Under the hood
MCP proxy 401 telemetry now sanitizes the error code before logging it
What
When the tengu_mcp_claudeai_proxy_401 telemetry event records a proxyErrorCode, that value is now passed through a validator that only allows codes matching a simple letters/numbers/underscore/hyphen pattern starting with a letter. Any code that doesn't match is reported as "nonconforming" instead of being logged raw.
Why
This prevents arbitrary or malformed error code strings from being logged verbatim in telemetry, keeping the recorded data predictable and safe.