- Apply redaction policy to SQL result output — Result and ResultRows events use RedactionTraceOnly to preserve query payload while redacting trace metadata, ensuring sensitive column values are never masked by the output layer
- Protect rows field in non-JSON output formats by serializing it as an opaque JSON string, preventing YAML and plain formatters from re-interpreting SQL row data and corrupting its structure
- Apply per-event redaction policy in MCP mode before assembling the events array, consistent with CLI and pipe modes
- Update agent-first-data dependency to 0.7.0, which adds YAML and plain-text output format support