Release 1.0.3

README.md

@@ -1,4 +1,4 @@
-# Opportunities Extension 1.0.2
+# Opportunities Extension 1.0.3
 
 Browser extension that adds the "Opportunities Extension" shortcut to the permitted Oracle Fusion pages, retrieves opportunities, and displays them in a filterable table or calendar.
 
@@ -54,7 +54,8 @@ Reference changes and modal reopenings reuse that result. Users with `SALES_REP`
 do not trigger CRM Service Request or Workload Actions queries or see their badges.
 If identity or roles cannot be validated, only these two features stay disabled;
 other opportunity features continue. Reload the page to refresh identity/roles.
-The unused identity token is discarded and redacted from debug responses.
+The identity token is retained in debug responses and hidden by default; the
+explicit sensitive-values toggle reveals the original value.
 
 Consumer token recovery also handles HTTP 401/403, in addition to HTTP 200 with
 invalid JSON. It opens the existing SPA session URL in an inactive temporary tab,
@@ -268,8 +269,9 @@ HTTP methods/statuses, request/response sections and JSON tokens. Highlighting
 uses safe text nodes only after the existing sensitive-value masking. Compact JSON,
 supported protection prefixes and JSON documents wrapped in strings are normalized
 and indented, including while sensitive values are visible. Large JSON responses
-are captured as bounded, valid JSON previews with an explicit omission notice,
-preserving indentation, highlighting and sensitive-field masking. Already incomplete
+are captured in full, preserving indentation, highlighting and sensitive-field
+masking. Original sensitive values are retained for explicit reveal, including
+identity, tokenrelay and catalog tokens. Already incomplete
 or invalid JSON remains plain text. The visibility toggle retains its existing
 behavior. Focus, expansion and timeline scroll position survive log updates.
 
@@ -335,6 +337,17 @@ a focused chart fixture. Stop the server with Ctrl+C when finished.
 - Improved compact layouts, customer actions, session recovery and completion-badge fade-out behavior.
 - Regenerated Chromium/Edge and Firefox distributions. Validation uses automated, browser-independent tests; installed-browser smoke tests were not performed for this release.
 
+## Release 1.0.3 - 2026-10-13
+
+- Added monthly and weekly calendar views with stage colors, fiscal week labels, daily counts and overflow details.
+- Added searchable Action forms, required-field validation, saving and local badge updates.
+- Added Service Request creation with dynamic lookups, payload/header confirmation and session recovery.
+- Added Internal Service Request details and creation. Save reads parent data from `requestSRInfo`, resolves the current resource user, and links the new record using the parent `SrId`.
+- Internal SR creation uses Session authentication, JSON, Origin and the observed App Builder client ID. Customer deadlines remain date-only; internal deadlines use midnight UTC ISO timestamps.
+- Improved activity filters, cache reuse, Refresh all, progress indicators and compact layouts.
+- Debug retains complete response bodies and reveals original sensitive values through the visibility toggle; values are hidden by default.
+- Regenerated Chromium/Edge and Firefox distributions. Automated tests use synthetic data; real Oracle creation and installed-browser smoke tests are not part of release validation.
+
 ## Loading in Development Mode
 
 ### Chrome or Microsoft Edge