samzong 31145e0dd9 [Fix] Preflight runtime SecretRefs before config writes (#84454) ...

* fix(config): preflight runtime secret refs before writes

* fix(config): restore include rollback env

* docs(changelog): note SecretRef config preflight

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-05-24 03:40:15 +01:00

..

apply.test.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

apply.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

audit.test.ts

Warn on plaintext secret config in doctor (#84718)

2026-05-21 01:27:34 +00:00

audit.ts

Warn on plaintext secret config in doctor (#84718)

2026-05-21 01:27:34 +00:00

auth-profiles-scan.ts

…

auth-store-paths.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

channel-contract-api.external.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

channel-contract-api.fast-path.test.ts

test: tighten secrets configure assertions

2026-05-09 23:59:29 +01:00

channel-contract-api.ts

fix: allow Nix store plugin hardlinks (#79344)

2026-05-08 16:59:53 +02:00

channel-contract-surface-guardrails.test.ts

…

channel-env-var-names.ts

…

channel-env-vars.dynamic.test.ts

test: tighten secret env var assertions

2026-05-09 22:56:14 +01:00

channel-env-vars.ts

…

channel-secret-basic-runtime.ts

…

channel-secret-collector-runtime.ts

…

channel-secret-tts-runtime.ts

…

command-config.test.ts

test: tighten security empty array assertions

2026-05-09 05:09:12 +01:00

command-config.ts

…

config-io.ts

…

configure-plan.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

configure-plan.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

configure.test.ts

…

configure.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

credential-matrix.ts

fix(cli): resolve web command SecretRefs

2026-05-17 03:00:39 +01:00

exec-resolution-policy.ts

…

exec-secret-ref-id-parity.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

json-pointer.ts

…

legacy-secretref-env-marker.ts

…

model-provider-header-policy.ts

Warn on plaintext secret config in doctor (#84718)

2026-05-21 01:27:34 +00:00

path-utils.test.ts

…

path-utils.ts

…

plan.test.ts

test: tighten core helper assertions

2026-05-08 20:41:57 +01:00

plan.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

provider-env-vars.dynamic.test.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

provider-env-vars.test.ts

test: tighten secret env var assertions

2026-05-09 22:56:14 +01:00

provider-env-vars.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

ref-contract.test.ts

…

ref-contract.ts

…

resolve-secret-input-string.ts

…

resolve-types.ts

…

resolve.test.ts

test: share Windows platform spy helpers

2026-05-17 08:56:56 +08:00

resolve.ts

…

runtime-auth-collectors.ts

…

runtime-auth-profiles-oauth-policy.test.ts

test: tighten secret registry assertions

2026-05-09 23:02:14 +01:00

runtime-auth-refresh-failure.test.ts

test: require active secrets snapshot

2026-05-08 17:42:21 +01:00

runtime-auth-store-inline-refs.test.ts

…

runtime-auth.integration.test-helpers.ts

…

runtime-channel-inactive-variants.test-support.ts

…

runtime-channel-inactive-variants.test.ts

test: tighten inactive channel warning assertions

2026-05-09 23:16:21 +01:00

runtime-command-secrets.test.ts

fix(cli): preserve optional web fallback secrets

2026-05-17 10:42:57 +01:00

runtime-command-secrets.ts

fix(gateway): speed up secrets startup

2026-05-17 10:55:41 +01:00

runtime-config-collectors-channels.test.ts

test: guard secrets channel collector calls

2026-05-11 22:32:29 +01:00

runtime-config-collectors-channels.ts

…

runtime-config-collectors-core.ts

…

runtime-config-collectors-plugins.bundled.test.ts

…

runtime-config-collectors-plugins.test.ts

test: tighten core capture assertions

2026-05-08 20:44:46 +01:00

runtime-config-collectors-plugins.ts

…

runtime-config-collectors-tts.ts

…

runtime-config-collectors.ts

…

runtime-core-snapshots.test.ts

test: tighten secrets snapshot assertions

2026-05-10 00:23:29 +01:00

runtime-discord-surface.test.ts

fix(discord): report unresolved token refs at startup (#82009)

