Vincent Koc
|
2185dcf136
|
test(secrets): reuse auth runtime fixtures
|
2026-04-12 03:54:26 +01:00 |
|
Peter Steinberger
|
adb750fa63
|
perf(test): trim secrets runtime snapshot lane
|
2026-04-06 15:19:34 +01:00 |
|
Peter Steinberger
|
55f18f67e2
|
perf(test): split secrets runtime provider coverage
|
2026-04-06 14:40:35 +01:00 |
|
Peter Steinberger
|
0430bab070
|
perf(test): split secrets runtime env coverage
|
2026-04-06 14:13:09 +01:00 |
|
Peter Steinberger
|
bc160c0613
|
perf(test): split secrets runtime coverage
|
2026-04-06 13:05:38 +01:00 |
|
Vincent Koc
|
6efbebefbf
|
fix(runtime): drop legacy x_search auth shim
|
2026-04-06 11:03:58 +01:00 |
|
Peter Steinberger
|
7bae391f33
|
perf(secrets): split runtime snapshot coverage
|
2026-04-06 08:18:40 +01:00 |
|
Peter Steinberger
|
73485c2300
|
perf(secrets): trim runtime import walls
|
2026-04-06 07:32:12 +01:00 |
|
Peter Steinberger
|
b432dc5af9
|
perf(test): trim secrets runtime coverage
|
2026-04-06 06:45:05 +01:00 |
|
Peter Steinberger
|
8206328a94
|
refactor: tighten final boundary guardrails
|
2026-04-05 21:14:52 +01:00 |
|
Peter Steinberger
|
37b3acad34
|
test: update legacy config doctor expectations
|
2026-04-05 16:12:45 +01:00 |
|
Peter Steinberger
|
23275edef1
|
refactor: simplify web provider plugin discovery
|
2026-04-05 08:50:01 +01:00 |
|
Vincent Koc
|
745f1c9812
|
fix(types): align callers with removed legacy config aliases
|
2026-04-04 01:50:44 +09:00 |
|
Peter Steinberger
|
a5e725a3b8
|
test: align vitest defaults with migrated config
|
2026-04-03 17:42:48 +01:00 |
|
Peter Steinberger
|
bf6bd7432a
|
fix: harden discord ack auth and gate fallout (#60081) (thanks @FunJim)
|
2026-04-04 00:53:45 +09:00 |
|
Vincent Koc
|
8f5f78bbe8
|
feat(providers): reopen model request transport config (#60327)
* feat(providers): reopen model request transport config
* chore(config): refresh request override baselines
|
2026-04-03 23:25:11 +09:00 |
|
Vincent Koc
|
61f13173c2
|
feat(providers): add model request transport overrides (#60200)
* feat(providers): add model request transport overrides
* chore(providers): finalize request override follow-ups
* fix(providers): narrow model request overrides
|
2026-04-03 19:00:06 +09:00 |
|
Vincent Koc
|
23719dd513
|
feat(media): add request transport overrides (#59848)
* style(providers): normalize request policy formatting
* style(providers): normalize request policy formatting
* feat(media): add request transport overrides
* fix(secrets): resolve media request secret refs
* fix(secrets): cover shared media request refs
* fix(secrets): scope media request ref activity
* fix(media): align request ref gating
|
2026-04-03 17:35:26 +09:00 |
|
Peter Steinberger
|
051b5ddafe
|
test: dedupe core test teardown paths
|
2026-04-03 07:14:58 +01:00 |
|
Vincent Koc
|
3872a866a1
|
fix(xai): make x_search auth plugin-owned (#59691)
* fix(xai): make x_search auth plugin-owned
* fix(xai): restore x_search runtime migration fallback
* fix(xai): narrow legacy x_search auth migration
* fix(secrets): drop legacy x_search target registry entry
* fix(xai): no-op knob-only x_search migration fallback
|
2026-04-02 23:54:07 +09:00 |
|
Vincent Koc
|
3e4de956c0
|
!refactor(xai): move x_search config behind plugin boundary (#59674)
