agentid-sdk 0.1.38 → 0.1.41

package/dist/index.js

@@ -33,6 +33,7 @@ __export(index_exports, {
   createAgentIdTelemetryContext: () => createAgentIdTelemetryContext,
   createAgentIdWorkflowTrail: () => createAgentIdWorkflowTrail,
   getInjectionScanner: () => getInjectionScanner,
+  protectMessageHistory: () => protectMessageHistory,
   scanWithRegex: () => scanWithRegex
 });
 module.exports = __toCommonJS(index_exports);
@@ -181,7 +182,7 @@ var OpenAIAdapter = class {
 
 // src/sdk-version.ts
 var FALLBACK_SDK_VERSION = "js-0.0.0-dev";
-var AGENTID_SDK_VERSION_HEADER = "js-0.1.38".trim().length > 0 ? "js-0.1.38" : FALLBACK_SDK_VERSION;
+var AGENTID_SDK_VERSION_HEADER = "js-0.1.41".trim().length > 0 ? "js-0.1.41" : FALLBACK_SDK_VERSION;
 
 // src/pii-national-identifiers.ts
 var MAX_CANDIDATES_PER_RULE = 256;
@@ -1167,9 +1168,9 @@ var SDK_SECRET_PATTERN_DEFINITIONS = [
   {
     id: "password_assignment",
     placeholderType: "PASSWORD_ASSIGNMENT",
-    patternSource: `(?:\\b|["'])(?:password|passwd|pwd)(?:\\b|["'])\\s*(?:(?::|=|=>)|(?:is|are|was|were)\\b)\\s*(?:"[A-Za-z0-9._~!@#$%^&*+=\\/-]{8,}"|'[A-Za-z0-9._~!@#$%^&*+=\\/-]{8,}'|[A-Za-z0-9._~!@#$%^&*+=\\/-]{8,})`,
+    patternSource: `(?:\\b|["'])(?:password|passwd|pwd|heslo)(?:\\b|["'])\\s*(?:(?::|=|=>)|(?:is|are|was|were|je)\\b)?\\s*(?:"[A-Za-z0-9._~!@#$%^&*+=\\/-]{8,}"|'[A-Za-z0-9._~!@#$%^&*+=\\/-]{8,}'|[A-Za-z0-9._~!@#$%^&*+=\\/-]{8,})`,
     flags: "iu",
-    prefilterTerms: ["password", "passwd", "pwd"]
+    prefilterTerms: ["password", "passwd", "pwd", "heslo"]
   },
   {
     id: "private_key_material",
@@ -1271,6 +1272,8 @@ var PHONE_CONTEXT_KEYWORDS = [
   "call",
   "contact",
   "number",
+  "cislo",
+  "\u010D\xEDslo",
   "hotline",
   "support",
   "infoline",
@@ -1679,9 +1682,9 @@ var DEFAULT_FAIL_OPEN_CONFIG = {
   block_on_heuristic: false,
   inject_transparency_metadata: false,
   block_pii_leakage: false,
-  enable_sdk_pii_masking: false,
+  enable_sdk_pii_masking: true,
   block_secret_leakage: false,
-  enable_sdk_secret_masking: false,
+  enable_sdk_secret_masking: true,
   block_db_access: false,
   block_code_execution: false,
   block_toxicity: false
@@ -2745,7 +2748,7 @@ var GUARD_MAX_ATTEMPTS = 3;
 var GUARD_RETRY_DELAYS_MS = [250, 500];
 var INGEST_MAX_ATTEMPTS = 3;
 var INGEST_RETRY_DELAYS_MS = [250, 500];
-var GUARD_VERDICT_CACHE_TTL_MS = 0;
+var GUARD_VERDICT_CACHE_TTL_MS = 1500;
 var MAX_INGEST_TEXT_CHARS = 32e3;
 var OPENAI_TELEMETRY_FIELD = "agentid_telemetry";
 function normalizeBaseUrl3(baseUrl) {
@@ -3593,6 +3596,7 @@ var AgentID = class {
   constructor(config = {}) {
     this.injectionScanner = getInjectionScanner();
     this.recentGuardVerdicts = /* @__PURE__ */ new Map();
+    this.pendingGuardRequests = /* @__PURE__ */ new Map();
     this.apiKey = resolveConfiguredApiKey(config.apiKey);
     this.baseUrl = normalizeBaseUrl3(config.baseUrl ?? "https://app.getagentid.com/api/v1");
     this.configuredPiiMasking = typeof config.piiMasking === "boolean" ? config.piiMasking : null;
@@ -3683,13 +3687,14 @@ var AgentID = class {
     }
     return createEventId2();
   }
-  buildGuardCacheKey(params) {
+  buildGuardCacheKey(params, apiKey) {
     if (!params.system_id || !params.input) {
       return null;
     }
     const userId = params.user_id?.trim() ?? "";
-    const normalizedInput = params.input.slice(0, 2048);
-    return `${params.system_id}|${userId}|${normalizedInput.length}|${normalizedInput}`;
+    const normalizedInput = params.input.trim().replace(/\s+/g, " ").slice(0, 2048);
+    const keyPrefix = apiKey?.slice(0, 24) ?? "";
+    return `${keyPrefix}|${params.system_id}|${userId}|${normalizedInput.length}|${normalizedInput}`;
   }
   readCachedGuardVerdict(cacheKey) {
     if (!cacheKey) return null;
@@ -3702,7 +3707,7 @@ var AgentID = class {