2026-05-15 08:22:47 +01:00

runtime-discord.test-support.ts

…

runtime-external-channel-audit.test.ts

test: tighten secret audit status assertions

2026-05-09 23:08:01 +01:00

runtime-external-channel-origin-discovery.test.ts

test: guard secrets channel collector calls

2026-05-11 22:32:29 +01:00

runtime-fast-path.ts

fix: keep config writes independent of auth profile refs

2026-05-18 13:34:49 +01:00

runtime-gateway-auth-surfaces.test.ts

test: tighten gateway auth surface assertions

2026-05-09 22:58:55 +01:00

runtime-gateway-auth-surfaces.ts

…

runtime-gateway-local-surfaces.test.ts

test: tighten secrets warning assertions

2026-05-09 13:16:49 +01:00

runtime-inactive-core-surfaces.test.ts

test: tighten secrets warning assertions

2026-05-09 13:16:49 +01:00

runtime-inactive-telegram-surfaces.test.ts

test: tighten secrets warning assertions

2026-05-09 13:16:49 +01:00

runtime-legacy-x-search.test.ts

…

runtime-manifest.runtime.ts

…

runtime-matrix-shadowing.test.ts

test: tighten matrix shadowing assertions

2026-05-09 23:19:20 +01:00

runtime-matrix-top-level.test.ts

…

runtime-matrix.test-support.ts

…

runtime-nextcloud-talk-file-precedence.test.ts

…

runtime-nextcloud-talk.test-support.ts

…

runtime-openai-file-fixture.test-helper.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

runtime-prepare.runtime.ts

…

runtime-provider-and-media-surfaces.test.ts

…

runtime-request-secret-refs.test.ts

[Fix] Preflight runtime SecretRefs before config writes (#84454)

2026-05-24 03:40:15 +01:00

runtime-shared.ts

…

runtime-state.test.ts

fix(gateway): speed up secrets startup

2026-05-17 10:55:41 +01:00

runtime-state.ts

fix: keep config writes independent of auth profile refs

2026-05-18 13:34:49 +01:00

runtime-telegram-token-inheritance.test.ts

…

runtime-telegram.test-support.ts

…

runtime-web-tools-fallback.runtime.ts

…

runtime-web-tools-manifest.runtime.ts

…

runtime-web-tools-public-artifacts.runtime.ts

…

runtime-web-tools-state.test.ts

test: tighten runtime web tools assertions

2026-05-08 19:40:30 +01:00

runtime-web-tools-state.ts

…

runtime-web-tools.shared.ts

fix(cli): scope web command secret refs

2026-05-17 10:42:57 +01:00

runtime-web-tools.test.ts

fix(cli): scope web command secret refs

2026-05-17 10:42:57 +01:00

runtime-web-tools.ts

fix(cli): scope web command secret refs

2026-05-17 10:42:57 +01:00

runtime-web-tools.types.ts

…

runtime-zalo-token-activity.test.ts

test: tighten core capture assertions

2026-05-08 20:44:46 +01:00

runtime-zalo.test-support.ts

…

runtime.auth.integration.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

runtime.coverage.test.ts

test: keep slow tests under duration cap

2026-05-18 00:26:44 +01:00

runtime.fast-path.test.ts

fix(gateway): speed up secrets startup

2026-05-17 10:55:41 +01:00

runtime.gateway-auth.integration.test.ts

[Fix] Preflight runtime SecretRefs before config writes (#84454)

2026-05-24 03:40:15 +01:00

runtime.integration.test-helpers.ts

…

runtime.loadable-plugin-origins.test.ts

test: tighten runtime plugin origin assertions

2026-05-10 00:02:18 +01:00

runtime.test-support.ts

…

runtime.test.ts

test: guard config diagnostics assertions

2026-05-11 20:02:10 +01:00

runtime.ts

[Fix] Preflight runtime SecretRefs before config writes (#84454)

2026-05-24 03:40:15 +01:00

secret-value.ts

…

shared.ts

…

storage-scan.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

target-registry-data.current-snapshot.test.ts

perf: reuse plugin metadata snapshots (#85843)

2026-05-23 23:34:19 +01:00

target-registry-data.ts

perf: reuse plugin metadata snapshots (#85843)

2026-05-23 23:34:19 +01:00

target-registry-pattern.test.ts

…

target-registry-pattern.ts

…

target-registry-query.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

target-registry-test-helpers.ts

…

target-registry-types.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

target-registry.docs.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

target-registry.fast-path.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

target-registry.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

target-registry.ts

…

unsupported-surface-policy.test.ts

…

unsupported-surface-policy.ts

…