惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

小众软件
小众软件
IT之家
IT之家
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Security Archives - TechRepublic
Security Archives - TechRepublic
P
Proofpoint News Feed
C
CERT Recently Published Vulnerability Notes
阮一峰的网络日志
阮一峰的网络日志
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Cloudflare Blog
P
Palo Alto Networks Blog
Know Your Adversary
Know Your Adversary
D
Darknet – Hacking Tools, Hacker News & Cyber Security
Cisco Talos Blog
Cisco Talos Blog
L
Lohrmann on Cybersecurity
AWS News Blog
AWS News Blog
J
Java Code Geeks
博客园_首页
Scott Helme
Scott Helme
WordPress大学
WordPress大学
有赞技术团队
有赞技术团队
T
The Exploit Database - CXSecurity.com
Security Latest
Security Latest
V
Visual Studio Blog
Cloudbric
Cloudbric
Jina AI
Jina AI
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
博客园 - 叶小钗
Apple Machine Learning Research
Apple Machine Learning Research
博客园 - 聂微东
人人都是产品经理
人人都是产品经理
A
Arctic Wolf
C
Cybersecurity and Infrastructure Security Agency CISA
S
SegmentFault 最新的问题
The Last Watchdog
The Last Watchdog
SecWiki News
SecWiki News
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
W
WeLiveSecurity
K
Kaspersky official blog
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Hacker News: Ask HN
Hacker News: Ask HN
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
宝玉的分享
宝玉的分享
Hugging Face - Blog
Hugging Face - Blog
量子位
Google Online Security Blog
Google Online Security Blog
博客园 - Franky
Simon Willison's Weblog
Simon Willison's Weblog
博客园 - 三生石上(FineUI控件)
Recent Commits to openclaw:main
Recent Commits to openclaw:main

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311 test: trim remaining hotspot tests · openclaw/openclaw@6ba8626 test: narrow hotspot mocks · openclaw/openclaw@dbc8179 test: isolate gemini embedding request helpers · openclaw/openclaw@cd330f5 test: trim memory and mcp hotspots · openclaw/openclaw@fd48dfa test: slim provider registry mocks · openclaw/openclaw@2e08c77 test: harden Parallels update smoke · openclaw/openclaw@1a98090 feat: default Anthropic to Opus 4.7 · openclaw/openclaw@628b454 fix: harden node-host shell payload mutability checks · openclaw/openclaw@75c551e fix: land node-host approval binding for native binaries (#66731) (th… · openclaw/openclaw@29919bb CI: add daily schedule to CodeQL workflow (#67645) · openclaw/openclaw@69d25f5 fix(gateway): capture config hash after plugin auto-enable to prevent… · openclaw/openclaw@8c11210 fix: repair sanitized replay tool results before send (#67620) (thank… · openclaw/openclaw@c3c7a99 fix: restrict HTML timeout short-circuit to transient statuses · openclaw/openclaw@de129a6 fix: keep TUI watchdog bound to active run (#67401) (thanks @xantorres) · openclaw/openclaw@3525273 Gateway/skills: dedupe skills prefix-match + drop dead fallback on log · openclaw/openclaw@d7f489f Extensions/lmstudio: back off inference preload after consecutive fai… · openclaw/openclaw@b555214 TUI/streaming: add watchdog that resets the activity indicator after … · openclaw/openclaw@f44ab20 Agents/tool-loop: enable unknown-tool stream guard by default · openclaw/openclaw@36ed367 Gateway/skills: invalidate session skills snapshot on config write · openclaw/openclaw@b23d59a fix: classify HTML provider error pages correctly (#67642) (thanks @s… · openclaw/openclaw@e588e90 fix(skills): remove unused model-usage import (#67641) · openclaw/openclaw@55f05df docs(changelog): credit codex fix superseded PRs · openclaw/openclaw@e485f24 fix(openai-codex): normalize stale transport metadata in resolution a… · openclaw/openclaw@90801ba CI: pin Docker-related GitHub Actions (#67632) · openclaw/openclaw@f697b01 Android: modernize WebView and discovery API usage (#67627) · openclaw/openclaw@44a6e50 fix(deps): bump hono to 4.12.14 and @hono/node-server to 1.19.14 (GHS… · openclaw/openclaw@fbccc18 fix(deps): bump dompurify to 3.4.0 (#67614) · openclaw/openclaw@2c2dc00 CI: add explicit permissions to all workflow jobs (fixes code-scannin… · openclaw/openclaw@01b7516 fix: register bundled TTS providers and route overrides correctly (#6… · openclaw/openclaw@6ea3cdd fix: align host tilde paths with OS home (#62804) (thanks @stainlu) · openclaw/openclaw@ecfaf64 fix: flush creds queue before reconnect socket open (#67464) (thanks … · openclaw/openclaw@405c63f fix: strip standalone <function> tool call tags from visible text (#6… · openclaw/openclaw@78df859 fix(agents): preserve cli session metadata before transcript persist … · openclaw/openclaw@898fd04 docs(changelog): move cli transcript entry · openclaw/openclaw@c1817c6 fix(agents): normalize cli transcript api field · openclaw/openclaw@3a3fae0 docs(changelog): note cli transcript persistence · openclaw/openclaw@6c343f1 fix(agents): persist cli transcript turns · openclaw/openclaw@b8ef507 fix(msteams): harden security-sensitive flows (#65841) · openclaw/openclaw@c56b56e [Dashboard] Fix exec approval modal overflow for long command content… · openclaw/openclaw@053c5b0 Docs: remove QA changelog entry · openclaw/openclaw@7fd5771 QA: fix private runtime source loading (#67428) · openclaw/openclaw@d5933af docs(gateway): correct protocol.md schema path, hello-ok example, aut… · openclaw/openclaw@489404d CI: pin Node 22 runners to 22.18.0 · openclaw/openclaw@4ffa621 models.authStatus: normalize provider ids + tighten env-backed escape… · openclaw/openclaw@f2fdb9d Update CHANGELOG.md · openclaw/openclaw@7694a92 test(parallels): clean up npm update guard jobs · openclaw/openclaw@045ea7b Plugins: prefer scanDir override paths · openclaw/openclaw@b2974da fix(dreaming): default storage.mode to "separate" so phase blocks sto… · openclaw/openclaw@8c392f0 fix(memory-core): skip dreaming transcript ingestion via session stor… · openclaw/openclaw@a1b01f0 fix: dedupe replayed exec.finished node events (#67281) · openclaw/openclaw@5dcf526
fix #77296: [Bug]: Plugin manifest `skills` field not published to ag… · openclaw/openclaw@1df2ac4
zhangguiping · 2026-05-04 · via Recent Commits to openclaw:main

