hardening and docs#562

Open

kiwicopple wants to merge 22 commits intosupabase:mainfrom

kiwicopple:security/general-improvements

Commits on Jan 22, 2026

security(wasm_fdw): require fdw_package_checksum for supply chain protection

kiwicopple
and
claude
committed
security(wrappers): implement credential masking to prevent leaks in error messages

kiwicopple
and
claude
committed
security(wrappers): add configurable response size limits to HTTP-based FDWs

kiwicopple
and
claude
committed
docs(security): add platform-wide security documentation and tests

kiwicopple
and
claude
committed
docs: add .claude/CLAUDE.md for project context
kiwicopple
committed
fix(auth0,cognito): remove unused ResponseTooLarge error variants

kiwicopple
and
claude
committed
fix(utils): mask all occurrences of credentials in error messages

kiwicopple
and
claude
committed
docs(security): add Response Size Limits section to SECURITY.md

kiwicopple
and
claude
committed
fix(lib): remove redundant credential masking exports from prelude

kiwicopple
and
claude
committed
style(options): fix formatting

kiwicopple
and
claude
committed
fix(tests): restructure credential masking test to avoid false positives

kiwicopple
and
claude
committed
fix(utils): prevent infinite loops in credential masking

kiwicopple
and
claude
committed
docs(security): document response size limit limitation

kiwicopple
and
claude
committed
fix(instance): use struct variant syntax for OptionsError

kiwicopple
and
claude
committed
fix(utils): use strip_prefix instead of manual prefix stripping

kiwicopple
and
claude
committed

Commits on Jan 26, 2026