0.9.0 - Analyzer UX and redaction

Analyzer

• The provider list is grouped into "Full support" and "Limited support".
• When a record resembles a provider but cannot be identified automatically, the result explains why and offers an "Analyze as " button.
• In the event-time view, events without their own timestamp stay where they occurred in the input instead of moving to the end, so lifecycles such as initialize, authentication steps, webhook and verify read in order.
• Decoded errors show their official documentation links for every provider; before, only Stripe and Adyen links were shown. Links are limited to https hosts cited in the provider manifests.

Security

• The PayU India text scrubber runs in linear time on any input (code scanning alert 4).
• Redaction covers the sensitive fields documented by the wave 3 and wave 4 providers: card data, tokens and integration keys, 3-D Secure references, bank, wallet and UPI ids, identity documents, names and contact data, device ids and links that carry access keys.
• Request headers verif-hash (which carries a Flutterwave merchant secret), x-login and x-client-id are hidden.
• Free text redaction catches Flutterwave secret and public keys, JWT-style secrets and UPI ids.
• The email pattern in text redaction now runs in linear time on long input.