cliffhall
1fd1b15152
fix: enforce the challenge body cap per byte and never log cut-off JSON ( #2297 ) ...
Copilot review round 2:
- Slice each chunk to the remaining budget, so one oversized chunk can no
longer carry the recorded body past CHALLENGE_BODY_MAX_BYTES.
- Drop the long-lived-stream exclusion from the challenge branch. It guards
an unbounded read and this one is bounded, so a 401 to an SSE GET now
records its body too.
- Keep truncation out of the string that gets redacted. A cut-off body that
looks like JSON cannot be redacted (redactBody only masks JSON that
parses), so it is replaced by WITHHELD_TRUNCATED_JSON_BODY. Cut-off form
and plain-text bodies are redacted, then marked [truncated].
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SG6q6YEDJyJB5H2Hr8nBDS
Signed-off-by: cliffhall <cliff@futurescale.com>
2026-09-14 01:34:38 -04:00
fix: walk past an empty-string cursor in the legacy task refresh ( #2220 )
2026-09-06 13:59:51 -04:00
chore(deps): migrate to eslint 10 to clear the brace-expansion DoS advisory ( #1900 )
2026-08-01 20:13:30 -04:00
fix: bound the 401/403 body read so an unending body is released ( #2297 )
2026-09-14 01:01:15 -04:00
test: address Copilot review — tighten progress-token guard and de-flake relay tests ( #2028 )
2026-09-13 21:30:29 -04:00
feat: Skills extension phase 3 — CLI, TUI, directory reads, frontmatter check
2026-09-07 18:10:37 -04:00
docs: address Copilot review round 1 ( #1745 )
2026-09-13 19:42:48 -04:00
refactor: drop the ext-apps SDK-v1 shims now that 2.0.0 peers on SDK v2
2026-09-13 19:21:06 -04:00
chore: close quality-gate coverage gaps ( #1689 ) ( #1766 )
2026-07-24 17:20:12 -04:00
fix(core): register peer-request handlers before connect ( #1797 ) ( #1798 )
2026-07-27 11:32:23 -04:00
refactor: drop the ext-apps SDK-v1 shims now that 2.0.0 peers on SDK v2
2026-09-13 19:21:06 -04:00
fix: enforce the challenge body cap per byte and never log cut-off JSON ( #2297 )
2026-09-14 01:34:38 -04:00
fix: salvage a list result's valid entries when one is malformed ( #1909 )
2026-08-15 16:52:11 -04:00
feat: bound connect attempts with a 30 s default connectionTimeout ( #2320 )
2026-09-13 20:54:23 -04:00
feat: allow complex JSON values in request _meta
2026-08-23 12:23:40 -04:00
refactor: re-export AppRendererClient from types.ts instead of defining it twice ( #1745 )
2026-09-13 19:49:46 -04:00
fix: return the era-parsed tool, and hide aggregate reports in paginated mode ( #1909 )
2026-08-15 20:08:03 -04:00
fix: cancel a Streamable HTTP call by closing its stream ( #2140 )
2026-08-28 00:55:29 -04:00
Tasks: io.modelcontextprotocol/tasks extension on modern servers (era fork) ( #1731 )
2026-07-21 19:17:04 -04:00
fix(web): address Copilot review on the OAuth recovery failure arms
2026-08-29 01:54:53 -04:00
fix(core): register peer-request handlers before connect ( #1797 ) ( #1798 )
2026-07-27 11:32:23 -04:00
test/docs: address Copilot review round 1 ( #2320 )
2026-09-13 21:16:23 -04:00
feat(core): port v1.5 hook layer ( #1243 ) ( #1300 )
2026-05-13 17:43:07 -04:00
fix: address Copilot review round 4 on #2251
2026-09-04 22:38:03 -04:00
fix: address Copilot review round 8 on #2248
2026-09-07 21:09:26 -04:00
fix: address Copilot review round 19 on #2248
2026-09-07 23:55:53 -04:00
fix: address Copilot review round 13 on #2248
2026-09-07 22:09:19 -04:00
fix: address Copilot review round 19 on #2248
2026-09-07 23:55:53 -04:00
fix(core): say why a never-acknowledged subscriptions/listen ended
2026-08-27 20:49:55 -04:00
SDK v2 migration (behavior-neutral, versionNegotiation: 'legacy') ( #1624 )
2026-07-15 10:44:24 -04:00
fix(web): send a cancellation notification when cancelling an ordinary tool call ( #1458 ) ( #1463 )
2026-06-13 22:23:02 -04:00
Refactor / justify codebase-wide 'as unknown as' casts ( #1690 ) ( #1756 )
2026-07-24 09:34:32 -04:00
fix(core): read state stores during render instead of re-syncing in an effect
2026-08-29 02:07:53 -04:00
feat: bound connect attempts with a 30 s default connectionTimeout ( #2320 )
2026-09-13 20:54:23 -04:00
fix: scope the value ceiling to the names a template references
2026-08-17 01:54:37 -04:00
Address @claude review: format core/, typed output-validation error, document progress heuristic
2026-07-15 11:08:54 -04:00
1fd1b15152