Prompt-injection defenses for LLM agents — fetch interception, output sanitization, session inspection.
release: badger-fetch v0.1.0-beta.1
+42
-1
+41
packages/fetch/CHANGELOG.md
+41
packages/fetch/CHANGELOG.md
···
1
+
# Changelog
2
+
3
+
All notable changes to this package are documented in this file.
4
+
5
+
## [0.1.0-beta.1] - 2026-06-23
6
+
7
+
### Added
8
+
9
+
- Add platform setup command + release/changelog tooling
10
+
11
+
### Changed
12
+
13
+
- Prompt-injection defenses for LLM agents
14
+
- Third ponytail trim — dedup severity count, merge tiny module
15
+
- Disambiguate the two AuditEntry types
16
+
- Add canary token store (004 slice 2)
17
+
- Canary realtime hooks — plant, detect, block (004 slice 3)
18
+
- Dedup canary audit entry, drop unused type (004 review)
19
+
- Fix Stop detector, init dedup, live canary + cleanup (004 review)
20
+
- Rename lastAssistantText -> readTranscriptTail
21
+
- Opencode realtime canary plant/detect/block (004 slice 5)
22
+
- Actually block canary exfil + dedup leak events (004 review)
23
+
- Trim dead canary helpers, dedup live rescan (004 review)
24
+
- Rename canary-lifecycle -> should-mint-canary (match exported fn)
25
+
- Unify stores behind SessionStore<T> (candidate 2)
26
+
- WebSearch parity via parseWebSearch normalizer (issue 009)
27
+
- Deepen tool-result scanning into scanToolResult (arch candidate 1)
28
+
- Surface LLM verdict in OpenCode warning + fix stale fetch/src docs
29
+
30
+
### Removed
31
+
32
+
- Drop dead ./core subpath export (core/ moved to utils/)
33
+
34
+
### Security
35
+
36
+
- Trim dead weight, harden URL validation + sanitization eval
37
+
- Second ponytail trim pass — dead code + dead config
38
+
- Harden init's supply-chain posture (pin + --ignore-scripts, local-only runner)
39
+
- Folder-structure compliance for utils/ + decide-action rename
40
+
- Folder-per-function for top-level modules + sanitize-response rename
41
+