     return cached.verdict;
   }
   cacheGuardVerdict(cacheKey, verdict) {
-    if (!cacheKey || !verdict.allowed || GUARD_VERDICT_CACHE_TTL_MS <= 0) {
+    if (!cacheKey || GUARD_VERDICT_CACHE_TTL_MS <= 0) {
       return;
     }
     this.recentGuardVerdicts.set(cacheKey, {
@@ -3750,6 +3755,23 @@ var AgentID = class {
     const config = await this.getCapabilityConfig(false, options);
     return config.strict_security_mode || config.failure_mode === "fail_close";
   }
+  buildFailOpenGuardVerdict(reason, input, options) {
+    const capabilityConfig = this.getCachedCapabilityConfig(options);
+    const shouldMaskPii = capabilityConfig.block_pii_leakage || this.resolveEffectivePiiMasking(capabilityConfig);
+    const shouldMaskSecrets = capabilityConfig.block_secret_leakage === true || this.resolveEffectiveSecretMasking(capabilityConfig);
+    const response = { allowed: true, reason };
+    if (input && (shouldMaskPii || shouldMaskSecrets)) {
+      const masked = this.pii.anonymize(input, {
+        pii: shouldMaskPii,
+        secrets: shouldMaskSecrets
+      });
+      if (masked.maskedText !== input) {
+        response.transformed_input = masked.maskedText;
+        response.detected_pii = Object.keys(masked.mapping).length > 0;
+      }
+    }
+    return response;
+  }
   maybeRaiseStrictIngestDependencyError(params) {
     if (params.result.ok) {
       return;
@@ -3990,12 +4012,43 @@ var AgentID = class {
       })
     });
   }
-  withMaskedOpenAIRequest(req, maskedText) {
+  withMaskedOpenAIRequest(req, maskedText, options) {
     const messages = Array.isArray(req?.messages) ? req.messages : null;
     if (!messages) {
       return req;
     }
-    const newMessages = [...messages];
+    const newMessages = messages.map((message2) => {
+      if (!message2 || typeof message2 !== "object") {
+        return message2;
+      }
+      const typedMessage = message2;
+      const currentContent2 = typedMessage.content;
+      if (typeof currentContent2 === "string") {
+        return {
+          ...typedMessage,
+          content: this.pii.anonymize(currentContent2, options).maskedText
+        };
+      }
+      if (Array.isArray(currentContent2)) {
+        return {
+          ...typedMessage,
+          content: currentContent2.map((part) => {
+            if (!part || typeof part !== "object") {
+              return part;
+            }
+            const typedPart = part;
+            if (typeof typedPart.text !== "string") {
+              return part;
+            }
+            return {
+              ...typedPart,
+              text: this.pii.anonymize(typedPart.text, options).maskedText
+            };
+          })
+        };
+      }
+      return message2;
+    });
     let lastUserIdx = null;
     for (let i = 0; i < newMessages.length; i += 1) {
       const msg = newMessages[i];
@@ -4152,138 +4205,185 @@ var AgentID = class {
       ...params,
       client_capabilities: params.client_capabilities ?? this.buildClientCapabilities()
     };
-    const guardCacheKey = this.buildGuardCacheKey(payload);
+    const guardCacheKey = this.buildGuardCacheKey(payload, effectiveApiKey);
     const cachedVerdict = this.readCachedGuardVerdict(guardCacheKey);
     if (cachedVerdict) {
       return withGuardLatency(cachedVerdict);
     }
-    const correlationId = createCorrelationId(payload.client_event_id);
-    let lastStatusCode = null;
-    let lastAbort = false;
-    let lastError = null;
-    for (let attempt = 0; attempt < GUARD_MAX_ATTEMPTS; attempt += 1) {
-      const controller = new AbortController();
-      const timeoutId = setTimeout(() => controller.abort(), this.guardTimeoutMs);
-      try {
-        const res = await fetch(`${this.baseUrl}/guard`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "x-agentid-api-key": effectiveApiKey,
