sdkLocalScanMs;
@@ -545,7 +555,8 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
       piiMapping: normalizePiiMapping(prepared.piiMapping),
       shouldDeanonymize: prepared.shouldDeanonymize === true,
       responseStreamed: stream,
-      sdkConfigVersion: prepared.capabilityConfig?.version ?? null
+      sdkConfigVersion: prepared.capabilityConfig?.version ?? null,
+      piiMaskingEnabled
     });
     logCallbackDebug("handleChatModelStart state_set", {
       runId: id,
@@ -609,7 +620,7 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
       usage,
       latency: modelLatencyMs,
       metadata: Object.keys(metadata).length > 0 ? metadata : void 0,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(state.piiMaskingEnabled)
     }, this.requestOptions);
     logCallbackDebug("handleLLMEnd logged", {
       runId: id,
@@ -651,7 +662,7 @@ var AgentIDCallbackHandler = class extends BaseCallbackHandler {
       event_type: "error",
       severity: "error",
       metadata,
-      client_capabilities: this.getLangchainCapabilities()
+      client_capabilities: this.getLangchainCapabilities(state?.piiMaskingEnabled)
     }, this.requestOptions);
   }
 };

package/dist/transparency-badge.d.mts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { T as TransparencyMetadata } from './agentid-IonlG0NB.mjs';
+import { T as TransparencyMetadata } from './agentid-JQx2Iy7B.mjs';
 
 type AgentIDTransparencyBadgeTelemetry = {
     systemId: string;

package/dist/transparency-badge.d.ts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { T as TransparencyMetadata } from './agentid-IonlG0NB.js';
+import { T as TransparencyMetadata } from './agentid-JQx2Iy7B.js';
 
 type AgentIDTransparencyBadgeTelemetry = {
     systemId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentid-sdk",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "description": "AgentID JavaScript/TypeScript SDK for guard, ingest, tracing, and analytics.",
   "license": "MIT",
   "homepage": "https://agentid.ai",