* refactor(xai): move x_search config behind plugin boundary
* chore(changelog): note x_search config migration
* fix(xai): include x_search migration helpers
|
2026-04-02 22:08:59 +09:00 |
|
Vincent Koc
|
e48ee8ae9e
|
test(secrets): update inactive warning coverage
|
2026-04-02 21:21:38 +09:00 |
|
Peter Steinberger
|
ce58f55fe0
|
fix: require doctor migration for legacy web search config
|
2026-04-01 04:22:41 +09:00 |
|
Josh Avant
|
81b777c768
|
fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044)
* Config: harden SecretRef round-trip handling
* Gateway: test SecretRef preflight on config writes
* Agents: align skill loader with upstream Skill type
* Docs: align SecretRef write semantics with Control UI and RPC behavior
* Config: add UI and gateway regression evidence for SecretRef hardening
* Config: add token SecretRef restore regression and skill sourceInfo compat
* UI: scope structured-value lockout to SecretRef fields
* Agents: remove out-of-scope skill loader compat edits
* UI: reduce app-render churn to rawAvailable-only changes
* Gateway: scope SecretRef preflight to submitted config
* Docs: clarify config write SecretRef preflight scope
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
|
2026-03-30 23:55:03 -05:00 |
|
Peter Steinberger
|
6b6ddcd2a6
|
test: speed up core runtime suites
|
2026-03-31 02:25:02 +01:00 |
|
Peter Steinberger
|
168ab94eee
|
refactor(config): pin runtime snapshot and drop ttl cache
|
2026-03-29 22:57:31 +01:00 |
|
Peter Steinberger
|
694bc082a8
|
fix: resolve acpx MCP secret inputs
|
2026-03-30 05:30:32 +09:00 |
|
Gustavo Madeira Santana
|
e2a2492248
|
Secrets: fix Matrix default-account password activity
|
2026-03-28 01:08:33 -04:00 |
|
Gustavo Madeira Santana
|
59535e3414
|
Matrix: align default account secret handling
|
2026-03-28 00:34:48 -04:00 |
|
kakahu
|
158e7c517e
|
fix(matrix): resolve env SecretRef fallback in clean() for channel startup (#54980)
Merged via squash.
Prepared head SHA: b71a86e68e
Co-authored-by: kakahu2015 <17962485+kakahu2015@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-03-28 00:21:57 -04:00 |
|
Peter Steinberger
|
01bcbcf8d5
|
refactor: require legacy config migration on read
|
2026-03-26 23:23:47 +00:00 |
|
Peter Steinberger
|
4029ce738c
|
test: speed up targeted unit suites
|
2026-03-24 19:36:08 +00:00 |
|
Peter Steinberger
|
9105b3723d
|
test: harden no-isolate test module resets
|
2026-03-23 01:02:16 -07:00 |
|
Peter Steinberger
|
2773f33084
|
test: stabilize vitest no-isolate suites
|
2026-03-22 14:28:43 -07:00 |
|
Vincent Koc
|
e56dde815e
|
fix(web-search): split runtime provider resolution
|
2026-03-20 00:06:12 -07:00 |
|
Shakker
|
03c86b3dee
|
fix(secrets): mock bundled web search providers in runtime tests
|
2026-03-20 03:48:13 +00:00 |
|
Vincent Koc
|
d03c110a0a
|
fix(ci): split secrets runtime integration coverage
|
2026-03-19 14:49:01 -07:00 |
|
Vincent Koc
|
83a267e2f3
|
fix(ci): reset deep test runtime state
|
2026-03-19 14:23:32 -07:00 |
|
Peter Steinberger
|
f6928617b7
|
test: stabilize gate regressions
|
2026-03-18 15:36:32 +00:00 |
|
Peter Steinberger
|
0a2f95916b
|
test: expand ssh sandbox coverage and docs
|
2026-03-15 21:38:22 -07:00 |
|
Peter Steinberger
|
b8bb8510a2
|
feat: move ssh sandboxing into core
|
2026-03-15 21:35:30 -07:00 |