-            "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER,
-            "x-correlation-id": correlationId
-          },
-          body: JSON.stringify(payload),
-          signal: controller.signal
-        });
-        lastStatusCode = res.status;
-        const responseBody = await safeReadJson2(res);
-        if (responseBody && typeof responseBody.allowed === "boolean") {
-          const rawVerdict = responseBody;
-          const transparency = coerceTransparencyMetadata(rawVerdict.transparency);
-          const verdict = {
-            ...rawVerdict,
-            ...transparency ? { transparency } : {}
-          };
-          const infrastructureFailure = verdict.allowed === false && (isInfrastructureGuardReason(verdict.reason) || !verdict.reason && res.status >= 500);
-          if (infrastructureFailure) {
-            if (attempt < GUARD_MAX_ATTEMPTS - 1) {
-              await waitForRetry(attempt);
-              continue;
-            }
-            if (effectiveStrictMode) {
+    const pendingGuardRequest = guardCacheKey ? this.pendingGuardRequests.get(guardCacheKey) : void 0;
+    if (pendingGuardRequest) {
+      return withGuardLatency(await pendingGuardRequest.promise);
+    }
+    const executeGuardRequest = async () => {
+      const correlationId = createCorrelationId(payload.client_event_id);
+      let lastStatusCode = null;
+      let lastAbort = false;
+      let lastError = null;
+      for (let attempt = 0; attempt < GUARD_MAX_ATTEMPTS; attempt += 1) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.guardTimeoutMs);
+        try {
+          const res = await fetch(`${this.baseUrl}/guard`, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "x-agentid-api-key": effectiveApiKey,
+              "X-AgentID-SDK-Version": AGENTID_SDK_VERSION_HEADER,
+              "x-correlation-id": correlationId
+            },
+            body: JSON.stringify(payload),
+            signal: controller.signal
+          });
+          lastStatusCode = res.status;
+          const responseBody = await safeReadJson2(res);
+          if (responseBody && typeof responseBody.allowed === "boolean") {
+            const rawVerdict = responseBody;
+            const transparency = coerceTransparencyMetadata(rawVerdict.transparency);
+            const verdict = {
+              ...rawVerdict,
+              ...transparency ? { transparency } : {}
+            };
+            const infrastructureFailure = verdict.allowed === false && (isInfrastructureGuardReason(verdict.reason) || !verdict.reason && res.status >= 500);
+            if (infrastructureFailure) {
+              if (attempt < GUARD_MAX_ATTEMPTS - 1) {
+                await waitForRetry(attempt);
+                continue;
+              }
+              if (effectiveStrictMode) {
+                console.warn(
+                  `[AgentID] Guard API infrastructure failure in strict mode (${verdict.reason ?? `http_${res.status}`}). Blocking request.`
+                );
+                return withGuardLatency({
+                  allowed: false,
+                  reason: verdict.reason ?? "network_error_strict_mode"
+                });
+              }
               console.warn(
-                `[AgentID] Guard API infrastructure failure in strict mode (${verdict.reason ?? `http_${res.status}`}). Blocking request.`
+                `[AgentID] Guard API infrastructure fallback in fail-open mode (${verdict.reason ?? `http_${res.status}`}).`
               );
-              return withGuardLatency({
-                allowed: false,
-                reason: verdict.reason ?? "network_error_strict_mode"
+              this.logGuardFallback({
+                reason: verdict.reason ?? `http_${res.status}`,
+                status: "upstream_error",
+                guardParams: params,
