Peter Steinberger 538605ff44 [codex] Extract filesystem safety primitives (#77918) ...

* refactor: extract filesystem safety primitives

* refactor: use fs-safe for file access helpers

* refactor: reuse fs-safe for media reads

* refactor: use fs-safe for image reads

* refactor: reuse fs-safe in qqbot media opener

* refactor: reuse fs-safe for local media checks

* refactor: consume cleaner fs-safe api

* refactor: align fs-safe json option names

* fix: preserve fs-safe migration contracts

* refactor: use fs-safe primitive subpaths

* refactor: use grouped fs-safe subpaths

* refactor: align fs-safe api usage

* refactor: adapt private state store api

* chore: refresh proof gate

* refactor: follow fs-safe json api split

* refactor: follow reduced fs-safe surface

* build: default fs-safe python helper off

* fix: preserve fs-safe plugin sdk aliases

* refactor: consolidate fs-safe usage

* refactor: unify fs-safe store usage

* refactor: trim fs-safe temp workspace usage

* refactor: hide low-level fs-safe primitives

* build: use published fs-safe package

* fix: preserve outbound recovery durability after rebase

* chore: refresh pr checks

2026-05-06 02:15:17 +01:00

..

apply.test.ts

fix(secrets): preserve auth profile key refs during provider scrub (#77489)

2026-05-04 19:50:39 -05:00

apply.ts

fix(secrets): preserve auth profile key refs during provider scrub (#77489)

2026-05-04 19:50:39 -05:00

audit.test.ts

…

audit.ts

refactor: dedupe lowercase helper readers

2026-04-07 15:12:32 +01:00

auth-profiles-scan.ts

refactor: simplify runtime conversions

2026-04-11 01:23:34 +01:00

auth-store-paths.ts

refactor: remove dead private helpers

2026-05-01 06:55:26 +01:00

channel-contract-api.external.test.ts

fix(secretrefs): resolve external channel contracts in dist/ sidecars (#77421)

2026-05-04 16:57:28 -05:00

channel-contract-api.fast-path.test.ts

refactor: remove bundled public surface runtime shim

2026-05-01 21:49:18 +01:00

channel-contract-api.ts

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

channel-contract-surface-guardrails.test.ts

refactor: generalize command sender identity checks

2026-04-22 06:11:49 +01:00

channel-env-var-names.ts

fix(cli): keep channel status checks off plugin runtimes (#69479)

2026-04-21 13:53:08 -04:00

channel-env-vars.dynamic.test.ts

refactor: route plugin metadata consumers through snapshots

2026-05-02 08:18:52 +01:00

channel-env-vars.ts

refactor: route plugin metadata consumers through snapshots

2026-05-02 08:18:52 +01:00

channel-secret-basic-runtime.ts

perf(plugin-sdk): split channel secret runtime helpers

2026-04-07 13:09:12 +01:00

channel-secret-collector-runtime.ts

perf(plugin-sdk): split channel secret runtime helpers

2026-04-07 13:09:12 +01:00

channel-secret-tts-runtime.ts

perf(plugin-sdk): split channel secret runtime helpers

2026-04-07 13:09:12 +01:00

command-config.test.ts

…

command-config.ts

fix(cycles): reduce remaining static import seams

2026-04-11 02:46:41 +01:00

config-io.ts

…

configure-plan.test.ts

…

configure-plan.ts

refactor(lint): reduce map spread patterns

2026-04-18 19:27:43 +01:00

configure.test.ts

refactor(auth): extract persisted auth store helpers

2026-04-06 14:25:06 +01:00

configure.ts

fix(secrets): harden Windows ACL fallback and strip BOM (#70662)

