Josh Avant 36d2ae2a22 SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 23:55:10 +00:00

..

account-resolve.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

accounts.test.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

accounts.ts

refactor: unify account list/default scaffolding

2026-03-07 20:33:50 +00:00

actions.test.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

actions.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

attachments.test.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

attachments.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

channel.ts

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

chat.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

chat.ts

refactor(extensions): reuse shared helper primitives

2026-03-07 10:41:05 +00:00

config-apply.ts

refactor(extensions): reuse shared helper primitives

2026-03-07 10:41:05 +00:00

config-schema.test.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

config-schema.ts

refactor: share channel config schema fragments

2026-03-10 22:18:04 +00:00

history.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

media-send.test.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

media-send.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

monitor-debounce.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

monitor-normalize.test.ts

BlueBubbles: accept webhook payloads with missing handles

2026-02-21 22:10:30 -08:00

monitor-normalize.ts

fix(plugin-sdk): remove remaining bundled plugin src imports (openclaw#39638)

2026-03-08 22:32:45 -05:00

monitor-processing.ts

refactor: share allowFrom stringification helpers

2026-03-07 23:27:51 +00:00

monitor-reply-cache.ts

refactor(bluebubbles): split monitor parsing and processing modules

2026-02-13 19:08:37 +00:00

monitor-shared.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

monitor.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

monitor.ts

refactor: unify extension webhook request lifecycle scaffolding

2026-03-07 23:27:51 +00:00

monitor.webhook-auth.test.ts

refactor: dedupe bluebubbles webhook auth test setup

2026-03-07 19:02:01 +00:00

monitor.webhook-route.test.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

multipart.ts

fix(bluebubbles): use Buffer for multipart body

2026-02-15 19:25:11 +00:00

onboarding.secret-input.test.ts

refactor: share onboarding account id resolution prelude

2026-03-07 21:09:26 +00:00

onboarding.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

probe.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

reactions.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

reactions.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

request-url.ts

refactor(extensions): reuse shared helper primitives

2026-03-07 10:41:05 +00:00

runtime.ts

refactor: harden browser runtime profile handling

2026-03-09 00:25:43 +00:00

secret-input.ts

refactor(extensions): share secret input schema builder

2026-03-07 17:05:23 +00:00

send-helpers.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

send.test.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

send.ts

refactor(extensions): reuse shared helper primitives

2026-03-07 10:41:05 +00:00

targets.test.ts

refactor(security): make empty allowlist behavior explicit

2026-02-21 19:54:59 +01:00

targets.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

test-harness.ts

fix: resolve extension type errors and harden probe mocks

2026-02-22 12:25:58 +01:00

test-mocks.ts

refactor(extensions): dedupe connector helper usage

2026-02-16 14:59:30 +00:00

types.ts

Plugins/bluebubbles: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00