Koosha Paridehpour 8bad85f58e fix(logging): mask *-api-key headers in request-log pipeline (#13273) (#13401) ...

Masks every `*-api-key` header spelling (`x-goog-api-key`, `api-key`, `xi-api-key`) in the request-log pipeline by matching on the hyphen-compacted key, and adds `xi-api-key` to the payload redaction set (#13273). The new test drives the real `createRequestLogger` / `protectPayloadForLog` paths.

Validated in one consolidated batch of this series (37 PRs boarded together on `release/v3.8.51`): `typecheck:core`, `check:open-sse-typecheck` and `check:dashboard-typecheck` clean; ESLint clean on every changed file; file-size, complexity, cognitive-complexity, changelog-integrity, docs-counts, docs-sync and migration-numbering gates green (only the pre-existing `open-sse/utils/stream.ts` file-size red remains, inherited from the base); 3,743 focused `node:test` cases plus 34 vitest cases green.

Thanks @KooshaPari!

2026-09-14 23:14:35 -03:00

..

cursorAgentProtobuf

feat(providers): refresh Fable, Cursor, and Devin catalogs (#12367)

2026-09-03 07:50:41 -03:00

agentGoalPolicy.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

aiSdkCompat.ts

fix(sse): default OpenAI Chat Completions to non-stream when stream omitted (#8976)

2026-08-05 23:51:43 -03:00

anthropicHost.ts

fix(security): exact-host Anthropic baseUrl check (CodeQL js/incomplete-url-substring-sanitization #674) (#5129)

2026-06-26 23:14:27 -03:00

audioResponse.ts

feat: add EdgeTTS audio-tts provider (#6668) (#7605)

2026-07-17 11:32:25 -03:00

awsSigV4.ts

feat(providers): add AWS Polly and Lemonade provider support

2026-04-24 13:20:59 -03:00

bypassHandler.ts

fix(sse): reconstruct Claude-format content in synthetic bypass responses (#7248)

2026-07-17 10:40:56 -03:00

bypassResponse.ts

fix(sse): reconstruct Claude-format content in synthetic bypass responses (#7248)

2026-07-17 10:40:56 -03:00

cacheControlPolicy.ts

fix(sse): stop thrashing the provider prompt cache for caching-aware clients (#8705)

2026-07-27 17:24:43 -03:00

ccDiscoveryAliases.ts

fix(sse): make Claude effort/no-think catalog variants dispatchable on every provider (#9006)

2026-08-11 10:02:48 -03:00

chatgptWebAttachments.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

chatgptWebBrowserSession.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

chatgptWebDeltaV1.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

chatgptWebExecutorAdapter.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

chatgptWebFirstParty.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

chatgptWebTransport.ts

feat(providers): restore ChatGPT Web via clean-room browser transport (#12239)

2026-09-02 10:31:41 -03:00

claudeCodeMetaRequests.ts

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00

claudeEffortVariants.ts

fix(sse): make Claude effort/no-think catalog variants dispatchable on every provider (#9006)

2026-08-11 10:02:48 -03:00

clinepassEnvelope.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

codexPublicError.ts

fix(codex): close response failure boundary (#12444)

2026-09-03 20:59:14 -03:00

comfyuiClient.ts

feat: editable ComfyUI base-URL field + per-connection override for image/video/music generation (#6928) (#7232)

2026-07-17 10:40:22 -03:00

composerToolCalls.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

cookieDomain.ts

fix(security): match cookie domains by suffix, not substring (#11429)

2026-08-24 19:44:12 -03:00

cors.ts

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00

credentialPatterns.ts

fix(security): redact AIza credentials of any length in error bodies (#12964)

2026-09-08 09:10:36 -03:00

cursorAgentCliVersion.ts

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

cursorAgentProtobuf.ts

feat(providers): refresh Fable, Cursor, and Devin catalogs (#12367)

2026-09-03 07:50:41 -03:00

cursorChecksum.ts

feat(runtime): add hot-reloadable guardrails and model diagnostics

2026-04-17 11:56:52 -03:00

cursorImages.ts

fix(ci): clear base-reds on release/v3.8.50 (round 3) (#10213)