|
Josh Avant
|
d30dc28b8c
|
Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)
* Secrets: harden exec SecretRef validation and reload LKG coverage
* Tests: harden exec fast-exit stdin regression case
* Tests: align lifecycle daemon test formatting with oxfmt 0.36
|
2026-03-10 13:45:37 -05:00 |
|
Josh Avant
|
f0eb67923c
|
fix(secrets): resolve web tool SecretRefs atomically at runtime
|
2026-03-09 22:57:03 -05:00 |
|
DevMac
|
4bb8104810
|
test(secrets): skip ACL-dependent runtime snapshot tests on windows
|
2026-03-09 05:38:54 +00:00 |
|
Peter Steinberger
|
41eef15cdc
|
test: fix windows secrets runtime ci
|
2026-03-09 05:24:09 +00:00 |
|
Vincent Koc
|
eabda6e3a4
|
fix(tests): correct security check failure
|
2026-03-08 18:13:35 -07:00 |
|
bbblending
|
4ff4ed7ec9
|
fix(config): refresh runtime snapshot from disk after write. Fixes #37175 (#37313)
Merged via squash.
Prepared head SHA: 69e1861abf
Co-authored-by: bbblending <122739024+bbblending@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-03-08 19:49:15 -04:00 |
|
Josh Avant
|
8e20dd22d8
|
Secrets: harden SecretRef-safe models.json persistence (#38955)
|
2026-03-07 11:28:39 -06:00 |
|
Vincent Koc
|
42e3d8d693
|
Secrets: add inline allowlist review set (#38314)
* Secrets: add inline allowlist review set
* Secrets: narrow detect-secrets file exclusions
* Secrets: exclude Docker fingerprint false positive
* Secrets: allowlist test and docs false positives
* Secrets: refresh baseline after allowlist updates
* Secrets: fix gateway chat fixture pragma
* Secrets: format pre-commit config
* Android: keep talk mode fixture JSON valid
* Feishu: rely on client timeout injection
* Secrets: allowlist provider auth test fixtures
* Secrets: allowlist onboard search fixtures
* Secrets: allowlist onboard mode fixture
* Secrets: allowlist gateway auth mode fixture
* Secrets: allowlist APNS wake test key
* Secrets: allowlist gateway reload fixtures
* Secrets: allowlist moonshot video fixture
* Secrets: allowlist auto audio fixture
* Secrets: allowlist tiny audio fixture
* Secrets: allowlist embeddings fixtures
* Secrets: allowlist resolve fixtures
* Secrets: allowlist target registry pattern fixtures
* Secrets: allowlist gateway chat env fixture
* Secrets: refresh baseline after fixture allowlists
* Secrets: reapply gateway chat env allowlist
* Secrets: reapply gateway chat env allowlist
* Secrets: stabilize gateway chat env allowlist
* Secrets: allowlist runtime snapshot save fixture
* Secrets: allowlist oauth profile fixtures
* Secrets: allowlist compaction identifier fixture
* Secrets: allowlist model auth fixture
* Secrets: allowlist model status fixtures
* Secrets: allowlist custom onboarding fixture
* Secrets: allowlist mattermost token summary fixtures
* Secrets: allowlist gateway auth suite fixtures
* Secrets: allowlist channel summary fixture
* Secrets: allowlist provider usage auth fixtures
* Secrets: allowlist media proxy fixture
* Secrets: allowlist secrets audit fixtures
* Secrets: refresh baseline after final fixture allowlists
* Feishu: prefer explicit client timeout
* Feishu: test direct timeout precedence
|
2026-03-06 19:35:26 -05:00 |
|
Josh Avant
|
72cf9253fc
|
Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)
|
2026-03-05 12:53:56 -06:00 |
|