midline-agent 0.1.7 → 0.1.8

package/dist/agent.js

@@ -9,8 +9,11 @@ class MidlineAgent {
     static init(config) {
         this.config = {
             endpoint: "https://api.usemidline.com/api/api-monitor/events",
-            maskFields: ["password", "token", ...(config.maskFields || [])],
             ...config,
+            // Deliberately after the spread. `password` and `token` are always
+            // masked; a caller-supplied list extends that set rather than replacing
+            // it, which is what happened while this sat above `...config`.
+            maskFields: [...new Set(["password", "token", ...(config.maskFields || [])])],
         };
         this.startQueue();
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "midline-agent",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Express.js SDK for Midline — request & error monitoring with security detection",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/agent.ts

@@ -9,8 +9,11 @@ export class MidlineAgent {
   static init(config: MidlineConfig) {
     this.config = {
       endpoint: "https://api.usemidline.com/api/api-monitor/events",
-      maskFields: ["password", "token", ...(config.maskFields || [])],
       ...config,
+      // Deliberately after the spread. `password` and `token` are always
+      // masked; a caller-supplied list extends that set rather than replacing
+      // it, which is what happened while this sat above `...config`.
+      maskFields: [...new Set(["password", "token", ...(config.maskFields || [])])],
     };
 
     this.startQueue();