Greg Richardson 538f9e3e82 fix: prevent AI assistant from soliciting sensitive creds (#45692) ...

Adds prompt guardrails and evals to prevent the AI assistant from asking
users to share sensitive data (API keys, `.env` contents, etc.) and to
warn when credentials are shared.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Stronger safety behavior: assistant now refuses requests to share full
environment files, asks for variable names only, and directs users to
secure secret-management tooling.
* Immediate warning and guidance if credentials or other sensitive
values are pasted in chat, without repeating exposed secrets.
* **Behavior**
* Clarified evaluation rules so responses more consistently follow the
new safety guidance.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-05-07 13:22:19 -06:00

..

tools

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

ai-details.test.ts

chore(ai): remove DPA signer killswitch for assistant tracing (#45134)

2026-04-27 13:53:24 -04:00

ai-details.ts

chore(ai): remove DPA signer killswitch for assistant tracing (#45134)

2026-04-27 13:53:24 -04:00

bedrock.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

braintrust-logger.test.ts

chore(ai): remove DPA signer killswitch for assistant tracing (#45134)

2026-04-27 13:53:24 -04:00

braintrust-logger.ts

chore(ai): remove DPA signer killswitch for assistant tracing (#45134)

2026-04-27 13:53:24 -04:00

generate-assistant-response.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

message-utils.test.ts

chore: adds tests (#42653)

2026-02-11 09:50:11 +01:00

message-utils.ts

Assistant action orientated approach (#38806)

2025-09-29 03:57:36 +00:00

model.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

model.ts

feat(assistant): per-endpoint reasoningEffort + model config cleanup (#43981)

2026-03-25 11:29:23 -04:00

model.utils.test.ts

feat(assistant): upgrade default models to gpt-5.4-nano and gpt-5.3-codex (#44107)

2026-03-26 14:35:54 +08:00

model.utils.ts

feat(assistant): upgrade default models to gpt-5.4-nano and gpt-5.3-codex (#44107)

2026-03-26 14:35:54 +08:00

prompts.ts

fix: prevent AI assistant from soliciting sensitive creds (#45692)

2026-05-07 13:22:19 -06:00

supabase-mcp.ts

fix: prevent AI assistant from soliciting sensitive creds (#45692)

2026-05-07 13:22:19 -06:00

test-fixtures.ts

Assistant action orientated approach (#38806)

2025-09-29 03:57:36 +00:00

tool-filter.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

tool-filter.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

util.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

util.ts

fix(assistant): sanitize backslash-escaped apostrophes in SQL (#43728)

2026-03-17 13:44:14 -04:00