yungle246 a79bc7d074 feat(api): mask secret tokens in api-key list responses (reveal-once) ... Previously the console api-key list returned every key's full plaintext token, so anyone with console access could retrieve the secret of an already-created key (via the copy button or the raw API response). This is contrary to the reveal-once norm. - List endpoints (app keys, workspace dataset keys, per-dataset keys) now return a masked token (prefix + last 4); the full secret is only ever returned by the create endpoint, at creation time. - Frontend secret-key modal displays the masked token as-is and drops the copy affordance for existing keys (copying a masked value is pointless). Applies to both app and dataset keys since they share the modal and the ApiKeyItem response model.		2026-06-25 14:21:38 +09:00
..
__tests__	refactor(web): migrate shared localStorage to createLocalStorageState (#37408)	2026-06-19 13:51:45 +00:00
access-rules-editor	feat: RBAC (#37107)	2026-06-18 16:35:29 +00:00
app	feat(agent-v2): sync nightly updates to main (2026-06-22) (#37651)	2026-06-23 08:05:16 +00:00
app-sidebar	fix: add RBAC feature across various components (#37732)	2026-06-22 07:30:28 +00:00
apps	fix: add RBAC feature across various components (#37732)	2026-06-22 07:30:28 +00:00
base	feat(agent-v2): sync nightly updates to main (2026-06-22) (#37651)	2026-06-23 08:05:16 +00:00
billing	refactor(web): migrate shared localStorage to createLocalStorageState (#37408)	2026-06-19 13:51:45 +00:00
custom	feat: RBAC (#37107)	2026-06-18 16:35:29 +00:00
datasets	Merge branch 'main' into feat/dataset-api-key-scope	2026-06-23 18:21:21 +09:00
develop	feat(api): mask secret tokens in api-key list responses (reveal-once)	2026-06-25 14:21:38 +09:00
devtools	fix(web): defer react-scan loader (#36920)	2026-06-02 03:34:55 +00:00
explore	fix(tests): enhance toast mock and add preview-only app warning test (#37749)	2026-06-22 10:09:07 +00:00
goto-anything	refactor: adapt docs links for product prefixes (#37565)	2026-06-23 03:24:29 +00:00
header	refactor: adapt docs links for product prefixes (#37565)	2026-06-23 03:24:29 +00:00
integrations	refactor: adapt docs links for product prefixes (#37565)	2026-06-23 03:24:29 +00:00
main-nav	fix(web): polish main nav and deployment tooltip styles (#37800)	2026-06-23 08:10:28 +00:00
plugins	fix(tests): enhance toast mock and add preview-only app warning test (#37749)	2026-06-22 10:09:07 +00:00
provider	chore: drop pwa with serwist (#32838)	2026-03-04 17:35:35 +08:00
rag-pipeline	feat: RBAC (#37107)	2026-06-18 16:35:29 +00:00
share	refactor(web): mark Props of share/ components as read-only (#25219) (#37292)	2026-06-10 18:19:37 +00:00
signin	refactor(web): migrate shared localStorage to createLocalStorageState (#37408)	2026-06-19 13:51:45 +00:00
snippet-list	feat: RBAC (#37107)	2026-06-18 16:35:29 +00:00
snippets	refactor(web): migrate shared localStorage to createLocalStorageState (#37408)	2026-06-19 13:51:45 +00:00
tools	refactor: adapt docs links for product prefixes (#37565)	2026-06-23 03:24:29 +00:00
workflow	feat(agent-v2): sync nightly updates to main (2026-06-22) (#37651)	2026-06-23 08:05:16 +00:00
workflow-app	feat(agent-v2): sync nightly updates to main (2026-06-22) (#37651)	2026-06-23 08:05:16 +00:00
create-app-attribution-bootstrap.tsx	chore(web): remove select-auto in body (#36554)	2026-05-25 02:22:39 +00:00
education-verify-action-recorder.tsx	refactor(web): migrate shared localStorage to createLocalStorageState (#37408)	2026-06-19 13:51:45 +00:00
full-screen-loading.tsx	feat(web): refine onboarding UI (#37433)	2026-06-15 08:47:15 +00:00
oauth-registration-analytics.tsx	fix(web): attach Amplitude user ID before firing registration event (#37091)	2026-06-05 06:31:27 +00:00