rootandClaude Opus 5.5 47bd04aec0 fix(adapters,security): S-4 rss/browser redaction use the shared contracts key table ...

- contracts: isSensitiveQueryParam (whole-name match on SENSITIVE_QUERY_PARAMS
  or isSensitiveKey), the single source for query credential names
- rss/redact: drop local SENSITIVE_QUERY_KEYS; param checks go through
  isSensitiveQueryParam (+ caller extras); REDACTED re-exported from contracts
- browser/redact: CREDENTIAL_PARAM built from SENSITIVE_QUERY_PARAMS, JSON keys
  also checked with isSensitiveKey; keeps only its own rules (path passkey,
  cookie names, a11y password fields); remove stray regex statement
- redact-consistency.test: 24 credential spellings (pass_key, c_secure_pass,
  refresh_token, password, uid_key, auth, ...) masked by contracts, rss and
  browser alike; plain params untouched; rss extract/unredact round-trip

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-28 00:45:56 +08:00

..

adapters

fix(adapters,security): S-4 rss/browser redaction use the shared contracts key table

2026-09-28 00:45:56 +08:00

agent

feat(ao): W4-E3 manual organize guard, series completion, engine retry, v0.1.0

2026-09-27 22:47:11 +08:00

contracts

fix(adapters,security): S-4 rss/browser redaction use the shared contracts key table

2026-09-28 00:45:56 +08:00

db

feat(files): W5-A2 move/copy via planImport, organize overrides, delete records, download

2026-09-27 23:53:50 +08:00

domain

feat(files): W5-A2 move/copy via planImport, organize overrides, delete records, download

2026-09-27 23:53:50 +08:00

mapping

feat(files): W5-A2 move/copy via planImport, organize overrides, delete records, download

2026-09-27 23:53:50 +08:00

tasks

fix(server,test): W6-A stabilize CI — sync lost update, atomic recovery summary, serial PG tests

2026-09-28 00:32:57 +08:00

testkit

feat(parser,sites): W5-D port title/zhconv/site parsing gaps found by MP differential

2026-09-27 23:09:14 +08:00