Danny Avila dcdaaeac67 🤐 fix: Exclude Provider Secrets from HITL Pending Actions (#14136) ... * 🤐 fix: Exclude Provider Secrets from HITL Pending Actions Sanitize resolved model parameters before persisting them in the pending action's resumeContext, and strip resumeContext/requestFingerprint from every client-facing copy (SSE emit, reconnect gap-fill, resume state, status route). The full record stays server-side for resume replay. * 🤐 fix: Treat Header-Carrier Keys as Sensitive Wholesale Google llmConfig places the Authorization header in customHeaders, and header names like Ocp-Apim-Subscription-Key defeat name heuristics. Match 'header' as a key fragment so every header-carrier object is dropped rather than relying on exact carrier names. * 🤐 fix: Strip Preconfigured Client Instances from Resume Params Bedrock stores a BedrockRuntimeClient on llmConfig.client when PROXY or a bearer token is configured; replaying it would also fold a mangled client object into additionalModelRequestFields on resume.		2026-07-07 07:22:50 -04:00
..
api	🤐 fix: Exclude Provider Secrets from HITL Pending Actions (#14136)	2026-07-07 07:22:50 -04:00
client	🧰 feat: Redesign Agent Builder with Unified Tools Marketplace, Skills & Orchestration (#13952)	2026-07-05 11:30:12 -04:00
data-provider	🧷 chore: Expose Retain Recent Summarization Config (#14134)	2026-07-06 10:06:54 -04:00
data-schemas	🗄️ fix: Return Cached Transaction-Support Value on Cache Hit (#13999)	2026-07-05 12:02:55 -04:00