+                apiKey: effectiveApiKey
               });
+              return withGuardLatency(
+                this.buildFailOpenGuardVerdict(
+                  "system_failure_fail_open",
+                  params.input,
+                  { apiKey: effectiveApiKey }
+                )
+              );
             }
-            console.warn(
-              `[AgentID] Guard API infrastructure fallback in fail-open mode (${verdict.reason ?? `http_${res.status}`}).`
-            );
+            this.cacheGuardVerdict(guardCacheKey, verdict);
+            return withGuardLatency(verdict);
+          }
+          if (!res.ok) {
+            if (res.status >= 500 && attempt < GUARD_MAX_ATTEMPTS - 1) {
+              await waitForRetry(attempt);
+              continue;
+            }
+            throw new Error(`API Error ${res.status}`);
+          }
+          throw new Error("Invalid guard response");
+        } catch (error) {
+          lastError = error;
+          const isAbortError2 = Boolean(
+            error && typeof error === "object" && error.name === "AbortError"
+          );
+          lastAbort = isAbortError2;
+          if (attempt < GUARD_MAX_ATTEMPTS - 1) {
+            await waitForRetry(attempt);
+            continue;
+          }
+          if (isAbortError2) {
+            const timeoutMessage = "AgentID API Warning: Connection timeout exceeded.";
+            console.warn(timeoutMessage);
             this.logGuardFallback({
-              reason: verdict.reason ?? `http_${res.status}`,
-              status: "upstream_error",
+              reason: "timeout_fallback",
+              status: "latency_timeout",
               guardParams: params,
               apiKey: effectiveApiKey
             });
-            return withGuardLatency({ allowed: true, reason: "system_failure_fail_open" });
-          }
-          this.cacheGuardVerdict(guardCacheKey, verdict);
-          return withGuardLatency(verdict);
-        }
-        if (!res.ok) {
-          if (res.status >= 500 && attempt < GUARD_MAX_ATTEMPTS - 1) {
-            await waitForRetry(attempt);
-            continue;
+            if (effectiveStrictMode) {
+              return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
+            }
+            return withGuardLatency(
+              this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+                apiKey: effectiveApiKey
+              })
+            );
           }
-          throw new Error(`API Error ${res.status}`);
-        }
-        throw new Error("Invalid guard response");
-      } catch (error) {
-        lastError = error;
-        const isAbortError2 = Boolean(
-          error && typeof error === "object" && error.name === "AbortError"
-        );
-        lastAbort = isAbortError2;
-        if (attempt < GUARD_MAX_ATTEMPTS - 1) {
-          await waitForRetry(attempt);
-          continue;
-        }
-        if (isAbortError2) {
-          const timeoutMessage = "AgentID API Warning: Connection timeout exceeded.";
-          console.warn(timeoutMessage);
+          console.warn(
+            effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
+            error
+          );
           this.logGuardFallback({
-            reason: "timeout_fallback",
-            status: "latency_timeout",
+            reason: "guard_unreachable",
+            status: "guard_unreachable",
             guardParams: params,
             apiKey: effectiveApiKey
           });
           if (effectiveStrictMode) {
             return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
           }
-          return withGuardLatency({ allowed: true, reason: "timeout_fallback" });
+          return withGuardLatency(
+            this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
+              apiKey: effectiveApiKey
