melchizedek-agents 0.16.1 → 0.16.2

package/CHANGELOG.md

@@ -4,6 +4,19 @@ Consumers of the package read this file; it records changes to the
 **published API surface** (the exports map in `package.json`, the bins,
 the starter pack and the templates), not the repo's full history.
 
+## 0.16.2 — 2026-10-02
+
+- **`OTEL_EXPORT_CONTENT=off` also drops library content attributes.** In
+  0.16.1, `off` removed the engine's own conversation attributes but let
+  through ADK's: its `call_llm` span carries the full model request and
+  response as `gcp.vertex.agent.llm_request` / `_response`. `off` now drops
+  any text attribute whose name marks content (request, response, input,
+  output, args, prompt, messages, thinking, payload, …) unless the name
+  marks metadata (model, name, id, finish reasons); numbers always stay.
+  Verified end to end against Jaeger. **If you export OTLP with
+  `OTEL_EXPORT_CONTENT=off`, upgrade.** The default `redacted` mode
+  already ran the redactor on those attributes.
+
 ## 0.16.1 — 2026-10-02
 
 - **OTLP export is filtered before it leaves** (`OTEL_EXPORT_CONTENT`).

package/dist/lib/observability/otlpFilter.js

@@ -9,9 +9,11 @@
  *
  *   OTEL_EXPORT_CONTENT=redacted   (default) the ledger's redactor runs on
  *                                  every text attribute and event
- *   OTEL_EXPORT_CONTENT=off        conversation attributes are dropped and the
- *                                  user id is hashed; timings, models, token
- *                                  counts, routes, errors and ids remain
+ *   OTEL_EXPORT_CONTENT=off        conversation attributes are dropped (the
+ *                                  engine's and any library's, by name) and
+ *                                  the user id is hashed; timings, models,
+ *                                  token counts, routes, error codes and ids
+ *                                  remain
  *   OTEL_EXPORT_CONTENT=raw        spans are sent as recorded
  */
 import { createHash } from 'node:crypto';
@@ -29,6 +31,15 @@ export const CONTENT_ATTRIBUTES = new Set([
 ]);
 const CONTENT_PREFIXES = ['llm.payload.'];
 const PERSON_ATTRIBUTES = new Set(['user.id']);
+/**
+ * Libraries add their own content attributes (ADK puts the whole model request
+ * on its call_llm span as `gcp.vertex.agent.llm_request`, and the response and
+ * tool calls beside it), and a later version can add more. So `off` also drops
+ * any text attribute whose name says it carries content, unless the name says
+ * it is metadata (a model, a name, an id, a finish reason).
+ */
+const CONTENT_KEY = /(^|[._])(request|response|input|output|args|arguments|prompt|completion|messages?|content|thinking|payload|data_gathered|bindings|reason|error_message)([._]|$)/i;
+const METADATA_KEY = /([._])(model|name|id|system|description|finish_reasons|type|kind|version|stage)$/i;
 export function otlpContentMode(env = process.env) {
     const raw = (env.OTEL_EXPORT_CONTENT ?? 'redacted').trim().toLowerCase();
     if (raw === 'off' || raw === 'none' || raw === 'false')
@@ -37,7 +48,10 @@ export function otlpContentMode(env = process.env) {
         return 'raw';
     return 'redacted';
 }
-const isContent = (key) => CONTENT_ATTRIBUTES.has(key) || CONTENT_PREFIXES.some((p) => key.startsWith(p));
+const isText = (v) => typeof v === 'string' || (Array.isArray(v) && v.some((x) => typeof x === 'string'));
+const isContent = (key, value) => CONTENT_ATTRIBUTES.has(key) ||
+    CONTENT_PREFIXES.some((p) => key.startsWith(p)) ||
+    (isText(value) && CONTENT_KEY.test(key) && !METADATA_KEY.test(key));
 const hashed = (v) => `sha256:${createHash('sha256').update(String(v)).digest('hex').slice(0, 16)}`;
 /** One span's attributes as they may leave under `mode`. */
 export function filterAttributes(attributes, mode, redactor) {
@@ -46,7 +60,7 @@ export function filterAttributes(attributes, mode, redactor) {
     const out = {};
     for (const [key, value] of Object.entries(attributes)) {
         if (mode === 'off') {
-            if (isContent(key))
+            if (isContent(key, value))
                 continue;
             out[key] = PERSON_ATTRIBUTES.has(key) ? hashed(value) : value;
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "melchizedek-agents",
-  "version": "0.16.1",
+  "version": "0.16.2",
   "description": "A multi-model, multi-agent orchestration framework on Google ADK — YAML-defined syndicates, Supabase session persistence, pgvector long-term memory. Companion repo to the lyceumagents.com curriculum.",
   "type": "module",
   "license": "MIT",