agnes-the-ai-analyst/docs/superpowers/specs
Vojtech 38f6b639d2
feat(observability): request_id end-to-end + dev debug toolbar + centralized logging (#136)
Cuts release 0.20.0.

## Highlights
- X-Request-ID header on every response + sanitized to [A-Za-z0-9_-] (CRLF log-forging mitigation)
- Error pages (HTML + JSON 500) surface request_id for support tickets
- Dev debug toolbar gated by DEBUG=1 — fastapi-debug-toolbar with custom DuckDBPanel
- Centralized app.logging_config.setup_logging() replaces 23 scattered basicConfig calls
- Telegram bot drops bot.log file — stdout only (BREAKING)

## Devin findings addressed
- BUG_0001: .env.template no longer claims FastAPI debug=True
- BUG_0002: subprocess extractor logs INFO to stderr again
- ANALYSIS_0003: _wants_html no longer matches Accept: */* (curl gets JSON as before)
- BUG on b1c6ee9: HTML 500 page no longer leaks str(exc) in production
- BUG on b13d2fe: 2 CLAUDE.md compliance flags (transform.py + ws_gateway) accepted as scope-limited logging refactor — follow-up to update CLAUDE.md if needed

See CHANGELOG [0.20.0] for full notes.
2026-04-29 22:54:21 +02:00
..
2026-03-27-refactoring-design.md docs,tests: anonymize customer references 2026-04-21 11:56:19 +02:00
2026-03-30-core-refactoring-design.md feat: implement extract.duckdb contract — orchestrator + extractors 2026-03-30 20:12:56 +02:00
2026-03-31-data-access-control.md feat: implement data access control — table-level permissions 2026-03-31 12:33:31 +02:00
2026-04-09-multi-instance-deployment-design.md feat(tls): corporate-CA HTTPS with URL-driven rotation, on-VM CSR gen, self-signed fallback (#51) 2026-04-25 19:51:25 +00:00
2026-04-10-porting-internal-features-design.md docs: fix design spec after code review 2026-04-10 18:58:39 +02:00
2026-04-11-remote-query-design.md docs: fix remote query spec after code review 2026-04-11 10:58:25 +02:00
2026-04-12-comprehensive-test-strategy-design.md docs: add comprehensive test strategy spec (6 parallel blocks, 4 layers) 2026-04-12 10:33:26 +02:00
2026-04-14-connector-kit-design.md User management + PAT + CLI distribution + HTML auth redirect (#9 #10 #11 #12) (#28) 2026-04-22 14:24:28 +02:00
2026-04-21-multi-customer-deployment-spec.md chore(oss): isolate customer-specific deploy bits from scripts/grpn/ (#88, wave 1) (#94) 2026-04-27 20:24:34 +02:00
2026-04-27-claude-fetch-primitives-design.md feat(v2): claude-driven fetch primitives + 0.14.0 (#102) 2026-04-29 01:07:19 +02:00
2026-04-29-dev-debug-toolbar-design.md feat(observability): request_id end-to-end + dev debug toolbar + centralized logging (#136) 2026-04-29 22:54:21 +02:00