Repository navigation
fix(adapters): harden webhook tenant isolation - #877
Merged
Merged
Conversation
Signed-off-by: Ben Sabic <bensabic@users.noreply.github.com>
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
bensabic
enabled auto-merge (squash)
August 31, 2026 06:06
Signed-off-by: dancer <josh@afterima.ge>
Signed-off-by: dancer <josh@afterima.ge>
Signed-off-by: dancer <josh@afterima.ge>
![vercel[bot]](https://avatars.githubusercontent.com/in/8329?s=60&v=4){kind=small}
Signed-off-by: dancer <josh@afterima.ge>
dancer
approved these changes
Sep 3, 2026
dancer
disabled auto-merge
September 3, 2026 16:30
patrick-chinchill
added a commit
to Chinchill-AI/chat-sdk-python
that referenced
this pull request
Sep 30, 2026
) (#245) Ports upstream fc7df9c4 (vercel/chat#500) and the logging parts of f485255b (vercel/chat#877). Fix (upstream parity): GitHub, GChat, Slack (post-verification only), Teams bridge and Linear no longer log raw webhook bodies at DEBUG; they log request-shape metadata only (bodyLength / bodyBytes, contentType, eventType, signaturePresent). Chat 'Incoming message' drops author and adds is_bot. Invalid-JSON errors log bodyBytes instead of bodyPreview. Python-specific divergence (stricter than upstream 4.41.1): WhatsApp drops its raw-body log and bodyPreview; GChat message-event / Pub/Sub, Chat, Slack and Discord slash-command debug logs record textLength instead of message text or author. Recorded in docs/UPSTREAM_SYNC.md. Consumer-visible: DEBUG log message names and keys change; no routing, response or status change. Adds shared/log_utils.py and tests/test_webhook_log_hygiene.py. Closes #187
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Multi-workspace Slack now ignores commands and interactions when their installation cannot be found, and channel names stay isolated per workspace.
Google Chat no longer learns its identity from incoming mentions, and forward history reads use bounded native pagination.
Webhook logs avoid message content. The example app protects preview routing, records only successful verified deliveries, and caps recording size and retention.