v0.14.0 — Live PII and Sensitive Data Masking

Live PII Masking

Sensitive data in your agent's tool calls and responses is now masked before it ever hits disk. This is useful when tracing agents that handle user data, API keys, or credentials — you get full observability without storing raw PII.

Masked by default:

• Email addresses
• Phone numbers
• Credit card numbers
• US Social Security Numbers
• AWS ARNs

Masking is applied in the proxy layer, so it works transparently whether you're using the stdio proxy or the HTTP proxy.

# Use a custom masking config when starting a proxy
from agent_trace.masking import MaskingConfig
from agent_trace.proxy import start_proxy

config = MaskingConfig(
    redact_emails=True,
    redact_phone_numbers=True,
    redact_credit_cards=True,
)
start_proxy(masking_config=config)

You can also call mask_event_data() directly if you want to sanitise events from an existing session before sharing or exporting them.