[waleedlatif1]

Summary

• contentWithheld is span-level: projection sets it when any content field was omitted. logs query treated every unresolved path on a marked span as withheld, so --where output.route=x kept runs whose intact output just lacks route, and --field output.missing said "value unknown"
• Projection omits a content field whole (never a nested key), so a path is now withheld only when the span is marked and the content field it reads through is absent: input/output/thinking/errorMessage, toolCalls.N.input|output|error, modelToolCalls.N.arguments, provider-segment content. The output fallback (result.count → output.result.count) is checked too
• A key missing inside a present field is path not found on span and fails --where, as before fix(logs): mark withheld trace span content so logs query stops reporting it as missing #9314
• Runs whose --where could not be checked get whereUnchecked: true and a separate whereUnchecked summary count; contentWithheld now counts only rows whose --field was withheld
• Usage text and the v2 contentWithheld description state whole-field semantics (openapi regenerated)

Type of Change

• Bug fix

Testing

• engines.test.ts: new regression tests (marked span with intact output, filtered under --where / not found under --field, tool-call and thinking paths, separated counts); 5 fail on current staging, all 20 pass with the fix
• Scratch differential: 400 generated traces x 77 field/where combos with no marker, output byte-identical to staging
• bun run lint, check:openapi, check:comment-hygiene; full gates left to CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 22, 2026 9:41pm UTC

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable issues remain from this review.

Summary

Updates logs query to distinguish omitted content fields from missing keys inside readable fields.

• Log queries tell withheld fields from missing keys.

No new actionable issues were found in the changes since the previous review. No previous finding threads were supplied.

_{Reviews (2) · Last reviewed commit: "fix(logs): keep a withheld direct path u..." · Reviewed by Greptile}

[cubic-dev-ai]

All reported issues were addressed across 5 files

<sub>Heads up: you’re close to your flex budget. Increase your flex budget so reviews don’t pause.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 5 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>Heads up: you’re close to your flex budget. Increase your flex budget so reviews don’t pause.

Turn on auto-fix | Re-trigger cubic</sub>