zhang-guiping c1f423f845 fix(secrets): harden Windows ACL fallback and strip BOM (#70662) ...

Fail closed when Windows ACL checks cannot be verified for file and exec secret providers unless the provider explicitly opts into allowInsecurePath. Strip UTF-8 BOMs from file-backed secrets and document the trusted-path override.\n\nThanks @zhanggpcsu.

2026-04-23 19:32:15 +01:00

..

apply.test.ts

test: share secrets exec resolver fixtures

2026-04-20 22:17:34 +01:00

apply.ts

…

audit.test.ts

…

audit.ts

…

auth-profiles-scan.ts

…

auth-store-paths.ts

…

channel-contract-api.fast-path.test.ts

perf: narrow plugin config test surfaces

2026-04-11 13:55:08 +01:00

channel-contract-api.ts

…

channel-contract-surface-guardrails.test.ts

refactor: generalize command sender identity checks

2026-04-22 06:11:49 +01:00

channel-env-var-names.ts

fix(cli): keep channel status checks off plugin runtimes (#69479)

2026-04-21 13:53:08 -04:00

channel-env-vars.dynamic.test.ts

…

channel-env-vars.ts

fix(cli): keep channel status checks off plugin runtimes (#69479)

2026-04-21 13:53:08 -04:00

channel-secret-basic-runtime.ts

…

channel-secret-collector-runtime.ts

…

channel-secret-tts-runtime.ts

…

command-config.test.ts

…

command-config.ts

…

config-io.ts

…

configure-plan.test.ts

…

configure-plan.ts

refactor(lint): reduce map spread patterns

2026-04-18 19:27:43 +01:00

configure.test.ts

…

configure.ts

fix(secrets): harden Windows ACL fallback and strip BOM (#70662)

2026-04-23 19:32:15 +01:00

credential-matrix.ts

refactor(lint): reduce map spread patterns

2026-04-18 19:27:43 +01:00

exec-resolution-policy.ts

…

exec-secret-ref-id-parity.test.ts

…

json-pointer.ts

…

path-utils.test.ts

…

path-utils.ts

…

plan.test.ts

…

plan.ts

perf: narrow plugin config test surfaces

2026-04-11 13:55:08 +01:00

provider-env-vars.dynamic.test.ts

test: reduce module reload churn

2026-04-20 20:28:47 +01:00

provider-env-vars.test.ts

…

provider-env-vars.ts

fix(cli): keep channel status checks off plugin runtimes (#69479)

2026-04-21 13:53:08 -04:00

ref-contract.test.ts

…

ref-contract.ts

…

resolve-secret-input-string.ts

…

resolve-types.ts

…

resolve.test.ts

fix(secrets): harden Windows ACL fallback and strip BOM (#70662)

2026-04-23 19:32:15 +01:00

resolve.ts

fix(secrets): harden Windows ACL fallback and strip BOM (#70662)

2026-04-23 19:32:15 +01:00

runtime-auth-collectors.ts

…

runtime-auth-profiles-oauth-policy.test.ts

test(secrets): reuse auth runtime fixtures

2026-04-12 03:54:26 +01:00

runtime-auth-refresh-failure.test.ts

…

runtime-auth-store-inline-refs.test.ts

test(secrets): reuse auth runtime fixtures

2026-04-12 03:54:26 +01:00

runtime-auth.integration.test-helpers.ts

test: share secrets runtime file fixture

2026-04-20 22:28:49 +01:00

runtime-channel-inactive-variants.test-support.ts

fix(secrets): narrow inactive variant test helper types

2026-04-12 04:11:11 +01:00

runtime-channel-inactive-variants.test.ts

test(secrets): share inactive channel fixtures

2026-04-12 04:03:57 +01:00

runtime-command-secrets.ts

…

runtime-config-collectors-channels.test.ts

…

runtime-config-collectors-channels.ts

…

runtime-config-collectors-core.ts

fix(media): decouple capability registry from runtime loaders

2026-04-12 12:01:39 +01:00

runtime-config-collectors-plugins.test.ts

test: share plugin secret collector setup

2026-04-20 22:28:49 +01:00

runtime-config-collectors-plugins.ts

perf: narrow plugin config test surfaces

2026-04-11 13:55:08 +01:00

runtime-config-collectors-tts.ts

…

runtime-config-collectors.ts

…

runtime-core-snapshots.test.ts

fix(tsgo): align cron contract and secrets test helper

2026-04-12 03:58:32 +01:00

runtime-discord-surface.test.ts

test(secrets): share channel snapshot fixtures

2026-04-12 03:59:11 +01:00

runtime-discord.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-gateway-auth-surfaces.test.ts

