fix(middleware): redact Authorization header in structured logs#4134

Open

UGVicV wants to merge 18 commits into

orchestration-agent:mainfrom

UGVicV:fix/bounty-3899-redact-auth-header

Commits on May 22, 2026

fix(config): scope environment overrides to AO_CONFIG and resolve test deadlock (fixes #2017)

Vic
authored and
Vic
committed
fix(sandbox): validate sandbox resource limits configuration (fixes #2009)

Vic
authored and
Vic
committed
fix(cli): handle KeyboardInterrupt in status watch gracefully (fixes #2032)

Vic
authored and
Vic
committed
fix(executor): validate max_concurrent in AgentExecutor initialization (fixes #2050)

Vic
authored and
Vic
committed
fix(metrics): add collected_at timestamp to snapshot output (fixes #2071)

Vic
authored and
Vic
committed
fix(workflow): respect explicit False parameter defaults and overrides (fixes #2042)

Vic
authored and
Vic
committed
fix(metrics): reject non-numeric values in MetricsCollector.gauge (fixes #1978)

Vic
authored and
Vic
committed
fix(metrics): expose active_timers count in snapshot output (fixes #1734)

Vic
authored and
Vic
committed

Commits on May 25, 2026

fix: reject empty metadata keys (closes #2126)

Vic
authored and
Vic
committed
fix: normalize whitespace and reject whitespace-only metadata keys

Vic
authored and
Vic
committed
fix: resolve PEP8 style warnings in agent and test code

Vic
authored and
Vic
committed
fix(metrics): validate counter range limits for exporter compatibility (closes #4096)

Vic
authored and
Vic
committed
fix(cli): reject unsupported output modes via argparse choices (closes #3835)

Vic
authored and
Vic
committed
fix(config): add to_redacted_dict for safe diagnostic output (closes #3015)

Vic
authored and
Vic
committed
fix(sdk): validate task retry counts and timeout in decorator (closes #2324)

Vic
authored and
Vic
committed
fix(metrics): bound histogram sample storage to prevent unbounded memory (closes #982)

Vic
authored and
Vic
committed
fix(sandbox): summarize cleanup_all failures with per-agent reporting (closes #4066)

Vic
authored and
Vic
committed
fix(middleware): redact Authorization header in structured logs (closes #3899)

Vic
authored and
Vic
committed