Adam Moussa 7b26ab9516 fix(bedrock): security-review NITs — region resolution, error sanitization, reasoning-block strip ... From /sh-security-review (all confirmed-low): - model.py: resolve region from AWS_REGION OR AWS_DEFAULT_REGION (matches validate_local_dev_llm_config) so the validated region is the one actually used. - model_fallback.py: sanitize Bedrock AccessDenied/ResourceNotFound errors to the error code only, so the role ARN + account id in the raw botocore message never reach logs or the user channel (CWE-209). - sanitize_thinking_blocks.py: also strip empty Bedrock reasoning_content blocks (Converse emits reasoning_content, not thinking) so the middleware is not a no-op on Bedrock; + unit tests. (Empty blocks replay fine today; defensive.)		2026-06-29 15:34:06 -04:00
..
dashboard	feat: switch model providers to AWS Bedrock (Claude) and Fireworks (non-Claude)	2026-06-29 14:57:14 -04:00
integrations	feat: repo-scoped dynamic sandbox snapshots (#1595)	2026-06-23 12:24:11 -07:00
middleware	fix(bedrock): security-review NITs — region resolution, error sanitization, reasoning-block strip	2026-06-29 15:34:06 -04:00
skills	feat: outcomes dataset + bootstrap/continual split via skills (#1365)	2026-06-01 13:25:12 -07:00
tools	feat: author Slack/dashboard/schedule commits + PRs as the app by default (#57) (#60)	2026-06-29 14:22:33 -04:00
utils	fix(bedrock): security-review NITs — region resolution, error sanitization, reasoning-block strip	2026-06-29 15:34:06 -04:00
analyzer.py	feat: route graphs to separate LangSmith tracing projects (#1508)	2026-06-11 17:57:16 -07:00
chat.py	feat: chat with your PR on the review page (#1534)	2026-06-15 17:17:30 -07:00
ci_autofix.py	feat: activate PR babysitting UI toggles for autofix and trigger mode (#1561)	2026-06-17 14:12:04 -07:00
ci_monitor.py	feat: CI auto-fix and PR babysitting for agent PRs (#1530)	2026-06-15 13:53:50 -07:00
encryption.py	feat: support TOKEN_ENCRYPTION_KEY rotation via MultiFernet [closes AB-2323] (#1275)	2026-05-08 14:29:23 -07:00
prompt.py	feat: author Slack/dashboard/schedule commits + PRs as the app by default (#57) (#60)	2026-06-29 14:22:33 -04:00
review_style_collector.py	feat: PR review page (#1495)	2026-06-11 16:11:10 -07:00
review_style_guidance.py	feat: tune reviewer for precision — web/wiki tools + recalibrated prompt (#1312)	2026-05-20 18:35:00 +00:00
reviewer.py	fix: resolve security-review findings (sandbox isolation, IAM list scope, webhook replay, info-leak) (#54)	2026-06-29 12:21:19 -04:00
reviewer_diff.py	fix: reviewer reviews full diff; fix review UI scroll + dark-mode composer (#1575)	2026-06-18 19:24:52 -07:00
reviewer_eval_store.py	feat: Run reviewer eval in a GitHub Action; dashboard becomes read-only (#1556)	2026-06-16 19:38:36 -07:00
reviewer_findings.py	fix: Reviews tab — anchored finding card, paginated list, file tree truncation (#1507)	2026-06-11 17:52:20 -07:00
reviewer_groups.py	fix: Simplify review explanation: full-width, plain prose, no diff links (#1547)	2026-06-16 15:32:24 -07:00
reviewer_publish.py	feat: surface sub-threshold findings in review summary with web app link (#1571)	2026-06-18 11:15:42 -07:00
reviewer_reconcile.py	feat: author Slack/dashboard/schedule commits + PRs as the app by default (#57) (#60)	2026-06-29 14:22:33 -04:00
scheduler.py	feat: add scheduled web agents (#1422)	2026-06-05 02:20:24 +00:00
server.py	feat: switch model providers to AWS Bedrock (Claude) and Fireworks (non-Claude)	2026-06-29 14:57:14 -04:00
webapp.py	feat: author Slack/dashboard/schedule commits + PRs as the app by default (#57) (#60)	2026-06-29 14:22:33 -04:00