[anycodes]

Description

OpenSandbox 1.1.1 strips Authorization from proxied application requests. A real same-sandbox probe returned direct Bearer 200, proxy Bearer 401 and proxy X-Access-Token 200. Keep Bearer and also use the server's existing X-Access-Token header when unused, preserving all existing gateway credentials.

Refs #99 and Alibaba-Agent-Sandbox/awesome-providers#31.

Type of Change

• Bug fix

Changes

• Protect case-insensitive header ownership from both explicit headers and injected HTTP client defaults.
• Generate request headers without persisting application credentials, preserving token rotation/removal and borrowed-client lifecycle.
• Prepare matching client/server 0.3.1a4 distributions; no server runtime or public API change.
• Add bilingual workflow guidance, changelog and separate engineering evidence.

Testing

• 101 focused application boundary, client model and sandbox helper regressions passed.
• Full client/server lint and type checks passed; format and health checks passed.
• Full remote Python 3.10/3.11/3.12 matrix, pinned standard and Node engine contracts, package builds: https://github.com/Alibaba-Agent-Sandbox/python-sdk/actions/runs/40110173595; local make build dist-check also passed.
• Real updated-client OpenSandbox direct/default, direct/portable and proxy/default verification and independent cleanup: https://github.com/Alibaba-Agent-Sandbox/awesome-providers/actions/runs/40110372103.

Checklist / Definition of Done

• Tests cover proxy filtering, Bearer-only compatibility, explicit/injected gateway header preservation and token rotation.
• Versions are in lockstep, bilingual docs and changelog updated; no credentials or private resource IDs.
• Accepted ADR and complete scoped evidence record exact candidate revisions and limitations.
• Real-component evidence is complete. Final record-only head CI also passed: https://github.com/Alibaba-Agent-Sandbox/python-sdk/actions/runs/40111113067.

No new authentication protocol, configuration option, provider fallback or automatic request retry is introduced. The original direct/proxy observations remain separate from updated-client acceptance.