2 Commits

Include renames

Author	SHA1	Message	Date
rootandClaude Opus 5.5	47bd04aec0	fix(adapters,security): S-4 rss/browser redaction use the shared contracts key table ... - contracts: isSensitiveQueryParam (whole-name match on SENSITIVE_QUERY_PARAMS or isSensitiveKey), the single source for query credential names - rss/redact: drop local SENSITIVE_QUERY_KEYS; param checks go through isSensitiveQueryParam (+ caller extras); REDACTED re-exported from contracts - browser/redact: CREDENTIAL_PARAM built from SENSITIVE_QUERY_PARAMS, JSON keys also checked with isSensitiveKey; keeps only its own rules (path passkey, cookie names, a11y password fields); remove stray regex statement - redact-consistency.test: 24 credential spellings (pass_key, c_secure_pass, refresh_token, password, uid_key, auth, ...) masked by contracts, rss and browser alike; plain params untouched; rss extract/unredact round-trip Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-28 00:45:56 +08:00
rootandClaude Opus 5.5	effaa32b70	feat(browser): W4-C BrowserProvider contract and camofox-browser adapter skeleton ... - contracts/browser.ts: provider kind, per-capability {supported, verified} flags, session/tab/control-lease rows, NavigationBudget, redacted BrowserSnapshot, DownloadArtifact with blob/secret refs, BrowserErrorKind - adapters/browser: BrowserProvider interface, camofox client (health, capabilities static + /openapi.json probe, openSession/navigate/snapshot/screenshot; rest not_implemented for M2), none provider, redactSnapshot, profile serial lock, domain allowlist budget; Bearer access key via BrowserSecretResolver - testkit/browser: mock camofox server (auth, fixtures with secrets, faults) - db 0023: browser_provider/session/tab/control_lease with one-active-lease and one-live-session-per-profile partial unique indexes; types regenerated - docs/design/browser-provider.md: contract, camofox OpenAPI 1.17.0 mapping, unverified items and M2 prototype checklist; Playwright is not a product browser Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 21:39:29 +08:00