2 Commits

Author	SHA1	Message	Date
Josh Avant	36d2ae2a22	SecretRef: harden custom/provider secret persistence and reuse (#42554) ... * Models: gate custom provider keys by usable secret semantics * Config: project runtime writes onto source snapshot * Models: prevent stale apiKey preservation for marker-managed providers * Runner: strip SecretRef marker headers from resolved models * Secrets: scan active agent models.json path in audit * Config: guard runtime-source projection for unrelated configs * Extensions: fix onboarding type errors in CI * Tests: align setup helper account-enabled expectation * Secrets audit: harden models.json file reads * fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)	2026-03-10 23:55:10 +00:00
Josh Avant	1c200ca7ae	follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733) ... Merged via squash. Prepared head SHA: c290c2ab6a3c3309adcbc4dc834f3c10d2ae1039 Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com> Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com> Reviewed-by: @joshavant	2026-03-03 20:29:46 -06:00