cliffhall
524bf2d543
feat(core): redact sensitive body + URL-query fields in fetch log ( closes #1593 ) ...
Extends the header redaction from #1585 . Before a fetch entry reaches any
sink, mask known-sensitive credentials in the request/response bodies and
the URL query string, in addition to headers:
- redactBody(): form-urlencoded + JSON bodies, recursive over nested
objects/arrays, best-effort (never throws), values-only.
- redactUrlQuery(): masks sensitive query params, preserves path,
non-sensitive params, and any fragment.
- Sensitive fields: client_secret, code, refresh_token, access_token,
id_token, code_verifier, client_assertion, assertion, password, token
(case-insensitive), reusing the [REDACTED] sentinel.
Applied to the request success + error entries and the async response-body
callback. Live outbound requests are byte-identical — only the logged copy
is redacted.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S3fTN8H3R8YV4yUGvZjYnX
2026-07-01 22:20:42 -04:00
feat: apply auto-refresh setting live + diff-aware list-changed indicator ( #1444 ) ( #1445 )
2026-06-09 11:00:28 -04:00
feat(web,core): persist & edit STDIO cwd/env in Server Settings ( #1515 ) ( #1518 )
2026-06-24 19:15:43 -04:00
fix(ci): run CI on Node 22.x and correct undici 8 Node floor ( #1563 )
2026-07-01 19:17:05 -04:00
test: raise per-file coverage gate to 90 across all clients ( closes #1271 ) ( #1532 )
2026-06-27 15:26:03 -04:00
fix(core): make "error" the canonical terminal status on a mid-session crash ( #1490 ) ( #1493 )
2026-06-15 10:15:29 -04:00
refactor(core): narrow readUiMeta from unknown; document ui-meta precedence
2026-07-01 19:14:16 -04:00
Guided-auth removal, OAuth smoke testing, and TUI/CLI support ( #1531 )
2026-06-29 15:35:51 -04:00
feat(web): URL elicitation — explicit completion step + error-path (-32042) handling ( #1415 ) ( #1436 )
2026-06-06 18:25:01 -04:00
feat(core): redact sensitive body + URL-query fields in fetch log ( closes #1593 )
2026-07-01 22:20:42 -04:00
Guided-auth removal, OAuth smoke testing, and TUI/CLI support ( #1531 )
2026-06-29 15:35:51 -04:00
Guided-auth removal, OAuth smoke testing, and TUI/CLI support ( #1531 )
2026-06-29 15:35:51 -04:00
Guided-auth removal, OAuth smoke testing, and TUI/CLI support ( #1531 )
2026-06-29 15:35:51 -04:00
feat: apply auto-refresh setting live + diff-aware list-changed indicator ( #1444 ) ( #1445 )
2026-06-09 11:00:28 -04:00
feat(web): display negotiated MCP protocol version on ServerCard ( #1324 ) ( #1442 )
2026-06-08 07:40:02 -04:00
Guided-auth removal, OAuth smoke testing, and TUI/CLI support ( #1531 )
2026-06-29 15:35:51 -04:00
refactor(core): apply v1.5-port cleanups deferred from #1306 ( #1316 )
2026-05-17 19:15:48 -04:00
feat(web,core): enterprise-managed authorization (EMA) ( #1509 ) ( #1512 )
2026-06-24 22:15:12 -04:00
feat(core): port v1.5 hook layer ( #1243 ) ( #1300 )
2026-05-13 17:43:07 -04:00
Phase 0 foundations for component interfaces refactor
2026-04-15 16:06:23 -04:00
fix(web): send a cancellation notification when cancelling an ordinary tool call ( #1458 ) ( #1463 )
2026-06-13 22:23:02 -04:00
feat(apps): render running MCP Apps end-to-end ( #1370 ) ( #1403 )
2026-06-01 18:01:44 -04:00
Test/1396 harden managed state connect tests ( #1508 )
2026-06-24 10:46:09 -04:00
feat(web,core): enterprise-managed authorization (EMA) ( #1509 ) ( #1512 )
2026-06-24 22:15:12 -04:00
feat(web): URL elicitation — explicit completion step + error-path (-32042) handling ( #1415 ) ( #1436 )
2026-06-06 18:25:01 -04:00
524bf2d543