@uns-kit/core 3.0.21 → 3.0.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/MIGRATIONS.md +17 -0
- package/package.json +1 -1
package/MIGRATIONS.md
CHANGED
|
@@ -9,6 +9,23 @@ Agents must inspect the application's existing ownership and shutdown flow
|
|
|
9
9
|
before editing it. The examples below describe the intended behavior, not a
|
|
10
10
|
mechanical search-and-replace operation.
|
|
11
11
|
|
|
12
|
+
## 3.0.22 - Safe API request correlation
|
|
13
|
+
|
|
14
|
+
When upgrading `@uns-kit/api` from `<3.0.22` to `>=3.0.22`, its generic request
|
|
15
|
+
log no longer records raw URLs or email claims decoded from an unverified JWT.
|
|
16
|
+
It logs a server-generated `requestId`, HTTP method, completion status and
|
|
17
|
+
elapsed time. Incoming `x-request-id` values are not reused. The response
|
|
18
|
+
`x-request-id` and request property `Symbol.for("uns.http.request-id")` identify
|
|
19
|
+
the same server-local request; authenticated application handlers may reuse that
|
|
20
|
+
property for downstream query diagnostics. The public `@uns-kit/api/request-log.js`
|
|
21
|
+
module exports `SAFE_REQUEST_LOGGING_VERSION = 1` so privacy-sensitive applications
|
|
22
|
+
can require the safe middleware before opening HTTP listeners.
|
|
23
|
+
|
|
24
|
+
If an application's diagnostic logic relied on the old `user` or `endpoint`
|
|
25
|
+
log fields, migrate it to operation labels and caller IDs extracted **after**
|
|
26
|
+
signature verification. Do not restore URL/topic/body/credential logging or trust
|
|
27
|
+
identity headers. API response payloads and authorization behavior are unchanged.
|
|
28
|
+
|
|
12
29
|
## 3.0.21 - Explicit publisher topic reconciliation
|
|
13
30
|
|
|
14
31
|
Applications upgrading from `<3.0.21` to `>=3.0.21` can opt into
|