Glucksberg a3b82a563d fix: resolve symlinks in pnpm/bun global install detection (#24744) ...

Use tryRealpath() instead of path.resolve() when comparing expected
package paths in detectGlobalInstallManagerForRoot(). path.resolve()
only normalizes path strings without following symlinks, causing pnpm
global installs to go undetected since pnpm symlinks node_modules
entries into its .pnpm content-addressable store.

Fixes #22768

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-24 03:33:24 +00:00

..

acp

fix(acp): harden permission tool-name validation

2026-02-24 01:11:34 +00:00

agents

fix: clamp poll sleep duration to non-negative in bash-tools process (#24889)

2026-02-24 03:22:58 +00:00

auto-reply

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

browser

test: add env -S allowlist bypass regressions

2026-02-24 02:28:00 +00:00

canvas-host

…

channels

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

cli

fix(gateway): bind node exec approvals to nodeId

2026-02-24 03:05:58 +00:00

commands

fix: suppress "Run doctor --fix" hint when already in fix mode with no changes (#24666)

2026-02-24 03:33:17 +00:00

compat

…

config

fix(security): harden structural session path fallback

2026-02-24 02:52:48 +00:00

cron

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

daemon

fix: back up existing systemd unit before overwriting on update (#24350) (#24937)

2026-02-24 03:22:55 +00:00

discord

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

docs

…

gateway

fix(slack): map threadId to replyToId for restart sentinel notifications (#24885)

2026-02-24 03:22:45 +00:00

hooks

fix: respect agent model config in slug generator (#24776)

2026-02-24 03:22:48 +00:00

imessage

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

infra

fix: resolve symlinks in pnpm/bun global install detection (#24744)

2026-02-24 03:33:24 +00:00

line

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

link-understanding

…

logging

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

markdown

…

media

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

media-understanding

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

memory

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

node-host

fix(security): trust resolved skill-bin paths in allowlist auto-allow

2026-02-24 03:12:43 +00:00

pairing

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

plugin-sdk

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

plugins

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

process

test: speed up supervisor test timing

2026-02-23 20:15:56 +00:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

routing

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

scripts

…

security

fix(sandbox): harden fs bridge path checks and bind mount policy

2026-02-24 02:21:43 +00:00

sessions

…

shared

fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky)

2026-02-24 03:28:00 +00:00

signal

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

slack

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

telegram

fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky)

2026-02-24 03:28:00 +00:00

terminal

…

test-helpers

…

test-utils

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

tts

…

tui

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

types

…

utils

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

web

fix(whatsapp): respect selfChatMode config in access-control (#24738)

2026-02-24 03:33:21 +00:00

whatsapp

WhatsApp: enforce allowFrom for explicit outbound sends (#20921)

2026-02-22 18:13:23 -05:00

wizard

…

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

Docker: precreate identity dir in docker setup

2026-02-22 16:33:53 -08:00

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…