Marc-André Bombeck ba70e19cf9 fix(logging): scrub every credential prefix the app mints ...

The log and error redactor missed the registration invite token (hlv_) and
the native sign-in handoff code (hlh_). The filter that keeps secrets out
of the idempotency replay cache and out of relayed upstream error bodies
missed the handoff code and the three MCP OAuth artifacts (hlac_, hlrt_,
hlc_). Both now cover every prefix the app issues: hlk_, hlr_, hls_, hle_,
hlv_, hlh_, hlac_, hlrt_ and hlc_.

2026-09-26 20:10:57 +02:00

..

event-builder-redaction.test.ts

Redact a warning on the way into the wide event

2026-08-10 02:18:45 +02:00

event-builder.test.ts

fix(notifications): record a relay refusal at warn, not error

2026-09-13 14:50:32 +02:00

fire-and-forget.test.ts

feat(observability): fireAndForget breadcrumb for background side effects

2026-07-18 02:09:33 +02:00

in-memory-buffer.test.ts

feat(insights): citation footnote on recommendations with medical reference

2026-05-10 00:04:24 +02:00

redact.test.ts

fix(logging): scrub every credential prefix the app mints

2026-09-26 20:10:57 +02:00

transports-buffer.test.ts

feat(insights): citation footnote on recommendations with medical reference

2026-05-10 00:04:24 +02:00

transports-loki.test.ts

fix(logging): ship to a private Loki and report failed pushes

2026-09-13 13:57:33 +02:00