Josh Avant 36d2ae2a22 SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 23:55:10 +00:00

..

accounts.test.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

accounts.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

channel.startup.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

channel.ts

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

config-schema.test.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

config-schema.ts

Plugins/nextcloud-talk: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

format.ts

chore: Lint extensions folder.

2026-01-31 22:42:45 +09:00

inbound.authz.test.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

inbound.ts

refactor: unify DM pairing challenge flows

2026-03-07 20:33:50 +00:00

monitor.auth-order.test.ts

refactor(nextcloud-talk): extract webhook pipeline and shared test harness

2026-02-26 00:23:36 +01:00

monitor.backend.test.ts

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

monitor.read-body.test.ts

refactor(extensions): dedupe connector helper usage

2026-02-16 14:59:30 +00:00

monitor.replay.test.ts

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

monitor.test-fixtures.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

monitor.test-harness.ts

refactor(nextcloud-talk): extract webhook pipeline and shared test harness

2026-02-26 00:23:36 +01:00

monitor.ts

Plugins/nextcloud-talk: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

normalize.ts

chore: Lint extensions folder.

2026-01-31 22:42:45 +09:00

onboarding.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

policy.test.ts

refactor: share matched group policy evaluation

2026-03-08 00:05:24 +00:00

policy.ts

refactor: share matched group policy evaluation

2026-03-08 00:05:24 +00:00

replay-guard.test.ts

fix(security): harden nextcloud-talk webhook replay handling

2026-02-26 00:18:38 +01:00

replay-guard.ts

Plugins/nextcloud-talk: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

room-info.ts

Plugins/nextcloud-talk: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

runtime.ts

refactor: harden browser runtime profile handling

2026-03-09 00:25:43 +00:00

secret-input.ts

refactor(extensions): share secret input schema builder

2026-03-07 17:05:23 +00:00

send.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

send.ts

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

signature.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

types.ts

Plugins/nextcloud-talk: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00