Josh Avant 36d2ae2a22 SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 23:55:10 +00:00

..

actions

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

agent-tools

…

normalize

…

onboarding

refactor: share onboarding secret prompt flows

2026-03-10 22:18:03 +00:00

outbound

refactor: share telegram payload send flow

2026-03-10 22:18:04 +00:00

status-issues

…

account-action-gate.test.ts

…

account-action-gate.ts

…

account-helpers.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

account-helpers.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

allowlist-match.ts

…

bluebubbles-actions.ts

…

catalog.ts

…

channel-config.ts

…

config-helpers.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

config-helpers.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

config-schema.test.ts

fix: harden legacy plugin schema compatibility tests (#24933) (thanks @pandego)

2026-02-24 03:50:53 +00:00

config-schema.ts

refactor: share channel config schema fragments

2026-03-10 22:18:04 +00:00

config-writes.ts

…

directory-config-helpers.test.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

directory-config-helpers.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

directory-config.ts

refactor: share allowFrom stringification helpers

2026-03-07 23:27:51 +00:00

group-mentions.test.ts

Fix/Complete LINE requireMention gating behavior (#35847)

2026-03-07 14:06:07 -06:00

group-mentions.ts

Fix/Complete LINE requireMention gating behavior (#35847)

2026-03-07 14:06:07 -06:00

group-policy-warnings.test.ts

refactor: share provider group-policy warning collectors

2026-03-08 00:05:24 +00:00

group-policy-warnings.ts

refactor: share provider group-policy warning collectors

2026-03-08 00:05:24 +00:00

helpers.test.ts

refactor: unify account-scoped dm security policy resolver

2026-03-07 23:27:51 +00:00

helpers.ts

refactor: unify account-scoped dm security policy resolver

2026-03-07 23:27:51 +00:00

index.ts

refactor(runtime): harden channel-registry cache invalidation and split outbound delivery flow

2026-03-03 00:05:39 +00:00

load.ts

…

media-limits.ts

…

media-payload.ts

…

message-action-names.ts

Agents: add generic poll-vote action support

2026-03-04 11:36:14 -05:00

message-actions.security.test.ts

…

message-actions.test.ts

…

message-actions.ts

…

onboarding-types.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

pairing-message.ts

…

pairing.ts

…

plugins-channel.test.ts

…

plugins-core.test.ts

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

registry-loader.ts

…

setup-helpers.test.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

setup-helpers.ts

refactor: share scoped account config patching

2026-03-10 22:18:03 +00:00

slack.actions.ts

fix(slack): propagate mediaLocalRoots through Slack send path

2026-03-05 16:52:49 -06:00

status.ts

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

types.adapters.ts

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

types.core.ts

mattermost: fix DM media upload for unprefixed user IDs (#29925)

2026-03-10 14:22:24 +05:30

types.plugin.ts

…

types.ts

…

whatsapp-heartbeat.test.ts

…

whatsapp-heartbeat.ts

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

whatsapp-shared.ts

…