AIKIDO-2026-106146

TL;DR

The model catalog caches per-provider model specifications in a local SQLite database (models.db) for atomic cross-process reuse. Provider-defined request headers, including API keys, Authorization values, and cookies, are serialized verbatim into the cache alongside the rest of each model spec, leaving those credentials stored in plaintext on disk. Any local user or process that can read the cache file, a backup, or a synced copy of it can recover the stored secrets. The fix omits header values before persistence, tracks omitted rows, enables SQLite secure_delete to scrub previously stored rows, and restores only safe static headers or refetches dynamic ones on load.