2026-04-23 19:32:15 +01:00

credential-matrix.ts

fix(secrets): stabilize credential matrix docs

2026-05-03 12:25:08 +01:00

exec-resolution-policy.ts

fix(cycles): reduce remaining static import seams

2026-04-11 02:46:41 +01:00

exec-secret-ref-id-parity.test.ts

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

json-pointer.ts

refactor: hide utility helper internals

2026-05-02 07:33:06 +01:00

legacy-secretref-env-marker.ts

refactor: keep legacy secretref migration in doctor

2026-05-03 13:10:00 +01:00

path-utils.test.ts

…

path-utils.ts

…

plan.test.ts

…

plan.ts

perf: narrow plugin config test surfaces

2026-04-11 13:55:08 +01:00

provider-env-vars.dynamic.test.ts

refactor: unify plugin metadata snapshot callers

2026-05-02 07:51:17 +01:00

provider-env-vars.test.ts

…

provider-env-vars.ts

fix: tolerate sparse plugin metadata snapshots

2026-05-02 08:19:40 +01:00

ref-contract.test.ts

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

ref-contract.ts

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

resolve-secret-input-string.ts

fix(cycles): reduce remaining static import seams

2026-04-11 02:46:41 +01:00

resolve-types.ts

refactor: remove type-only import cycles

2026-04-10 15:14:27 +01:00

resolve.test.ts

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

resolve.ts

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

runtime-auth-collectors.ts

fix(cycles): bulk extract leaf type surfaces

2026-04-11 13:26:50 +01:00

runtime-auth-profiles-oauth-policy.test.ts

test(secrets): reuse auth runtime fixtures

2026-04-12 03:54:26 +01:00

runtime-auth-refresh-failure.test.ts

perf(secrets): split runtime snapshot coverage

2026-04-06 08:18:40 +01:00

runtime-auth-store-inline-refs.test.ts

test(secrets): reuse auth runtime fixtures

2026-04-12 03:54:26 +01:00

runtime-auth.integration.test-helpers.ts

refactor(plugins): simplify plugin cache boundaries

2026-04-29 03:52:22 +01:00

runtime-channel-inactive-variants.test-support.ts

fix(secrets): narrow inactive variant test helper types

2026-04-12 04:11:11 +01:00

runtime-channel-inactive-variants.test.ts

test(secrets): share inactive channel fixtures

2026-04-12 04:03:57 +01:00

runtime-command-secrets.ts

…

runtime-config-collectors-channels.test.ts

fix(secretrefs): resolve external channel contracts (#76449)

2026-05-02 23:48:11 -05:00

runtime-config-collectors-channels.ts

fix(secretrefs): resolve external channel contracts (#76449)

2026-05-02 23:48:11 -05:00

runtime-config-collectors-core.ts

feat(tts): add per-agent voice overrides

2026-04-26 02:54:13 +01:00

runtime-config-collectors-plugins.bundled.test.ts

perf: speed up bundled metadata test paths

2026-05-02 01:22:52 +01:00

runtime-config-collectors-plugins.test.ts

test: optimize slow tests

2026-04-27 17:42:22 +00:00

runtime-config-collectors-plugins.ts

refactor: simplify plugin cache boundaries

2026-04-29 04:33:15 +01:00

runtime-config-collectors-tts.ts

…

runtime-config-collectors.ts

fix(secretrefs): resolve external channel contracts (#76449)

2026-05-02 23:48:11 -05:00

runtime-core-snapshots.test.ts

refactor(plugins): simplify plugin cache boundaries

2026-04-29 03:52:22 +01:00

runtime-discord-surface.test.ts

test(secrets): share channel snapshot fixtures

2026-04-12 03:59:11 +01:00

runtime-discord.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-external-channel-audit.test.ts

test(secrets): audit external channel SecretRefs (#76589)

2026-05-03 02:17:41 -07:00

runtime-external-channel-origin-discovery.test.ts

fix(secretrefs): resolve external channel contracts (#76449)

2026-05-02 23:48:11 -05:00

runtime-gateway-auth-surfaces.test.ts

test: cover trusted-proxy secret surfaces

2026-04-27 23:10:22 +01:00

runtime-gateway-auth-surfaces.ts

fix(cycles): reduce remaining static import seams

2026-04-11 02:46:41 +01:00

runtime-gateway-local-surfaces.test.ts

test: cover trusted-proxy secret surfaces

2026-04-27 23:10:22 +01:00

runtime-inactive-core-surfaces.test.ts

test(secrets): reuse inactive snapshot fixtures

2026-04-12 03:56:37 +01:00

runtime-inactive-telegram-surfaces.test.ts

test(secrets): share channel snapshot fixtures

2026-04-12 03:59:11 +01:00

runtime-legacy-x-search.test.ts

test(secrets): reuse snapshot hooks in web state tests

2026-04-12 04:27:34 +01:00

runtime-manifest.runtime.ts

refactor: reuse plugin metadata snapshots

2026-05-02 07:13:17 +01:00

runtime-matrix-shadowing.test.ts

test(secrets): share runtime snapshot fixtures

2026-04-12 03:37:08 +01:00

runtime-matrix-top-level.test.ts

test(secrets): share runtime snapshot fixtures

2026-04-12 03:37:08 +01:00

runtime-matrix.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-nextcloud-talk-file-precedence.test.ts

test(secrets): reuse channel token fixtures

2026-04-12 04:01:20 +01:00

runtime-nextcloud-talk.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-openai-file-fixture.test-helper.ts

