What's Changed
- fix(proxy): mask secrets split across streamed thinking deltas by @Ar9av in #874
- fix(proxy): keep Gemini thought tail out of the answer part by @Ar9av in #876
- fix(elevenlabs): refuse models chat completions cannot serve at connect by @Ar9av in #877
- fix(elevenlabs): ask for the lowest reasoning effort the model accepts by @WhitePepperLambSoup in #875
- fix(semantic-guard): explicit_bypass verb must be a whole word (#879) by @Ar9av in #880
- fix: replay provenance FPs, pasted keys in session titles, extension chart axes by @Ar9av in #883
- feat(integrations): declare per-agent event_types and pin them with adapter tests by @sharmis-tp in #797
- fix(unlock): record the lift, keep credentials and trail out of the window (GHSA-v6vw-pfgj-4mg8) by @Ar9av in #884
- fix(proxy): keep a blocked chat stream's finish_reason after the judge by @Ar9av in #886
- fix(proxy): observe mode keeps operator and org-signed blocks (#885) by @Ar9av in #887
- fix(mirror): screen Anthropic's text editor and Cursor's edit_file like Write/Edit by @Ar9av in #888
- fix(proxy): judge buffered tool calls per call, and strip a denied legacy function_call by @Ar9av in #889
- Mask AWS secret forms and PEM private keys; session log masks what the proxy masks by @Ar9av in #890
- Block root/home wipes via PowerShell, cmd, Python, Node; block shell writes to authorized_keys by @Ar9av in #891
- Judge program-named and URL tools (system, cli, ssh, kubectl, node, http_request, browser_navigate) by their command or URL by @Ar9av in #892
- hosted MCP: send the per-org edge credential to fleet/resolve by @Ar9av in #893
- fix(context): heredoc bodies judged by destination; allowlists see exec paths as written by @Ar9av in #894
Full Changelog: v1.73.0...v1.74.0