Vincent Koc fbd88e2c8f Main recovery: restore formatter and contract checks (#49570) ...

* Extensions: fix oxfmt drift on main

* Plugins: restore runtime barrel exports on main

* Config: restore web search compatibility types

* Telegram: align test harness with reply runtime

* Plugin SDK: fix channel config accessor generics

* CLI: remove redundant search provider casts

* Tests: restore main typecheck coverage

* Lobster: fix test import formatting

* Extensions: route bundled seams through plugin-sdk

* Tests: use extension env helper for xai

* Image generation: fix main oxfmt drift

* Config: restore latest main compatibility checks

* Plugin SDK: align guardrail tests with lint

* Telegram: type native command skill mock

2026-03-18 00:30:01 -07:00

..

apply.test.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

apply.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

audit.test.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

audit.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

auth-profiles-scan.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

auth-store-paths.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

command-config.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

command-config.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

config-io.ts

feat(secrets): replace migrate flow with audit/configure/apply

2026-02-26 14:47:22 +00:00

configure-plan.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

configure-plan.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

configure.test.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

configure.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

credential-matrix.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

exec-resolution-policy.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

exec-secret-ref-id-parity.test.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

json-pointer.ts

Secrets: preserve runtime snapshot source refs on write

2026-02-26 14:47:22 +00:00

path-utils.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

path-utils.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

plan.test.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

plan.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

provider-env-vars.test.ts

refactor(core): land plugin auth and startup cleanup

2026-03-15 20:12:37 -07:00

provider-env-vars.ts

refactor(plugins): move onboarding auth metadata to manifests

2026-03-15 23:47:16 -07:00

ref-contract.test.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

ref-contract.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

resolve-secret-input-string.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

resolve.test.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

resolve.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

runtime-auth-collectors.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

runtime-config-collectors-channels.ts

Security: require Feishu webhook encrypt key (#44087)

2026-03-12 11:01:00 -04:00

runtime-config-collectors-core.ts

feat: move ssh sandboxing into core

2026-03-15 21:35:30 -07:00

runtime-config-collectors-tts.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

runtime-config-collectors.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

runtime-gateway-auth-surfaces.test.ts

Gateway: fail closed unresolved local auth SecretRefs (#42672)

2026-03-10 21:41:56 -05:00

runtime-gateway-auth-surfaces.ts

Gateway: fail closed unresolved local auth SecretRefs (#42672)

2026-03-10 21:41:56 -05:00

runtime-shared.ts

fix(secrets): resolve web tool SecretRefs atomically at runtime

2026-03-09 22:57:03 -05:00

runtime-web-tools.test.ts

Main recovery: restore formatter and contract checks (#49570)

2026-03-18 00:30:01 -07:00

runtime-web-tools.ts

refactor web search config ownership into extensions

2026-03-17 23:39:51 -05:00

runtime-web-tools.types.ts

feat(web-search): add plugin-backed search providers

2026-03-16 01:07:44 +00:00

runtime.coverage.test.ts

Security: require Feishu webhook encrypt key (#44087)

2026-03-12 11:01:00 -04:00

runtime.test.ts

test: expand ssh sandbox coverage and docs

2026-03-15 21:38:22 -07:00

runtime.ts

Secrets: honor caller env during runtime validation

2026-03-16 12:31:44 +00:00

secret-value.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

shared.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

storage-scan.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

target-registry-data.ts

refactor web search config ownership into extensions

2026-03-17 23:39:51 -05:00

target-registry-pattern.test.ts

Secrets: harden SecretRef-safe models.json persistence (#38955)

2026-03-07 11:28:39 -06:00

target-registry-pattern.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

target-registry-query.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

target-registry-types.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

target-registry.test.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

target-registry.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00