2 commits

Author	SHA1	Message	Date
Adam Moussa	7b26ab9516	fix(bedrock): security-review NITs — region resolution, error sanitization, reasoning-block strip ... From /sh-security-review (all confirmed-low): - model.py: resolve region from AWS_REGION OR AWS_DEFAULT_REGION (matches validate_local_dev_llm_config) so the validated region is the one actually used. - model_fallback.py: sanitize Bedrock AccessDenied/ResourceNotFound errors to the error code only, so the role ARN + account id in the raw botocore message never reach logs or the user channel (CWE-209). - sanitize_thinking_blocks.py: also strip empty Bedrock reasoning_content blocks (Converse emits reasoning_content, not thinking) so the middleware is not a no-op on Bedrock; + unit tests. (Empty blocks replay fine today; defensive.)	2026-06-29 15:34:06 -04:00
open-swe[bot]	65acc4c9d3	fix: sanitize malformed Anthropic thinking blocks (#1357) ... Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Johannes du Plessis <51395795+johannes117@users.noreply.github.com>	2026-05-28 16:15:13 -07:00