Vojtech 38f6b639d2 feat(observability): request_id end-to-end + dev debug toolbar + centralized logging (#136) ... Cuts release 0.20.0. ## Highlights - X-Request-ID header on every response + sanitized to [A-Za-z0-9_-] (CRLF log-forging mitigation) - Error pages (HTML + JSON 500) surface request_id for support tickets - Dev debug toolbar gated by DEBUG=1 — fastapi-debug-toolbar with custom DuckDBPanel - Centralized app.logging_config.setup_logging() replaces 23 scattered basicConfig calls - Telegram bot drops bot.log file — stdout only (BREAKING) ## Devin findings addressed - BUG_0001: .env.template no longer claims FastAPI debug=True - BUG_0002: subprocess extractor logs INFO to stderr again - ANALYSIS_0003: _wants_html no longer matches Accept: */* (curl gets JSON as before) - BUG on b1c6ee9: HTML 500 page no longer leaks str(exc) in production - BUG on b13d2fe: 2 CLAUDE.md compliance flags (transform.py + ws_gateway) accepted as scope-limited logging refactor — follow-up to update CLAUDE.md if needed See CHANGELOG [0.20.0] for full notes.		2026-04-29 22:54:21 +02:00
..
static	feat(rbac+marketplace): RBAC v13 + Claude Code marketplace + #81/#83/#44 hardening	2026-04-28 14:25:04 +02:00
templates	feat(observability): request_id end-to-end + dev debug toolbar + centralized logging (#136)	2026-04-29 22:54:21 +02:00
__init__.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00
router.py	feat(observability): request_id end-to-end + dev debug toolbar + centralized logging (#136)	2026-04-29 22:54:21 +02:00
setup_instructions.py	release(2.1.0): durable sync, CLI auto-update, versioned wheel URL, version unification (#43)	2026-04-22 21:18:18 +02:00