2026-08-13 00:02:25 -03:00

cursorVersionDetector.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

diagnostics.ts

fix(resilience): surface Responses failed.error.message in 502s (#12472)

2026-09-03 23:37:47 -03:00

directResponseStartTimeout.ts

fix(network): bound direct-path response-start timeout

2026-08-17 08:26:57 -07:00

earlyKeepaliveByteBuffer.ts

fix(logging): capture early-keepalive bytes in the call-log artifact (#10331)

2026-08-18 10:57:31 -03:00

earlyStreamKeepalive.ts

fix(responses): replace synthetic reasoning keepalive (#10806)

2026-08-20 09:49:55 -03:00

error.ts

fix(ci): clear two base-reds on release/v3.8.51 — mutation-coverage gate + image-only-model guard (#12945)

2026-09-11 22:28:50 -03:00

errorPathRedaction.ts

fix(ci): clear two base-reds on release/v3.8.51 — mutation-coverage gate + image-only-model guard (#12945)

2026-09-11 22:28:50 -03:00

errorSanitization.ts

fix(ci): clear two base-reds on release/v3.8.51 — mutation-coverage gate + image-only-model guard (#12945)

2026-09-11 22:28:50 -03:00

estimateSize.ts

cherry-pick(pr-9738): feat(logging): make the chat-log truncation limit configurable, bumped default 128x (#9863)

2026-08-09 09:53:21 -03:00

fetchStartTimeoutPolicy.ts

fix(sse): cap streaming headers-wait timeout to a client-realistic ceiling (#11526) (#11668)

2026-08-26 20:49:55 -03:00

finishReason.ts

fix(sse): Gemini malformed function-call handling + tool_choice translation (#8211)

2026-07-23 05:03:44 -03:00

flattenToolHistory.ts

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

functionalGatewayMirrors.ts

fix(api): enforce model permissions on gateway mirrors (#9854)

2026-08-09 09:52:09 -03:00

geminiCookies.ts

fix: accept Gemini Web cookie exports (#11554)

2026-08-26 08:13:22 -03:00

generationThroughput.ts

feat(api): emit gateway-measured tokens-per-second excluding TTFT (#12631)

2026-09-03 23:38:37 -03:00

headers.ts

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

heapPressure.ts

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

imageNormalize.ts

fix(radar): restore D12 public boundary (#12057)

2026-08-29 17:37:26 -03:00

jsonHash.ts

perf(compression): OOM mitigations for large payload hashing, memoization, and token estimation (#7847) (#11844)

2026-09-02 00:01:59 -03:00

jsonSize.ts

perf(compression): OOM mitigations for large payload hashing, memoization, and token estimation (#7847) (#11844)

2026-09-02 00:01:59 -03:00

jsonToSse.ts

Release v3.8.39 (#5164)

2026-06-28 06:58:29 -03:00

keepaliveThreshold.ts

feat: adaptive keepalive threshold for web-session providers (#3397)

2026-06-08 00:47:34 -03:00

kieTask.ts

refactor(sse): guard the KIE task-id and callback-url reads at their source (#8661)

2026-07-27 17:24:09 -03:00

kimiDevice.ts

feat(kimi): sync Code, Web, and Moonshot providers (#7531)

2026-07-18 21:19:42 -03:00

kimiJwt.ts

feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)

2026-08-21 04:25:56 -03:00

kiroSanitizer.ts

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

logger.ts

refactor: improve type safety and add cloud agent providers

2026-05-11 00:41:36 +02:00

mediaParts.ts

feat: add Video Bridge frame sampling (#10483)

2026-08-15 14:23:29 -03:00

networkProxy.ts

fix(barrel): migrate open-sse, src/shared, src/sse, src/models, src/domain off the @/lib/localDb barrel import (#11795 Phase 4) (#12053)

2026-08-30 02:31:09 -03:00

nextAuthCookie.ts

fix(providers): retire common ChatGPT Web provider (#11754)

2026-08-28 06:52:46 -03:00

noThinkingAlias.ts

fix(ci): clear the base-reds the afternoon merge batch left on release/v3.8.51 (round 5: provider count 352, TS2554/TS2677) (#12144)

2026-08-30 18:03:47 -03:00

number.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

ollamaTransform.ts

fix(ollama): preserve multi-byte UTF-8 content split across stream chunks (#11921)