+            })
+          );
+        } finally {
+          clearTimeout(timeoutId);
         }
-        console.warn(
-          effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
-          error
-        );
-        this.logGuardFallback({
-          reason: "guard_unreachable",
-          status: "guard_unreachable",
-          guardParams: params,
-          apiKey: effectiveApiKey
-        });
+      }
+      if (lastAbort) {
         if (effectiveStrictMode) {
           return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
         }
-        return withGuardLatency({ allowed: true, reason: "guard_unreachable" });
-      } finally {
-        clearTimeout(timeoutId);
+        return withGuardLatency(
+          this.buildFailOpenGuardVerdict("timeout_fallback", params.input, {
+            apiKey: effectiveApiKey
+          })
+        );
       }
-    }
-    if (lastAbort) {
+      if (typeof lastStatusCode === "number" && lastStatusCode >= 500) {
+        if (effectiveStrictMode) {
+          return withGuardLatency({ allowed: false, reason: "server_error" });
+        }
+        return withGuardLatency(
+          this.buildFailOpenGuardVerdict(
+            "system_failure_fail_open",
+            params.input,
+            { apiKey: effectiveApiKey }
+          )
+        );
+      }
+      console.warn(
+        effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
+        lastError
+      );
       if (effectiveStrictMode) {
         return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
       }
-      return withGuardLatency({ allowed: true, reason: "timeout_fallback" });
+      return withGuardLatency(
+        this.buildFailOpenGuardVerdict("guard_unreachable", params.input, {
+          apiKey: effectiveApiKey
+        })
+      );
+    };
+    if (!guardCacheKey) {
+      return executeGuardRequest();
     }
-    if (typeof lastStatusCode === "number" && lastStatusCode >= 500) {
-      if (effectiveStrictMode) {
-        return withGuardLatency({ allowed: false, reason: "server_error" });
+    const promise = executeGuardRequest();
+    this.pendingGuardRequests.set(guardCacheKey, { promise });
+    try {
+      return await promise;
+    } finally {
+      const pending = this.pendingGuardRequests.get(guardCacheKey);
+      if (pending?.promise === promise) {
+        this.pendingGuardRequests.delete(guardCacheKey);
       }
-      return withGuardLatency({ allowed: true, reason: "system_failure_fail_open" });
     }
-    console.warn(
-      effectiveStrictMode ? "[AgentID] Guard check failed (Strict mode active):" : "[AgentID] Guard check failed (Fail-Open active):",
-      lastError
-    );
-    if (effectiveStrictMode) {
-      return withGuardLatency({ allowed: false, reason: "network_error_strict_mode" });
-    }
-    return withGuardLatency({ allowed: true, reason: "guard_unreachable" });
   }
   async sendIngest(params, options, internal) {
     const ingestStartedAt = Date.now();
@@ -4788,6 +4888,7 @@ var AgentID = class {
                 let mapping = {};
                 let sdkConfigFetchMs = 0;
                 let sdkLocalScanMs = 0;
+                let providerMaskingOptions;
                 if (hasGuardContent) {
                   const prepared = await this.prepareInputForDispatch({
                     input: userText ?? "",
@@ -4797,6 +4898,10 @@ var AgentID = class {
                     telemetryMetadata
                   }, requestOptions);
                   capabilityConfig = prepared.capabilityConfig;
+                  providerMaskingOptions = {
+                    pii: !capabilityConfig.block_pii_leakage && this.resolveEffectivePiiMasking(capabilityConfig),
+                    secrets: !capabilityConfig.block_secret_leakage && this.resolveEffectiveSecretMasking(capabilityConfig)