@@ -1,3 +1,4 @@

1+

import fsSync from "node:fs";

12

import fs from "node:fs/promises";

23

import path from "node:path";

34

import { afterEach, beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

@@ -8,6 +9,7 @@ import {

89

import type { OpenClawConfig } from "../../config/config.js";

910

import type { PluginManifestRegistry } from "../../plugins/manifest-registry.js";

1011

import { createTrackedTempDirs } from "../../test-utils/tracked-temp-dirs.js";

12+

import { __testing } from "./plugin-skills.js";

11131214

const hoisted = vi.hoisted(() => {

1315

const loadManifestRegistry = vi.fn();

@@ -279,6 +281,31 @@ describe("resolvePluginSkillDirs", () => {

279281

expect(dirs).toEqual([]);

280282

});

281283284+

it("cleans up generated plugin skill links when the plugin registry is empty", async () => {

285+

const workspaceDir = await tempDirs.make("openclaw-");

286+

const pluginSkillsDir = await tempDirs.make("managed-plugin-skills-");

287+

const staleRoot = await tempDirs.make("stale-plugin-skills-");

288+

const staleSkill = path.join(staleRoot, "stale-skill");

289+

await fs.mkdir(staleSkill, { recursive: true });

290+

fsSync.symlinkSync(staleSkill, path.join(pluginSkillsDir, "stale-skill"), "dir");

291+292+

hoisted.loadPluginManifestRegistryForInstalledIndex.mockReturnValue({

293+

diagnostics: [],

294+

plugins: [],

295+

});

296+297+

const dirs = resolvePluginSkillDirs({

298+

workspaceDir,

299+

config: {} as OpenClawConfig,

300+

pluginSkillsDir,

301+

});

302+303+

expect(dirs).toEqual([]);

304+

await expect(fs.lstat(path.join(pluginSkillsDir, "stale-skill"))).rejects.toMatchObject({

305+

code: "ENOENT",

306+

});

307+

});

308+282309

it("resolves Claude bundle command roots through the normal plugin skill path", async () => {

283310

const workspaceDir = await tempDirs.make("openclaw-");

284311

const pluginRoot = await tempDirs.make("openclaw-claude-bundle-");

@@ -337,3 +364,191 @@ describe("resolvePluginSkillDirs", () => {

337364

expect(dirs).toEqual([path.resolve(pluginRoot, "skills")]);

338365

});

339366

});