…

runtime-gateway-auth-surfaces.ts

…

runtime-gateway-local-surfaces.test.ts

test: share gateway password inactive assertion

2026-04-20 22:21:34 +01:00

runtime-inactive-core-surfaces.test.ts

test(secrets): reuse inactive snapshot fixtures

2026-04-12 03:56:37 +01:00

runtime-inactive-telegram-surfaces.test.ts

test(secrets): share channel snapshot fixtures

2026-04-12 03:59:11 +01:00

runtime-legacy-x-search.test.ts

test(secrets): reuse snapshot hooks in web state tests

2026-04-12 04:27:34 +01:00

runtime-manifest.runtime.ts

…

runtime-matrix-shadowing.test.ts

test(secrets): share runtime snapshot fixtures

2026-04-12 03:37:08 +01:00

runtime-matrix-top-level.test.ts

test(secrets): share runtime snapshot fixtures

2026-04-12 03:37:08 +01:00

runtime-matrix.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-nextcloud-talk-file-precedence.test.ts

test(secrets): reuse channel token fixtures

2026-04-12 04:01:20 +01:00

runtime-nextcloud-talk.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-openai-file-fixture.test-helper.ts

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

runtime-prepare.runtime.ts

…

runtime-provider-and-media-surfaces.test.ts

test: share media auth snapshot setup

2026-04-20 22:28:49 +01:00

runtime-request-secret-refs.test.ts

test(secrets): share runtime snapshot fixtures

2026-04-12 03:37:08 +01:00

runtime-shared.ts

…

runtime-telegram-token-inheritance.test.ts

test(secrets): reuse channel token fixtures

2026-04-12 04:01:20 +01:00

runtime-telegram.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-web-tools-fallback.runtime.ts

…

runtime-web-tools-manifest.runtime.ts

perf(secrets): lazy-load runtime web-tools manifest lookups

2026-04-12 09:35:40 +01:00

runtime-web-tools-public-artifacts.runtime.ts

…

runtime-web-tools-state.test.ts

test: trim duplicate runtime smoke work

2026-04-23 11:28:26 +01:00

runtime-web-tools-state.ts

…

runtime-web-tools.shared.ts

refactor: keep legacy web search config in doctor

2026-04-22 06:11:49 +01:00

runtime-web-tools.test.ts

refactor: keep legacy web search config in doctor

2026-04-22 06:11:49 +01:00

runtime-web-tools.ts

refactor: keep legacy web search config in doctor

2026-04-22 06:11:49 +01:00

runtime-web-tools.types.ts

…

runtime-zalo-token-activity.test.ts

test(secrets): reuse channel token fixtures

2026-04-12 04:01:20 +01:00

runtime-zalo.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime.auth.integration.test.ts

…

runtime.coverage.test.ts

refactor: keep legacy web search config in doctor

2026-04-22 06:11:49 +01:00

runtime.fast-path.test.ts

perf(gateway): fast path startup secrets

2026-04-20 21:30:06 +01:00

runtime.gateway-auth.integration.test.ts

…

runtime.integration.test-helpers.ts

test: share secrets runtime file fixture

2026-04-20 22:28:49 +01:00

runtime.loadable-plugin-origins.test.ts

test(secrets): reuse inactive snapshot fixtures

2026-04-12 03:56:37 +01:00

runtime.test-support.ts

fix(ci): restore extension boundary guards

2026-04-12 09:50:20 +01:00

runtime.test.ts

test(secrets): reuse auth runtime fixtures

2026-04-12 03:54:26 +01:00

runtime.ts

perf(gateway): fast path startup secrets

2026-04-20 21:30:06 +01:00

secret-value.ts

…

shared.ts

…

storage-scan.ts

…

target-registry-data.ts

refactor: derive web credential secret targets from manifests

2026-04-22 06:11:49 +01:00

target-registry-pattern.test.ts

…

target-registry-pattern.ts

…

target-registry-query.ts

refactor(lint): reduce map spread patterns

2026-04-18 19:27:43 +01:00

target-registry-test-helpers.ts

…

target-registry-types.ts

…

target-registry.docs.test.ts

perf(tests): trim hot wizard and infra setup work

2026-04-14 22:42:32 +01:00

target-registry.fast-path.test.ts

perf(secrets): fast-path explicit channel target lookup

2026-04-13 15:49:23 +01:00

target-registry.test.ts

refactor: derive web credential secret targets from manifests

2026-04-22 06:11:49 +01:00

target-registry.ts

…

unsupported-surface-policy.test.ts

perf(config): use generated SecretRef policy metadata

2026-04-13 20:19:04 +01:00

unsupported-surface-policy.ts

perf(config): use generated SecretRef policy metadata

2026-04-13 20:19:04 +01:00