Devin Robison 95119017c8 fix(openshell): pin sandbox file reads (#69798) ...

* fix(openshell): pin sandbox file reads against parent symlink swaps

* docs(changelog): note openshell sandbox read pinning (#69798)

* fix(openshell): containment-check against literal root and self-contain file-identity helper

* test(openshell): spy on fsPromises.open for swap races, skip dev=0 test on win32

* fix(openshell): single-syscall fallback identity check + tighten sameFileIdentity types

* fix(openshell): re-fstat pinned handle after identity check for defense-in-depth

* fix(openshell): lstat leaf on platforms without O_NOFOLLOW to close windows symlink gap

* fix(openshell): expose test seam for O_NOFOLLOW availability instead of patching native constants

2026-04-22 16:44:25 -06:00

..

src

fix(openshell): pin sandbox file reads (#69798)

2026-04-22 16:44:25 -06:00

index.ts

…

openclaw.plugin.json

…

package.json

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

tsconfig.json

…