367+368+

describe("publishPluginSkills", () => {

369+

const { publishPluginSkills } = __testing;

370+371+

async function writeSkillDir(

372+

parentDir: string,

373+

name: string,

374+

description = `${name} description`,

375+

) {

376+

const dir = path.join(parentDir, name);

377+

await fs.mkdir(dir, { recursive: true });

378+

await fs.writeFile(

379+

path.join(dir, "SKILL.md"),

380+

`---\nname: ${name}\ndescription: ${description}\n---\n\n# ${name}\n`,

381+

);

382+

return dir;

383+

}

384+385+

it("creates symlinks for each plugin skill dir", async () => {

386+

const skillParent = await tempDirs.make("plugin-skills-");

387+

const managedDir = await tempDirs.make("managed-skills-");

388+389+

const dirA = await writeSkillDir(skillParent, "skill-a");

390+

const dirB = await writeSkillDir(skillParent, "skill-b");

391+392+

publishPluginSkills([dirA, dirB], {

393+

pluginSkillsDir: managedDir,

394+

});

395+396+

const linkA = path.join(managedDir, "skill-a");

397+

const linkB = path.join(managedDir, "skill-b");

398+

expect(fsSync.readlinkSync(linkA)).toBe(dirA);

399+

expect(fsSync.readlinkSync(linkB)).toBe(dirB);

400+

});

401+402+

it("is idempotent: skips symlinks that already point to the same target", async () => {

403+

const skillParent = await tempDirs.make("plugin-skills-");

404+

const managedDir = await tempDirs.make("managed-skills-");

405+406+

const dir = await writeSkillDir(skillParent, "my-skill");

407+408+

publishPluginSkills([dir], { pluginSkillsDir: managedDir });

409+

const mtimeAfterFirst = (await fs.lstat(path.join(managedDir, "my-skill"))).mtimeMs;

410+411+

// Second call with same input should preserve the existing symlink.

412+

publishPluginSkills([dir], { pluginSkillsDir: managedDir });

413+

const mtimeAfterSecond = (await fs.lstat(path.join(managedDir, "my-skill"))).mtimeMs;

414+415+

expect(mtimeAfterSecond).toBe(mtimeAfterFirst);

416+

expect(fsSync.readlinkSync(path.join(managedDir, "my-skill"))).toBe(dir);

417+

});

418+419+

it("replaces owned generated symlinks when a plugin skill target moves", async () => {

420+

const skillParent1 = await tempDirs.make("plugin-skills-1-");

421+

const skillParent2 = await tempDirs.make("plugin-skills-2-");

422+

const managedDir = await tempDirs.make("managed-skills-");

423+424+

const dir1 = await writeSkillDir(skillParent1, "my-skill", "old");

425+

const dir2 = await writeSkillDir(skillParent2, "my-skill", "new");

426+427+

fsSync.symlinkSync(dir1, path.join(managedDir, "my-skill"), "dir");

428+429+

publishPluginSkills([dir2], { pluginSkillsDir: managedDir });

430+431+

expect(fsSync.readlinkSync(path.join(managedDir, "my-skill"))).toBe(dir2);

432+

});

433+434+

it("cleans up stale symlinks whose targets still exist", async () => {

435+

const skillParent = await tempDirs.make("plugin-skills-");

436+

const managedDir = await tempDirs.make("managed-skills-");

437+438+

const dir = await writeSkillDir(skillParent, "current-skill");

439+

const staleDir = await writeSkillDir(skillParent, "stale-skill");

440+441+

fsSync.symlinkSync(staleDir, path.join(managedDir, "stale-skill"), "dir");

442+443+

publishPluginSkills([dir], { pluginSkillsDir: managedDir });

444+445+

expect(fsSync.existsSync(path.join(managedDir, "current-skill"))).toBe(true);

446+

expect(fsSync.existsSync(path.join(managedDir, "stale-skill"))).toBe(false);

447+

});

448+449+

it("cleans up broken symlinks (dangling)", async () => {

450+

const skillParent = await tempDirs.make("plugin-skills-");

451+

const managedDir = await tempDirs.make("managed-skills-");

452+453+

const dir = await writeSkillDir(skillParent, "current-skill");

454+

const nonexistentDir = path.join(skillParent, "nonexistent");

455+456+

// Create a symlink to a nonexistent directory.

457+

fsSync.symlinkSync(nonexistentDir, path.join(managedDir, "broken-skill"), "dir");

458+459+

publishPluginSkills([dir], { pluginSkillsDir: managedDir });

460+461+

expect(fsSync.existsSync(path.join(managedDir, "current-skill"))).toBe(true);

462+

// Broken symlink pointing to nonexistent target should be removed.

