langsmith 0.9.0 → 0.10.0

package/dist/wrappers/anthropic.js

@@ -1,7 +1,7 @@
 import { wrapManagedAgentSessionEvents } from "./utils/anthropic_managed.js";
 import { isTraceableFunction, traceable, } from "../traceable.js";
 import { convertAnthropicUsageToInputTokenDetails } from "../utils/usage.js";
-import { SECRET_PLACEHOLDER } from "../anonymizer/index.js";
+import { mask, overParams, redactOutside } from "../utils/redaction.js";
 const TRACED_INVOCATION_KEYS = ["top_k", "top_p", "stream", "thinking"];
 /** Keys of an MCP server definition that are safe to trace. */
 const MCP_SERVER_SAFE_KEYS = new Set([
@@ -10,27 +10,20 @@ const MCP_SERVER_SAFE_KEYS = new Set([
     "url",
     "tool_configuration",
 ]);
-/**
- * Mask credentials in `mcp_servers` before tracing. Anything outside
- * {@link MCP_SERVER_SAFE_KEYS} keeps its name but gets
- * {@link SECRET_PLACEHOLDER} as its value, so the trace shows the field was set
- * without exposing it, and fields the API adds later are masked by default.
- *
- * Returns new objects; the caller's are also sent to Anthropic.
- */
+/** Mask `mcp_servers` credentials outside {@link MCP_SERVER_SAFE_KEYS}. */
 function redactMcpServers(servers) {
     if (!Array.isArray(servers))
         return servers;
-    return servers.map((server) => {
-        if (typeof server !== "object" || server == null || Array.isArray(server)) {
-            return server;
-        }
-        return Object.fromEntries(Object.entries(server).map(([key, value]) => [
-            key,
-            MCP_SERVER_SAFE_KEYS.has(key) ? value : SECRET_PLACEHOLDER,
-        ]));
-    });
+    return servers.map((server) => redactOutside(server, MCP_SERVER_SAFE_KEYS));
 }
+/** Request-transport keys that are credentials by construction. */
+const TRANSPORT_SECRET_KEYS = new Set([
+    "headers",
+    "query",
+    "extra_headers",
+    "extra_body",
+    "extra_query",
+]);
 /**
  * Create usage metadata from Anthropic's token usage format.
  */
@@ -242,17 +235,18 @@ export const wrapAnthropic = (anthropic, options) => {
         ...options,
         metadata: restMetadata,
     };
-    /**
-     * Transform system parameter into visible message for playground editability.
-     * This provides parity with the Python SDK behavior and enables system prompts
-     * to be viewed and edited in the LangSmith playground.
-     */
-    function processTracedInputs(params) {
+    /** Mask credentials and surface `system` as a message the playground can edit. */
+    function redactAnthropicParams(params) {
         // Copy first: `params` also goes to the API and must keep its real values.
         const processed = { ...params };
         if (processed.mcp_servers != null) {
             processed.mcp_servers = redactMcpServers(processed.mcp_servers);
         }
+        for (const key of TRANSPORT_SECRET_KEYS) {
+            if (processed[key] != null) {
+                processed[key] = mask(processed[key]);
+            }
+        }
         if (!params.system) {
             return processed;
         }
@@ -271,6 +265,9 @@ export const wrapAnthropic = (anthropic, options) => {
         delete processed.system;
         return processed;
     }
+    function processTracedInputs(inputs) {
+        return overParams(inputs, redactAnthropicParams);
+    }
     // Common configuration for messages.create
     const messagesCreateConfig = {
         name: "ChatAnthropic",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "langsmith",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Client library to connect to the LangSmith Observability and Evaluation Platform.",
   "packageManager": "pnpm@10.33.0",
   "files": [