xarmian dac2c01b9f Redact credentials from request and application logs (audit 10-29)

2026-10-29 18:48:47 +00:00

..

acceptance

feat(acceptance): one Go reading of a body's acceptance criteria (PLAN-3598 slice (a)) (#2091)

2026-10-11 21:19:39 -04:00

accesskick

…

appfetch

fix(webhooks): a DNS failure is retried, and a redirect may not turn the POST into a bodyless GET (BUG-3661, BUG-3662) (#2163)

2026-10-14 10:05:08 -04:00

appmanifest

…

appstore

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

artifact

…

attachments

…

billing

feat(billing): billing availability and prices come from the sidecar; PAD_BILLING=auto|off (TASK-3577) (#2048)

2026-10-11 01:29:49 -04:00

bodypatch

fix(items): undo of an emptied line; a patch that changes nothing is refused (PLAN-3578 retro fixes 5+6) (#2089)

2026-10-11 21:10:03 -04:00

buildtools

fix(scripts): install-refresh removes pad.pid only when it is provably not a live sibling's (BUG-4068) (#2311)

2026-10-25 06:26:02 -04:00

cli

fix(cli): print the op_key of a failed write; stop claiming a re-run is safe (BUG-3999) (#2346)

2026-10-29 12:39:35 -04:00

cmdhelp

…

collab

feat(server): log every unguarded content write the PLAN-3555 counter counts (TASK-4062) (#2301)

2026-10-24 10:32:10 -04:00

collections

feat(skill): the skill and the ship playbook load an item's brief with pad item context (PLAN-3598 slice (d)) (#2104)

2026-10-12 10:05:35 -04:00

config

fix(config): warn on a relative PAD_DATA_DIR / PAD_DB_PATH; anchor install-refresh's marker and config reads (BUG-4066 phase 1) (#2308)

2026-10-25 01:13:51 -04:00

decision

fix(decision): a failure the store refuses is still counted, and an empty message is never a supersede (BUG-4022) (#2317)

2026-10-25 19:51:26 -04:00

diff

fix(diff): version writers never diff text that is not valid UTF-8 (BUG-3839) (#2200)

2026-10-15 10:24:24 -04:00

email

…

events

fix(mcp): MCP's long-lived streams keep alive and take a stream admission slot (BUG-3835) (#2197)

2026-10-15 13:18:36 -04:00

idspace

…

items

…

jsonscan

…

kernelevents

…

links

test(links): mention linearity tests compare n with 4n, not an absolute bound (BUG-3995) (#2262)

2026-10-20 15:58:18 -04:00

logging

Redact credentials from request and application logs (audit 10-29)

2026-10-29 18:48:47 +00:00

materialize

fix(editor): a block marker after a hard break stays text (BUG-3584) (#2060)

2026-10-11 10:33:32 -04:00

mcp

fix(mcp): stdio's item patch gives line_hint remote's rule through one shared helper (BUG-4082) (#2315)

2026-10-25 14:08:59 -04:00

metrics

feat(metrics): signup and first-write funnel metrics; TouchUserWrite reports the first write (TASK-3926) (#2227)

2026-10-18 23:25:22 -04:00

models

feat(schedule): firing for item schedules, floating recipient zone, re-anchor and hooks (TASK-4102 PR1b) (#2344)

2026-10-29 09:23:46 -04:00

needs

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

netpolicy

fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660) (#2155)

2026-10-14 07:48:02 -04:00

notify

feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280)

2026-10-22 00:38:26 -04:00

oauth

fix(security)!: a workspace-pinned API token is confined to its workspace (BUG-3982) (#2266)

2026-10-21 02:43:37 -04:00

redisdial

…

redisns

…

schedule

feat(schedule): internal/schedule, RFC 5545 RRULE expansion with pinned/floating time and DST rules (TASK-4100) (#2336)

2026-10-28 18:14:23 -04:00

server

Redact credentials from request and application logs (audit 10-29)

2026-10-29 18:48:47 +00:00

store

feat(schedule): firing for item schedules, floating recipient zone, re-anchor and hooks (TASK-4102 PR1b) (#2344)

2026-10-29 09:23:46 -04:00

testtmp

test(testtmp): decide a template dir's owner by a held flock, not its pid (BUG-4088) (#2321)

2026-10-26 01:22:18 -04:00

textguard

…

urlimport

fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660) (#2155)

2026-10-14 07:48:02 -04:00

usertz

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

verification

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

watchevents

feat(chat): delivery, framing and the accept-instructions opt-in (TASK-4041) (#2305)

2026-10-24 15:16:30 -04:00

webhooks

Redact credentials from request and application logs (audit 10-29)

2026-10-29 18:48:47 +00:00