463+

expect(fsSync.existsSync(path.join(managedDir, "broken-skill"))).toBe(false);

464+

});

465+466+

it.runIf(process.platform !== "win32")(

467+

"skips child skill directories whose SKILL.md symlinks outside the declared root",

468+

async () => {

469+

const skillParent = await tempDirs.make("plugin-skills-");

470+

const managedDir = await tempDirs.make("managed-skills-");

471+

const outsideDir = await tempDirs.make("outside-skill-file-");

472+

const parentDir = path.join(skillParent, "skills");

473+

const leakDir = path.join(parentDir, "leak");

474+

await fs.mkdir(leakDir, { recursive: true });

475+

await fs.writeFile(

476+

path.join(outsideDir, "SKILL.md"),

477+

"---\nname: leak\ndescription: Outside\n---\n",

478+

);

479+

await fs.symlink(path.join(outsideDir, "SKILL.md"), path.join(leakDir, "SKILL.md"));

480+

const validDir = await writeSkillDir(parentDir, "valid");

481+482+

publishPluginSkills([parentDir], { pluginSkillsDir: managedDir });

483+484+

expect(fsSync.existsSync(path.join(managedDir, "leak"))).toBe(false);

485+

expect(fsSync.readlinkSync(path.join(managedDir, "valid"))).toBe(validDir);

486+

},

487+

);

488+489+

it("does not create managed skills dir when skill dirs list is empty", async () => {

490+

const parent = await tempDirs.make("parent-");

491+

const managedDir = path.join(parent, "does-not-exist");

492+

publishPluginSkills([], { pluginSkillsDir: managedDir });

493+

expect(fsSync.existsSync(managedDir)).toBe(false);

494+

});

495+496+

it("skips directories that do not contain a SKILL.md and have no skill children", async () => {

497+

const skillParent = await tempDirs.make("plugin-skills-");

498+

const managedDir = await tempDirs.make("managed-skills-");

499+500+

// Create a dir without SKILL.md – should be skipped.

501+

const emptyDir = path.join(skillParent, "empty-dir");

502+

await fs.mkdir(emptyDir, { recursive: true });

503+504+

publishPluginSkills([emptyDir], {

505+

pluginSkillsDir: managedDir,

506+

});

507+508+

expect(fsSync.existsSync(path.join(managedDir, "empty-dir"))).toBe(false);

509+

});

510+511+

it("expands parent skill containers to child directories that contain SKILL.md", async () => {

512+

const skillParent = await tempDirs.make("plugin-skills-");

513+

const managedDir = await tempDirs.make("managed-skills-");

514+515+

// Create a parent skills dir with child skill dirs (the layout used by

516+

// bundled plugins like browser and memory-wiki).

517+

const parentDir = path.join(skillParent, "skills");

518+

const childA = await writeSkillDir(parentDir, "browser");

519+

const childB = await writeSkillDir(parentDir, "memory");

520+521+

publishPluginSkills([parentDir], {

522+

pluginSkillsDir: managedDir,

523+

});

524+525+

// Child skill dirs should be published under their basenames.

526+

expect(fsSync.readlinkSync(path.join(managedDir, "browser"))).toBe(childA);

527+

expect(fsSync.readlinkSync(path.join(managedDir, "memory"))).toBe(childB);

528+529+

// The parent dir itself should NOT be published (no SKILL.md there).

530+

expect(fsSync.existsSync(path.join(managedDir, "skills"))).toBe(false);

531+

});

532+533+

it("handles empty skill dirs list without error", async () => {

534+

const managedDir = await tempDirs.make("managed-skills-");

535+

publishPluginSkills([], { pluginSkillsDir: managedDir });

536+

// No error expected. The managed dir may or may not be created.

537+

});

538+539+

it("handles collision: same basename from different plugins uses first one", async () => {

540+

const skillParent1 = await tempDirs.make("plugin-skills-1-");

541+

const skillParent2 = await tempDirs.make("plugin-skills-2-");

542+

const managedDir = await tempDirs.make("managed-skills-");

543+544+

const dir1 = await writeSkillDir(skillParent1, "shared-name", "first");

545+

const dir2 = await writeSkillDir(skillParent2, "shared-name", "second");

546+547+

publishPluginSkills([dir1, dir2], {

548+

pluginSkillsDir: managedDir,

549+

});

550+551+

// First one wins.

552+

expect(fsSync.readlinkSync(path.join(managedDir, "shared-name"))).toBe(dir1);

553+

});

554+

});