pgondhi987 b7b46ad185 fix(skills): replace readFileSync with symlink-safe, root-confined skill file loader (#57519) ...

* fix: replace readFileSync with symlink-safe, root-confined skill file loader

* fix(skills): preserve directory-name fallback when frontmatter omits name

* fix: harden skill loader path containment

---------

Co-authored-by: Jacob Tomlinson <jacobtomlinson@users.noreply.github.com>

2026-03-30 17:03:05 +01:00

..

acp

Tests: close ACP manager task registry before temp dir cleanup

2026-03-30 01:17:47 -04:00

agents

fix(skills): replace readFileSync with symlink-safe, root-confined skill file loader (#57519)

2026-03-30 17:03:05 +01:00

auto-reply

infra: harden identifier entropy and delay jitter (#57744)

2026-03-30 16:57:30 +01:00

bindings

…

bootstrap

…

canvas-host

fix(lint): clear current main lint blockers

2026-03-30 08:43:37 +09:00

channels

feat(matrix): add explicit channels.matrix.proxy config (#56930) (#56931)

2026-03-30 02:51:33 -04:00

chat

…

cli

Skills: prefer active OpenClaw paths

2026-03-30 16:10:13 +01:00

commands

style: apply formatter cleanups

2026-03-30 16:20:27 +01:00

compat

…

config

fix: use azure-openai-responses for Azure custom providers (#50851) (thanks @kunalk16)

2026-03-30 16:17:03 +05:30

context-engine

…

cron

refactor(cron): split main and detached dispatch (#57482)

2026-03-30 13:59:55 +09:00

daemon

test: trim stale legacy coverage and repair mocks

2026-03-29 22:00:56 +01:00

docs

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

flows

feat(xai): add plugin-owned x_search onboarding

2026-03-29 00:12:37 +00:00

gateway

Gateway: tighten HTTP tool invoke authorization (#57773)

2026-03-30 16:59:40 +01:00

generated

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

hooks

…

i18n

…

image-generation

fix: stabilize serial test suite

2026-03-30 04:46:04 +09:00

infra

Infra: block auth env vars from workspace dotenv (#57767)

2026-03-30 17:01:22 +01:00

interactive

…

link-understanding

…

logging

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

markdown

fix(slack): restore table block mode seam (#57591)

2026-03-30 19:25:01 +09:00

mcp

fix: harden ACP plugin tools bridge (#56867) (thanks @joe2643)

2026-03-30 05:09:59 +09:00

media

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

media-understanding

reply: enforce ACP attachment roots (#57690)

2026-03-30 14:04:02 +01:00

node-host

…

pairing

fix: allow setup-code bootstrap auth for operator pairing

2026-03-30 20:39:19 +05:30

plugin-sdk

fix: allow setup-code bootstrap auth for operator pairing

2026-03-30 20:39:19 +05:30

plugins

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

process

Supervisor: unblock waits after forced child kill

2026-03-30 00:45:22 -04:00

routing

test: dedupe routing and text suites

2026-03-28 07:31:40 +00:00

scripts

docs: fix English link audits (#57039)

2026-03-30 01:21:00 +02:00

secrets

fix(perf): bypass matrix facade for core helpers

2026-03-30 12:43:55 +09:00

security

Gateway: tighten HTTP tool invoke authorization (#57773)

2026-03-30 16:59:40 +01:00

sessions

…

shared

fix(subagents): correct duration display showing 5-6x inflated runtime (#57739)

2026-03-30 23:44:36 +08:00

tasks

fix: stabilize ci task and docs checks

2026-03-30 09:25:01 +01:00

terminal

…

test-helpers

fix(ci): harden Windows test cleanup

2026-03-30 18:56:29 +09:00

test-utils

fix(facade-runtime): add recursion guard to facade module loader to prevent infinite stack overflow

2026-03-30 13:48:21 +05:30

tts

fix(line): preserve underscores inside words in stripMarkdown (#47465)

2026-03-28 21:31:09 -05:00

tui

fix(tui): stop hijacking j/k in model search

2026-03-28 19:48:00 -07:00

types

plugins: add before_install hook for install scanners

2026-03-29 12:35:01 -07:00

utils

fix: address second-round review — Latin backward compat and emoji consistency

2026-03-29 10:22:43 +09:00

web-search

Tools: add x_search via xAI Responses

2026-03-28 21:35:13 +00:00

wizard

Skills: prefer active OpenClaw paths

2026-03-30 16:10:13 +01:00

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

Docker setup: force BuildKit for local builds

2026-03-28 20:46:35 -07:00

dockerfile.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

entry.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

Agents UI: fix effective model and file hydration

2026-03-28 21:10:39 -07:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…