AgentFlight v1.4.0 — Auto PII Redaction, Prometheus Telemetry, Doctor CLI & 91% Test Coverage

What's New in v1.4.0

PyPI: pip install agentflight-mcp==1.4.0 / uvx --from agentflight-mcp==1.4.0 agentflight doctor
Live Hosted Portal & MCP Gateway: https://agentflight-tau.vercel.app/mcp

Enterprise & Operational Readiness

• Automatic PII & Secret Redaction (src/agentflight/redact.py, recorder.py):
  • Pure-stdlib secret scrubber (redact_sensitive, redact_text, redact_cassette, contains_sensitive_data) removes API keys (sk-..., sk-ant-..., sk-proj-..., oa_..., ghp_..., AKIA...), Bearer tokens, JWTs, URL basic-auth credentials, cookies, and auth headers while preserving token-count metrics and JSON schemas.
  • Enabled by default (redact_secrets=True) inside FlightRecorder before SHA-256 chain hashing, with deterministic replay across rotated credentials in CassetteReplayer.replay_step().
• Prometheus /metrics, Request Tracing & Distributed Rate Limiting (telemetry.py, api/index.py, http_server.py):
  • Added GET /metrics (Prometheus text exposition & JSON via Accept: application/json), HEAD health/metrics readiness responses, validated X-Request-ID propagation, opt-in structured JSON logs (AGENTFLIGHT_LOG_JSON=1), and optional stdlib-only Upstash Redis REST distributed rate limiting with fail-open memory fallback.
• Self-Diagnostics & Robustness (cli.py, wrappers.py, linter.py):
  • Added agentflight doctor [--json] verifying Python version, stdlib-core integrity, _agentflight_pytest entry point availability, redaction + SHA-256 chain verification, and circuit breaker enforcement.
  • Coalesced streamed OpenAI tool_calls deltas by index (_merge_tool_call_deltas) and guarded _normalize_tool_def against malformed non-dict schema fields.
• Quality & CI Gates:
  • 167 passing tests (90.57% coverage), --cov-fail-under=90, ruff, and mypy (0 errors) enforced across Python 3.10–3.12, plus automated smoke-production.yml live endpoint checks (14/14 passing).