Josh Avant fbc66324ee SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 18:46:47 -05:00

..

acp

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

agents

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

auto-reply

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

browser

fix(browser): surface 429 rate limit errors with actionable hints (#40491)

2026-03-11 00:49:31 +03:00

canvas-host

…

channels

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

cli

test: deduplicate cli option collision fixtures

2026-03-10 20:34:54 +00:00

commands

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

compat

…

config

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

context-engine

test(context-engine): add bundle chunk isolation tests for registry (#40460)

2026-03-09 08:15:35 -07:00

cron

mattermost: fix DM media upload for unprefixed user IDs (#29925)

2026-03-10 14:22:24 +05:30

daemon

fix: stabilize launchd paths and appcast secret scan

2026-03-09 08:37:37 +00:00

discord

test: share runtime group policy fallback cases

2026-03-10 22:20:19 +00:00

docs

…

gateway

refactor: share approval gateway client setup

2026-03-10 22:18:04 +00:00

hooks

fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875)

2026-03-08 19:07:28 +03:00

i18n

…

imessage

test: share runtime group policy fallback cases

2026-03-10 22:20:19 +00:00

infra

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

line

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

link-understanding

…

logging

Logging: harden probe suppression for observations (#41338)

2026-03-10 01:40:15 +03:00

markdown

…

media

fix(media): accept reader read result type

2026-03-09 03:49:50 +00:00

media-understanding

fix: add gemini 3.1 flash-lite support

2026-03-08 05:12:48 +00:00

memory

Fix one-shot exit hangs by tearing down cached memory managers (#40389)

2026-03-10 07:34:46 +08:00

node-host

ui: fix sessions table collapse on narrow widths (#12175)

2026-03-09 23:14:07 -05:00

pairing

refactor(pairing): share allowFrom path resolution

2026-03-08 02:16:03 +00:00

plugin-sdk

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

plugins

fix(plugins): expose model auth API to context-engine plugins (#41090)

2026-03-09 16:07:26 -07:00

process

refactor: share windows command shim resolution

2026-03-10 22:18:04 +00:00

providers

build: update app deps except carbon

2026-03-09 06:09:33 +00:00

routing

…

scripts

…

secrets

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 18:46:47 -05:00

security

fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983)

2026-03-10 13:54:23 +08:00

sessions

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

shared

…

signal

…

slack

test: share runtime group policy fallback cases

2026-03-10 22:20:19 +00:00

telegram

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

terminal

…

test-helpers

…

test-utils

test: share runtime group policy fallback cases

2026-03-10 22:20:19 +00:00

tts

fix: align pi-ai 0.57.1 oauth imports and payload hooks

2026-03-10 20:29:03 +05:30

tui

fix(tui): improve color contrast for light-background terminals (#40345)

2026-03-08 16:17:28 -07:00

types

…

utils

…

web

test: share runtime group policy fallback cases

2026-03-10 22:20:19 +00:00

whatsapp

…

wizard

fix(onboard): avoid persisting talk fallback on fresh setup

2026-03-09 08:33:58 +00:00

channel-web.ts

…

docker-build-cache.test.ts

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

docker-image-digests.test.ts

fix(ci): pin multi-arch docker base digests

2026-03-08 02:55:15 +00:00

docker-setup.e2e.test.ts

Docker: trim runtime image payload (#40307)

2026-03-08 16:07:04 -07:00

dockerfile.test.ts

Docker: trim runtime image payload (#40307)

2026-03-08 16:07:04 -07:00

entry.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

entry.version-fast-path.test.ts

CLI: include commit hash in --version output (#39712)

2026-03-08 19:10:48 +03:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

install-sh-version.test.ts

build: bump unreleased version to 2026.3.9

2026-03-09 08:33:58 +00:00

logger.test.ts

…

logger.ts

…

logging.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…