Tags from recce

v1.50.0

2026-05-27T10:01:08Z

fix(adapter): match DuckDB 1.5.x external-access denial wording

DuckDB 1.5.x reworded its runtime denial from "Cannot change
enable_external_access setting while database is running" to "Cannot
enable external access while database is running". The pinned matcher in
is_duckdb_external_access_blocked() no longer matched, so the raw
InvalidInputException escaped unwrapped instead of becoming
DuckDBExternalAccessBlocked — breaking the HTTP 400 contract and turning
CI red (test_blocks_external_access_sql_when_disabled[SET bypass]) once
duckdb==1.5.2 resolved.

Add the new wording to the pinned denial list, keeping the old one for
DuckDB <= 1.4.x still in use.

Validated locally against both duckdb 1.4.4 and 1.5.2: the SET-bypass
case fails without this change and passes with it.

Refs DRC-3578

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Wei-Chun, Chang <wcchang@infuseai.io>

v1.49.0

2026-05-20T09:13:09Z

docs(cli): add cloud-mode examples to recce mcp-server --help

Users discovering cloud mode through `recce mcp-server --help` had no
visible example of the required flag combination. The Examples block now
shows the cloud-session path in two forms — explicit `--api-token` and
profile.yml-resolved token.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Wei-Chun, Chang <wcchang@infuseai.io>

v1.48.0

2026-05-13T09:38:58Z

Merge pull request #1374 from DataRecce/feature/drc-3439-migrate-pnpm…

…-v10-v11-and-align-node-minimum-to-24-across

chore(pnpm): migrate recce to pnpm v11 + Node ≥24 (DRC-3439)

v1.47.1

2026-05-07T04:46:48Z

fix(mcp): restore cloud-snapshot mode for Recce Summary agent (DRC-3384)

`recce mcp-server` collapsed two distinct cloud paths into a single live
CloudBackend branch. Setting RECCE_SESSION_ID (the Recce Summary agent's
contract) routed into the live-session spawn (POST /api/v2/sessions/{id}/
instance) and 401'd before the MCP server could start, breaking GitLab
summary generation in production.

Split mcp-server into three explicit modes:

- cloud-session (public) `--cloud --session <id>`
CloudBackend proxies tool calls to a live Recce Cloud session.
- cloud-snapshot (internal) `RECCE_SESSION_ID` / `RECCE_SNAPSHOT_ID` env
CloudStateLoader downloads the state file from S3 and the MCP server
runs locally against that snapshot. Used by the Recce Summary agent.
- local (default) no flags / no env

Capture --cloud / --session BEFORE patch_derived_args() so explicit
cloud-session can still be told apart from env-driven cloud-snapshot
after the helper promotes session_id to cloud=True. Reset cloud=False
before run_mcp_server() in non-session paths so the legacy snapshot
flow doesn't take the CloudBackend branch.

Tests updated:
- cloud-snapshot via RECCE_SESSION_ID env -> state loader, no live spawn
- cloud-session via --cloud --session -> CloudBackend, no state loader

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Kent Huang <kent@infuseai.io>

v1.47.0

2026-05-06T09:19:24Z

Merge pull request #1352 from DataRecce/feature/drc-3344-lineage-tab-…

…show-impact-badges-on-direct-upstreamdownstream

feat(lineage): show impact badges on direct upstream/downstream in Lineage tab

v1.46.3

2026-05-05T15:09:53Z

Merge pull request #1355 from DataRecce/claude/investigate-issue-1354…

…-VWPAP

fix(cll): handle compiled SQL referencing unresolved parents (#1354)

v1.46.2

2026-05-04T01:46:22Z

Merge pull request #1350 from DataRecce/fix/per-node-db-cross-env-cat…

…alog-fallback

fix(cll): cross-env catalog fallback in per_node.db (drop manifest)

v1.46.1

2026-04-30T08:00:58Z

Merge pull request #1348 from DataRecce/fix/per-node-db-column-case-d…

…edup

fix(cll): dedupe per_node.db columns case-insensitively (catalog wins)

v1.46.0

2026-05-04T01:44:00Z

Merge pull request #1346 from DataRecce/fix/drc-3343-dedupe-model-inf…

…o-fetch

fix(lineage): dedupe /api/models/{id} fetch on node click

v1.45.0

2026-04-27T07:18:19Z

Merge pull request #1344 from DataRecce/chore/dependabot-2026-04-27

chore(deps): consolidate dependabot updates + TypeScript 6.0