+                  };
                   maskedText = prepared.sanitizedInput;
                   mapping = prepared.piiMapping ?? {};
                   sdkConfigFetchMs = prepared.sdkConfigFetchMs ?? 0;
@@ -4804,7 +4909,8 @@ var AgentID = class {
                   if (maskedText !== (userText ?? "")) {
                     maskedReq = this.withMaskedOpenAIRequest(
                       providerReq,
-                      maskedText
+                      maskedText,
+                      providerMaskingOptions
                     );
                     const nextCreateArgs = [...createArgs];
                     nextCreateArgs[0] = maskedReq;
@@ -4878,10 +4984,11 @@ var AgentID = class {
                   }
                 }
                 const currentRequestInput = adapter.extractInput(maskedReq) ?? "";
-                if (maskedText !== currentRequestInput) {
+                if (maskedText !== currentRequestInput || providerMaskingOptions?.pii === true || providerMaskingOptions?.secrets === true) {
                   maskedReq = this.withMaskedOpenAIRequest(
                     providerReq,
-                    maskedText
+                    maskedText,
+                    providerMaskingOptions
                   );
                   const nextCreateArgs = [...createArgs];
                   nextCreateArgs[0] = maskedReq;
@@ -4904,7 +5011,8 @@ var AgentID = class {
                   maskedText = transformedInput;
                   maskedReq = this.withMaskedOpenAIRequest(
                     providerReq,
-                    transformedInput
+                    transformedInput,
+                    providerMaskingOptions
                   );
                   const nextCreateArgs = [...createArgs];
                   nextCreateArgs[0] = maskedReq;
@@ -4951,7 +5059,7 @@ var AgentID = class {
                     void wrappedCompletion.done.then(async (result) => {
                       const modelLatencyMs2 = Math.max(0, Date.now() - modelStartedAt2);
                       const totalPipelineLatencyMs2 = Math.max(0, Date.now() - pipelineStartedAt);
-                      const outputForLog = isShadowMode ? result.rawOutput : result.transformedOutput;
+                      const outputForLog = result.transformedOutput;
                       const ingestResult = await this.sendIngest({
                         event_id: canonicalClientEventId,
                         system_id: systemId,
@@ -5025,7 +5133,7 @@ var AgentID = class {
                   });
                   const model = adapter.getModelName(maskedReq, res);
                   const usage = adapter.getTokenUsage(res);
-                  const outputForLog = isShadowMode ? wrappedCompletion.rawOutput : wrappedCompletion.transformedOutput;
+                  const outputForLog = wrappedCompletion.transformedOutput;
                   const ingestResult = await this.sendIngest({
                     event_id: canonicalClientEventId,
                     system_id: systemId,
@@ -5267,6 +5375,58 @@ var AgentIDWorkflowTrail = class {
 function createAgentIdWorkflowTrail(options) {
   return new AgentIDWorkflowTrail(options);
 }
+
+// src/message-history.ts
+function isPlainRecord(value) {
+  if (!value || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function protectMessageHistory(messages, options = { pii: true, secrets: true }) {
+  const piiManager = new PIIManager();
+  let textPartsCount = 0;
+  let transformedTextPartsCount = 0;
+  const protectString = (value) => {
+    textPartsCount += 1;
+    const masked = piiManager.anonymize(value, options).maskedText;
+    if (masked !== value) {
+      transformedTextPartsCount += 1;
+    }
+    return masked;
+  };
+  const visit = (value, key) => {
+    if (typeof value === "string") {