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

runtime-prepare.runtime.ts

…

runtime-provider-and-media-surfaces.test.ts

test: share media auth snapshot setup

2026-04-20 22:28:49 +01:00

runtime-request-secret-refs.test.ts

test(secrets): share runtime snapshot fixtures

2026-04-12 03:37:08 +01:00

runtime-shared.ts

refactor: remove type-only import cycles

2026-04-10 15:14:27 +01:00

runtime-telegram-token-inheritance.test.ts

test(secrets): reuse channel token fixtures

2026-04-12 04:01:20 +01:00

runtime-telegram.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime-web-tools-fallback.runtime.ts

perf(secrets): lazy-load web provider fallbacks

2026-04-06 23:39:10 +01:00

runtime-web-tools-manifest.runtime.ts

fix: scope web provider ownership to plugin index

2026-04-26 04:39:12 +01:00

runtime-web-tools-public-artifacts.runtime.ts

perf(secrets): split explicit bundled web provider artifacts

2026-04-07 12:14:13 +01:00

runtime-web-tools-state.test.ts

perf: speed up bundled metadata test paths

2026-05-02 01:22:52 +01:00

runtime-web-tools-state.ts

…

runtime-web-tools.shared.ts

refactor: hide utility helper internals

2026-05-02 07:33:06 +01:00

runtime-web-tools.test.ts

fix(gemini): reuse google provider config for web search

2026-05-02 05:15:02 +01:00

runtime-web-tools.ts

fix(gemini): reuse google provider config for web search

2026-05-02 05:15:02 +01:00

runtime-web-tools.types.ts

…

runtime-zalo-token-activity.test.ts

test(secrets): reuse channel token fixtures

2026-04-12 04:01:20 +01:00

runtime-zalo.test-support.ts

fix(secrets): cache guarded channel assignment helpers

2026-04-12 04:17:39 +01:00

runtime.auth.integration.test.ts

perf(runtime): trim config, media, and secrets tests

2026-04-08 01:49:23 +01:00

runtime.coverage.test.ts

test(secrets): trust source plugin contracts in coverage

2026-05-05 15:30:25 -07:00

runtime.fast-path.test.ts

fix(secrets): skip optional web fetch discovery before bind

2026-04-30 14:45:55 +01:00

runtime.gateway-auth.integration.test.ts

refactor(plugins): simplify plugin cache boundaries

2026-04-29 03:52:22 +01:00

runtime.integration.test-helpers.ts

refactor: simplify plugin cache boundaries

2026-04-29 04:33:15 +01:00

runtime.loadable-plugin-origins.test.ts

refactor: reuse plugin metadata snapshots

2026-05-02 07:13:17 +01:00

runtime.test-support.ts

fix(gemini): reuse google provider config for web search

2026-05-02 05:15:02 +01:00

runtime.test.ts

test(secrets): reuse auth runtime fixtures

2026-04-12 03:54:26 +01:00

runtime.ts

refactor: remove legacy agent dir resolver

2026-05-05 20:07:49 +01:00

secret-value.ts

…

shared.ts

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

storage-scan.ts

fix(cycles): reduce remaining static import seams

2026-04-11 02:46:41 +01:00

target-registry-data.ts

fix(secrets): stabilize credential matrix docs

2026-05-03 12:25:08 +01:00

target-registry-pattern.test.ts

…

target-registry-pattern.ts

…

target-registry-query.ts

fix(secretrefs): resolve external channel contracts (#76449)

2026-05-02 23:48:11 -05:00

target-registry-test-helpers.ts

perf(test): lazy-load bundled channel secrets

2026-04-06 16:40:41 +01:00

target-registry-types.ts

…

target-registry.docs.test.ts

test(secrets): trust source plugin contracts in coverage

2026-05-05 15:30:25 -07:00

target-registry.fast-path.test.ts

refactor: remove bundled public surface runtime shim

2026-05-01 21:49:18 +01:00

target-registry.test.ts

Support SecretRef for voice-call credentials and bundled plugin SecretInputs (#72607)

2026-04-27 01:16:50 -05:00

target-registry.ts

…

unsupported-surface-policy.test.ts

perf(config): use generated SecretRef policy metadata

2026-04-13 20:19:04 +01:00

unsupported-surface-policy.ts

perf(config): use generated SecretRef policy metadata

2026-04-13 20:19:04 +01:00