2026-08-30 05:28:07 -03:00

openAIStreamChunk.ts

fix(nvidia): normalize tool names and call IDs (#9236)

2026-08-05 22:41:06 -03:00

opencodeHeaders.ts

fix(opencode): session stability, free-tier routing, and CLI defaults (#10571)

2026-08-18 10:52:33 -03:00

optionalPacks.ts

perf(electron): ship optional ML/browser deps as installable packs (#10382)

2026-08-16 02:20:59 -03:00

passthroughTailProcessor.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

pickCacheCreationTokens.ts

fix(sse): keep cache-write tokens in OpenAI-shaped usage (#11814)

2026-08-30 11:09:15 -03:00

progressTracker.ts

perf: lazy provider init, P2C quota cache, structuredClone elimination, getSettings→getCachedSettings (batch 2) (#7893)

2026-07-21 11:50:14 -03:00

providerRequestLogging.ts

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

proxyDispatcher.ts

fix(socks): forward Agent.connectTimeout to SocksClient and TLS, unify family null (#11842)

2026-08-28 12:37:32 -03:00

proxyDispatcherCache.ts

fix(proxy): restore connection pooling on proxy/relay paths (#9100) (#9158)

2026-08-05 21:43:55 -03:00

proxyFallback.ts

fix(barrel): migrate open-sse, src/shared, src/sse, src/models, src/domain off the @/lib/localDb barrel import (#11795 Phase 4) (#12053)

2026-08-30 02:31:09 -03:00

proxyFamily.ts

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

proxyFamilyResolve.ts

fix(proxy): restore connection pooling on proxy/relay paths (#9100) (#9158)

2026-08-05 21:43:55 -03:00

proxyFetch.ts

fix(sse): add first-byte watchdog to the TLS-fingerprint transport (#12656) (#13272)

2026-09-11 22:06:09 -03:00

publicCreds.ts

chore(providers): retire GPL-derived Raycast and Hailuo integrations (#11691)

2026-08-28 05:16:59 -03:00

reasoningContentInjector.ts

fix(reasoning): preserve compatible response state (#10574)

2026-08-20 22:20:54 -03:00

reasoningFields.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

reasoningPlaceholder.ts

fix(stream): preserve standalone whitespace deltas (#9189)

2026-08-05 23:52:21 -03:00

registeredEffortVariants.ts

feat(providers): refresh Fable, Cursor, and Devin catalogs (#12367)

2026-09-03 07:50:41 -03:00

requestLogger.ts

fix(logging): mask *-api-key headers in request-log pipeline (#13273) (#13401)

2026-09-14 23:14:35 -03:00

resourcePressure.ts

fix(db): self-heal under sustained memory pressure, VACUUM gate, WAL housekeeping (#13011)

2026-09-11 20:45:16 -03:00

resourcePressurePolicy.ts

fix(resourcePressure): log numeric detail on every rejection, recover faster (#12293)

2026-09-03 13:00:08 -03:00

resourcePressureSampler.ts

fix(admission): exclude reclaimable page cache from the cgroup pressure ratio (#12017)

2026-08-29 19:52:02 -03:00

responsesCommentaryDrop.ts

fix(sse): apply commentary-phase drop filter in TRANSLATE mode (#6952) (#6990)

2026-07-12 18:07:49 -03:00

responsesEndpoint.ts

feat(providers): native xAI Agent Tools passthrough for /v1/responses (#9111)

2026-08-05 21:43:40 -03:00

responsesFailureOutput.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

responsesInputNormalization.ts

fix(translator): drop or map agent_message on Chat Completions fallback (#12880)

2026-09-10 10:18:58 -03:00

responsesStatePolicy.ts

feat(providers): refresh vendored ChatGPT Web connector to v4.0.7 (#12181)

2026-09-01 00:50:15 -03:00

responsesStreamHelpers.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

responsesToolHandoff.ts

fix(streaming): preserve completed Codex tool handoffs (#10608)

2026-08-18 10:53:05 -03:00

secureFileWrite.ts

fix(open-sse): write Adobe Firefly session tokens and cookie jars with 0700/0600 perms (#12572) (#13242)

