Josh Avant 36d2ae2a22 SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 23:55:10 +00:00

..

actions

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

agent-tools

fix(security): centralize owner-only tool gating and scope maps

2026-02-19 15:29:23 +01:00

normalize

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

onboarding

refactor: share onboarding secret prompt flows

2026-03-10 22:18:03 +00:00

outbound

refactor: share telegram payload send flow

2026-03-10 22:18:04 +00:00

status-issues

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

account-action-gate.test.ts

refactor(channels): share account action gate resolution

2026-02-18 17:48:02 +00:00

account-action-gate.ts

refactor(channels): share account action gate resolution

2026-02-18 17:48:02 +00:00

account-helpers.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

account-helpers.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

allowlist-match.ts

refactor: dedupe shared helpers across ui/gateway/extensions

2026-02-15 03:34:14 +00:00

bluebubbles-actions.ts

…

catalog.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

channel-config.ts

refactor(channels): centralize match metadata

2026-01-21 18:21:19 +00:00

config-helpers.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

config-helpers.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

config-schema.test.ts

fix: harden legacy plugin schema compatibility tests (#24933) (thanks @pandego)

2026-02-24 03:50:53 +00:00

config-schema.ts

refactor: share channel config schema fragments

2026-03-10 22:18:04 +00:00

config-writes.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

directory-config-helpers.test.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

directory-config-helpers.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

directory-config.ts

refactor: share allowFrom stringification helpers

2026-03-07 23:27:51 +00:00

group-mentions.test.ts

Fix/Complete LINE requireMention gating behavior (#35847)

2026-03-07 14:06:07 -06:00

group-mentions.ts

Fix/Complete LINE requireMention gating behavior (#35847)

2026-03-07 14:06:07 -06:00

group-policy-warnings.test.ts

refactor: share provider group-policy warning collectors

2026-03-08 00:05:24 +00:00

group-policy-warnings.ts

refactor: share provider group-policy warning collectors

2026-03-08 00:05:24 +00:00

helpers.test.ts

refactor: unify account-scoped dm security policy resolver

2026-03-07 23:27:51 +00:00

helpers.ts

refactor: unify account-scoped dm security policy resolver

2026-03-07 23:27:51 +00:00

index.ts

refactor(runtime): harden channel-registry cache invalidation and split outbound delivery flow

2026-03-03 00:05:39 +00:00

load.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

media-limits.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

media-payload.ts

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

message-action-names.ts

Agents: add generic poll-vote action support

2026-03-04 11:36:14 -05:00

message-actions.security.test.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

message-actions.test.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

message-actions.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

onboarding-types.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

pairing-message.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

pairing.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugins-channel.test.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

plugins-core.test.ts

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

registry-loader.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

setup-helpers.test.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

setup-helpers.ts

refactor: share scoped account config patching

2026-03-10 22:18:03 +00:00

slack.actions.ts

fix(slack): propagate mediaLocalRoots through Slack send path

2026-03-05 16:52:49 -06:00

status.ts

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

types.adapters.ts

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

types.core.ts

mattermost: fix DM media upload for unprefixed user IDs (#29925)

2026-03-10 14:22:24 +05:30

types.plugin.ts

Config UI: tag filters and complete schema help/labels coverage (#23796)

2026-02-22 15:17:07 -06:00

types.ts

fix: dedupe probe/token base types (#16986) (thanks @iyoda)

2026-02-15 11:36:54 -06:00

whatsapp-heartbeat.test.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

whatsapp-heartbeat.ts

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

whatsapp-shared.ts

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00