diegosouzapw e6a1233809 fix(sse): redact video transcript in pre-guardrail rejected-request logs (#12150 P2 item 7) ...

recordRejectedRequestUsage persists the raw client body for a request rejected
BEFORE handleChatCore runs (provider circuit-breaker OPEN / combo all-targets
exhausted), so the video-bridge guardrail never got a chance to redact the
transcript — a rejected video request kept its raw transcript cues in the
call-log artifact.

Route that body through redactVideoTranscriptFieldsForLog before persistence: a
no-op clone for any non-video body, structured field substitution (never
bypassable by cue content) for a video one. The model path is unaffected — this
request never reaches a provider.

TDD: RED→GREEN — a gate-rejected request carrying an input_video transcript now
persists [redacted-video-transcript] with the raw cue text gone.

Refs #12150, #12430 (item 7).

2026-09-04 03:59:37 -03:00

..

_helpers

…

_setup

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

benchmarks

…

boundary

…

e2e

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

fixtures

fix(sse): preserve 1min.ai partial output before stream errors (#12466)

2026-09-03 21:06:28 -03:00

golden-set

…

helpers

…

homolog

…

integration

fix(monitoring): serve cached credentialHealth off the request path (#12533)

2026-09-03 23:40:22 -03:00

live

…

llm-security

…

load

…

manual

…

security

…

snapshots

chore(providers): bump Claude Code wire identity + Devin bridge pin to 2.1.258 (#12604)

2026-09-03 13:49:46 -03:00

translator

…

unit

fix(sse): redact video transcript in pre-guardrail rejected-request logs (#12150 P2 item 7)

2026-09-04 03:59:37 -03:00

_cp_mock_hook.mts

…

_cp_mock_module.mts

…

_run_dns_guard_test.sh

…

e2e-tool-calls.sh

…