+      return key === "content" || key === "text" ? protectString(value) : value;
+    }
+    if (Array.isArray(value)) {
+      let changed = false;
+      const next = value.map((item) => {
+        const protectedItem = visit(item);
+        if (protectedItem !== item) changed = true;
+        return protectedItem;
+      });
+      return changed ? next : value;
+    }
+    if (isPlainRecord(value)) {
+      let changed = false;
+      const next = {};
+      for (const [entryKey, entryValue] of Object.entries(value)) {
+        const protectedValue = visit(entryValue, entryKey);
+        next[entryKey] = protectedValue;
+        if (protectedValue !== entryValue) changed = true;
+      }
+      return changed ? next : value;
+    }
+    return value;
+  };
+  const protectedMessages = visit(messages);
+  return {
+    messages: protectedMessages,
+    transformed: protectedMessages !== messages,
+    textPartsCount,
+    transformedTextPartsCount
+  };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AgentID,
@@ -5282,5 +5442,6 @@ function createAgentIdWorkflowTrail(options) {
   createAgentIdTelemetryContext,
   createAgentIdWorkflowTrail,
   getInjectionScanner,
+  protectMessageHistory,
   scanWithRegex
 });

package/dist/index.mjs

@@ -13,7 +13,59 @@ import {
   createAgentIdWorkflowTrail,
   getInjectionScanner,
   scanWithRegex
-} from "./chunk-AIGMQSAV.mjs";
+} from "./chunk-L2WVWRAC.mjs";
+
+// src/message-history.ts
+function isPlainRecord(value) {
+  if (!value || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function protectMessageHistory(messages, options = { pii: true, secrets: true }) {
+  const piiManager = new PIIManager();
+  let textPartsCount = 0;
+  let transformedTextPartsCount = 0;
+  const protectString = (value) => {
+    textPartsCount += 1;
+    const masked = piiManager.anonymize(value, options).maskedText;
+    if (masked !== value) {
+      transformedTextPartsCount += 1;
+    }
+    return masked;
+  };
+  const visit = (value, key) => {
+    if (typeof value === "string") {
+      return key === "content" || key === "text" ? protectString(value) : value;
+    }
+    if (Array.isArray(value)) {
+      let changed = false;
+      const next = value.map((item) => {
+        const protectedItem = visit(item);
+        if (protectedItem !== item) changed = true;
+        return protectedItem;
+      });
+      return changed ? next : value;
+    }
+    if (isPlainRecord(value)) {
+      let changed = false;
+      const next = {};
+      for (const [entryKey, entryValue] of Object.entries(value)) {
+        const protectedValue = visit(entryValue, entryKey);
+        next[entryKey] = protectedValue;
+        if (protectedValue !== entryValue) changed = true;
+      }
+      return changed ? next : value;
+    }
+    return value;
+  };
+  const protectedMessages = visit(messages);
+  return {
+    messages: protectedMessages,
+    transformed: protectedMessages !== messages,
+    textPartsCount,
+    transformedTextPartsCount
+  };
+}
 export {
   AgentID,
   AgentIDWorkflowStep,
@@ -28,5 +80,6 @@ export {
   createAgentIdTelemetryContext,
   createAgentIdWorkflowTrail,
   getInjectionScanner,
+  protectMessageHistory,
   scanWithRegex
 };

package/dist/langchain.d.mts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { a as AgentID, i as AgentTelemetryContext } from './agentid-CxVUF_eo.mjs';
+import { b as AgentID, j as AgentTelemetryContext } from './agentid-Mjh8rXn0.mjs';
 
 /**
  * LangChainJS callback handler (dependency-free shape).

package/dist/langchain.d.ts

@@ -1,5 +1,5 @@
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
-import { a as AgentID, i as AgentTelemetryContext } from './agentid-CxVUF_eo.js';
+import { b as AgentID, j as AgentTelemetryContext } from './agentid-Mjh8rXn0.js';
 
 /**
  * LangChainJS callback handler (dependency-free shape).