refactor(webkit): split WebKitClient internals while preserving facade (#706)

src/mcp-server.ts

@@ -357,7 +357,7 @@ export class MCPServer {
     const isHighRiskHttp = context.transport === 'http' && highRiskTool !== undefined;
 
     if (isHighRiskHttp && !this.httpHighRiskToolsEnabled) {
-      logAuditEntry(name, sessionId, args, undefined, 'blocked');
+      logAuditEntry(name, sessionId, args, undefined, 'denied');
       return {
         jsonrpc: '2.0',
         id: request.id,

src/security/audit-logger.ts

@@ -241,7 +241,7 @@ export function logAuditEntry(
     tool,
     domain: extractDomain(pageUrl || (args.url as string)),
     sessionId,
-    ...(status ? { status } : {}),
+    ...(status !== undefined ? { status } : {}),
     args_summary: summarizeArgs(args),
   };