2026-09-11 22:05:11 -03:00

segmindClient.ts

Train 1D: merge via --admin on .113 validation

2026-07-27 11:29:49 -03:00

setupPolyfill.ts

fix(bun): make server child and outbound fetch Bun-safe (#9761)

2026-08-11 09:16:23 -03:00

sleep.ts

refactor(providers): address code review feedback for KIE provider

2026-04-23 16:28:33 +00:00

socksConnectorWithFamily.ts

chore(quality): type the 55 no-explicit-any sites frozen under #11924 (#11975)

2026-08-29 03:06:50 -03:00

sseHeartbeat.ts

fix(responses): replace synthetic reasoning keepalive (#10806)

2026-08-20 09:49:55 -03:00

stream.ts

fix(sse): surface an error for a truly empty Claude stream (#12398) (#13285)

2026-09-11 22:05:44 -03:00

streamClaudeDelta.ts

fix(types): narrow Claude stream deltas (#9990)

2026-08-11 08:50:10 -03:00

streamClaudeEmptyBody.ts

fix(sse): surface an error for a truly empty Claude stream (#12398) (#13285)

2026-09-11 22:05:44 -03:00

streamEmptyChoices.ts

fix(stream): type empty-choice collector events

2026-08-09 18:47:22 -03:00

streamErrorFormat.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

streamFailureBoundary.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

streamFailureFinalization.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

streamHandler.ts

fix(streaming): fail fast when an upstream stream produces only lifecycle/heartbeat events, never real content (#12741)

2026-09-10 10:19:10 -03:00

streamHelpers.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

streamPayloadCollector.ts

fix(sse): stop rebuilding a truncated summary from the collector's cap-dropped event array (#12718)

2026-09-10 10:19:06 -03:00

streamReadiness.ts

fix(sse): preserve 1min.ai partial output before stream errors (#12466)

2026-09-03 21:06:28 -03:00

streamReadinessPolicy.ts

fix: prevent Claude Code session kills via liveness-aware readiness + auto model echo (#12189)

2026-08-31 14:10:39 -03:00

streamTiming.ts

feat(api): emit gateway-measured tokens-per-second excluding TTFT (#12631)

2026-09-03 23:38:37 -03:00

syncedEffortVariants.ts

feat(models): surface learned reasoning_effort sets in catalog, variants, and dispatch (#11252)

2026-08-23 14:38:57 -03:00

textualToolCall.ts

fix(sse): preserve ZWNJ and ZWJ in sanitized responses (#12359)

2026-09-02 03:15:19 -03:00

thinkCloseMarker.ts

fix(sse): suppress </think> by default on Chat Completions (#8245) (#8309)

2026-07-24 09:35:51 -03:00

thinkingBudget.ts

refactor(sse): move the thinking-budget helpers out of base.ts (#9381)

2026-08-07 20:52:51 -03:00

thinkTagParser.ts

fix(sse): buffer '<think' partial so a split open tag cannot leak into content (#10441)

2026-08-16 00:16:36 -03:00

tlsClient.ts

fix(sse): add first-byte watchdog to the TLS-fingerprint transport (#12656) (#13272)

2026-09-11 22:06:09 -03:00

tlsFirstByteWatchdog.ts

fix(sse): add first-byte watchdog to the TLS-fingerprint transport (#12656) (#13272)

2026-09-11 22:06:09 -03:00

toolCallArguments.ts

fix(api): serialize tool-call args correctly through /anthropic translation (#6459) (#6609)

2026-07-07 21:48:27 -03:00

toolSources.ts

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

upstreamErrorPassthrough.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

upstreamErrorResponse.ts

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

upstreamResponseHeaders.ts

fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620)

2026-09-03 20:48:58 -03:00

urlSanitize.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

usageOnlyChunk.ts

fix(sse): emit trailing usage estimate in translate streams when upstream stays silent (#12828)

2026-09-10 10:19:02 -03:00

usageTracking.ts

feat(api): emit gateway-measured tokens-per-second excluding TTFT (#12631)

2026-09-03 23:38:37 -03:00

zeroWidth.ts

fix(sse): preserve ZWNJ and ZWJ in sanitized responses (#12359)

2026-09-02 03:15:19 -03:00