feat(webapp): run the dashboard agent through AWS Bedrock behind an env switch - #4609

Merged

kathiekiwi merged 26 commits into

mainfrom

feat/dashboard-agent-bedrock

Aug 18, 2026

Commits on Aug 13, 2026

feat(dashboard-agent): run model calls through Bedrock behind an env switch
kathiekiwi
committed
f776554
feat(dashboard-agent): report cache token usage on both providers
kathiekiwi
committed
2e6e26f
fix(dashboard-agent): guard Bedrock model-id shape and drop the guessed fallback
kathiekiwi
committed
bfb3a59
fix(rbac): deny non-member user-actor tokens at the ability layer
kathiekiwi
committed
de36f49
fix(webapp): route dashboard agent head-start through the shared model provider
kathiekiwi
committed
b938d4d
docs: add server changes note for dashboard agent auth hardening
kathiekiwi
committed
4f93ff1
fix(webapp): make dashboard agent head-start gate provider-aware
kathiekiwi
committed
0a54744
fix(webapp): gate bedrock head-start on region and validate provider env
kathiekiwi
committed
87851ad
chore: drop server-changes note
kathiekiwi
committed
66cfdfb
fix(webapp): gate bedrock head-start on AWS_REGION only
kathiekiwi
committed
f4ba8d3
fix(rbac): gate user-actor membership floor on a scoped context
kathiekiwi
committed
df2a1bb
fix(dashboard-agent): route the runtime eval judge through the provider switch
kathiekiwi
committed
fde7011
fix(dashboard-agent): keep the Bedrock prefix cachePoint on short conversations
kathiekiwi
committed
c094a76
test(rbac): prove unscoped user-actor path skips the user lookup
kathiekiwi
committed
85bd73e
fix(webapp): gate bedrock head-start on AWS_REGION or AWS_DEFAULT_REGION
kathiekiwi
committed
cbfa5f8
fix(dashboard-agent): resolve Bedrock region from AWS_REGION or AWS_DEFAULT_REGION
kathiekiwi
committed
642d8a3
refactor(dashboard-agent): treat empty Bedrock region as unset, matching the webapp gate
kathiekiwi
committed
89cd034
fix(dashboard-agent): stop leaking an undocumented ttl to AWS Bedrock
kathiekiwi
committed
cbf7e3b
docs(dashboard-agent): trim the cache-breakpoint comments
kathiekiwi
committed
b6a73d5

Navigation Menu

Uh oh!

Uh oh!

feat(webapp): run the dashboard agent through AWS Bedrock behind an env switch - #4609

feat(webapp): run the dashboard agent through AWS Bedrock behind an env switch#4609
kathiekiwi merged 26 commits into
mainfrom
feat/dashboard-agent-bedrock

Commits on Aug 13, 2026

feat(dashboard-agent): run model calls through Bedrock behind an env switch

feat(dashboard-agent): report cache token usage on both providers

fix(dashboard-agent): guard Bedrock model-id shape and drop the guessed fallback

fix(rbac): deny non-member user-actor tokens at the ability layer

fix(webapp): route dashboard agent head-start through the shared model provider

docs: add server changes note for dashboard agent auth hardening

fix(webapp): make dashboard agent head-start gate provider-aware

fix(webapp): gate bedrock head-start on region and validate provider env

chore: drop server-changes note

fix(webapp): gate bedrock head-start on AWS_REGION only

fix(rbac): gate user-actor membership floor on a scoped context

fix(dashboard-agent): route the runtime eval judge through the provider switch

fix(dashboard-agent): keep the Bedrock prefix cachePoint on short conversations

test(rbac): prove unscoped user-actor path skips the user lookup

fix(webapp): gate bedrock head-start on AWS_REGION or AWS_DEFAULT_REGION

fix(dashboard-agent): resolve Bedrock region from AWS_REGION or AWS_DEFAULT_REGION

refactor(dashboard-agent): treat empty Bedrock region as unset, matching the webapp gate

fix(dashboard-agent): stop leaking an undocumented ttl to AWS Bedrock

docs(dashboard-agent): trim the cache-breakpoint comments

Commits on Aug 17, 2026

fix(dashboard-agent): detect legacy cache breakpoints without the discriminator

fix(rbac): typecheck the testcontainers-importing test file

feat(dashboard-agent): support dedicated non-global Bedrock credentials

Merge remote-tracking branch 'origin/main' into feat/dashboard-agent-bedrock

fix(rbac): drop dangling references from base tsconfig

test(dashboard-agent): restore AWS/provider env vars after model-provider tests

fix(dashboard-agent): treat empty model provider as unset, fix Sonnet Bedrock id