release: v2.1.16

Add queue search and filters, safe upload diagnostics, session report exports, account check visibility, and explicit interrupted-upload recovery.\n\nSanitize diagnostic response snippets in persisted results and rotation logs, protect CSV exports against formula injection, and add regression coverage for diagnostics and reports.

tests/upload-manager.test.js

@@ -199,6 +199,26 @@ describe('UploadManager', () => {
     assert.equal(summary.succeeded, 0);
   });
 
+  it('stores only sanitized hoster diagnostics in rotation logs', async () => {
+    const error = new Error('Upload rejected');
+    error.fileRejected = true;
+    error.diagnostic = {
+      http: 403,
+      contentType: 'application/json',
+      payloadSnippet: 'token=very-secret https://cdn.example.test/upload?apiKey=also-secret'
+    };
+    mockUploadFile.mock.mockImplementation(async () => { throw error; });
+
+    const mgr = new UploadManager({ 'doodstream.com': { retries: 0, parallelCount: 1, maxSpeedKbs: 0, restartBelowKbs: 0, timeIntervalSec: 0, maxSizeMb: 0 } });
+    const logs = [];
+    mgr.on('rot-log', (entry) => logs.push(entry));
+
+    await mgr.startBatch([{ file: '/test/diagnostic.mp4', hoster: 'doodstream.com', apiKey: 'key1' }]);
+
+    const failure = logs.find(entry => entry.event === 'upload-failure');
+    assert.equal(failure.payloadSnippet, 'token=[redacted] cdn.example.test/upload');
+  });
+
   it('cancel aborts running uploads', async () => {
     mockUploadFile.mock.mockImplementation(async (hoster, filePath, apiKey, onProgress, signal) => {
       // Simulate a slow upload