## [6.42.0](v6.41.4...v6.42.0) (2026-01-25)

### Features

* Token scope detection at startup with graceful degradation ([#190](#190)) ([28bab03](28bab03)), closes [#188](#188)

### Bug Fixes

* **workitems:** use two-step approach for timeEstimate on create ([#195](#195)) ([98abf4e](98abf4e)), closes [#193](#193)

## [6.42.0](v6.41.4...v6.42.0) (2026-01-25)

### Features

* Token scope detection at startup with graceful degradation ([#190](#190)) ([28bab03](28bab03)), closes [#188](#188)

### Bug Fixes

* **workitems:** use two-step approach for timeEstimate on create ([#195](#195)) ([98abf4e](98abf4e)), closes [#193](#193)

…ck aggregation (#196)

* feat(logging): Implement condensed access log format with request stack aggregation

Implements single-line access log format inspired by nginx/envoy. Instead of
multiple log lines per request, all events are aggregated into a single
condensed entry when the request completes.

Features:
- Request stack aggregation: collect tool, action, GitLab response timing
- Single-line access log format with timestamp, client, session, method, path,
  status, duration, tool/action, GitLab status/duration, and details
- Connection tracking: log session stats (requests, tools, errors) on close
- AsyncLocalStorage for transparent context propagation through async calls
- LOG_FORMAT environment variable: "condensed" (default) or "verbose"

Access log format:
[timestamp] ip session method path status duration | tool action | gitlab_status gitlab_duration | details

Connection close format:
[timestamp] CONN_CLOSE ip session duration reason | reqs=N tools=N errs=N

Closes #194

* chore(release): 6.42.0 [skip ci]

## [6.42.0](v6.41.4...v6.42.0) (2026-01-25)

### Features

* Token scope detection at startup with graceful degradation ([#190](#190)) ([28bab03](28bab03)), closes [#188](#188)

### Bug Fixes

* **workitems:** use two-step approach for timeEstimate on create ([#195](#195)) ([98abf4e](98abf4e)), closes [#193](#193)

* fix(logging): nginx-style alignment, quote escaping, dedupe LogFormat type

- All fields always present with "-" for missing values (nginx-style alignment)
- Escape quotes and backslashes in log values for safe parsing
- Import LogFormat from logging/types.ts to avoid type duplication
- Add comments explaining close handler behavior for new sessions
- Fix flaky test assertion using regex for duration matching

* test(config): add LOG_FORMAT parsing tests

Add unit tests for LOG_FORMAT environment variable parsing:
- Default to 'condensed' when not set
- Parse 'verbose' value
- Case-insensitive parsing
- Invalid values default to 'condensed'

* feat(logging): add context and read-only mode to access logs

- Add ctx (context path) and ro (read-only) fields to access log format
- Capture session context and read-only state during tool execution
- Fix SSE close handling: distinguish normal disconnect from abort
- Fix session request counting: count initial request on session init
- Update session ID on stack after session initialization
- Escape newlines/tabs in log values to maintain single-line format
- Add needsQuoting helper to detect control characters

Access log format now:
[ts] ip session ctx ro method path status dur | tool action | GL:status dur | details

* test(logging): add addDetailsForCurrentRequest context-aware test

* fix(logging): gate per-request INFO logs behind LOG_FORMAT=verbose

In condensed mode, suppress individual "Tool called", "Connection verified",
"Executing tool" INFO logs - these are aggregated into single access log line.
Also fix ConnectionTracker.closeConnection to return early when disabled.

* fix(logging): add request tracking to SSE /messages endpoint

- Gate access log tracking in handlers.ts behind LOG_FORMAT=condensed
- Add request tracking to SSE /messages handler:
  - Call connectionTracker.incrementRequests for each request
  - Update request stack with SSE session ID (query param vs header)
  - Wrap handlePostMessage in runWithRequestContextAsync

* fix(logging): move access log middleware before rate limiter

- Register access logging before rate limiter to capture 429 responses
- Update docstring format to include ctx and ro fields
- Correct comment about session ID availability in first request

* fix(server): use optional chaining for res.locals in SSE handler

Prevents TypeError when res.locals is undefined in test mocks.

* fix(logging): cleanup connections on close even when tracking disabled

Prevents memory leak when setEnabled(false) is called while connections
are still open - connections are now always deleted from the map.

* fix(logging): add session tracking for SSE /sse endpoint

- Update request stack with SSE session ID for access log
- Count initial GET /sse request in connection stats

---------

Co-authored-by: semantic-release-bot <[email protected]>