10 Commits

Author	SHA1	Message	Date
Josh Avant	d30dc28b8c	Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370) ... * Secrets: harden exec SecretRef validation and reload LKG coverage * Tests: harden exec fast-exit stdin regression case * Tests: align lifecycle daemon test formatting with oxfmt 0.36	2026-03-10 13:45:37 -05:00
Peter Steinberger	b1c30f0ba9	refactor: dedupe cli config cron and install flows	2026-03-02 19:57:33 +00:00
Peter Steinberger	ac03803d12	fix: align codex model api schema/type coverage (#27501) (thanks @AytuncYildizli)	2026-02-26 18:51:04 +00:00
joshavant	f46b9c996f	feat(secrets): allow opt-in symlink exec command paths	2026-02-26 14:47:22 +00:00
joshavant	06290b49b2	feat(secrets): finalize mode rename and validated exec docs	2026-02-26 14:47:22 +00:00
joshavant	8944b75e16	fix(secrets): align ref contracts and non-interactive ref persistence	2026-02-26 14:47:22 +00:00
joshavant	4e7a833a24	feat(security): add provider-based external secrets management	2026-02-26 14:47:22 +00:00
joshavant	f6a854bd37	Secrets: add migrate rollback and skill ref support	2026-02-26 14:47:22 +00:00
joshavant	d00ed73026	Config: enforce source-specific SecretRef id validation	2026-02-26 14:47:22 +00:00
joshavant	c3a4251a60	Config: add secret ref schema and redaction foundations	2026-02-26 14:47:22 +00:00