@agent-vm/openclaw-agent-vm-plugin 0.0.30 → 0.0.32

package/dist/index.d.ts

@@ -11,8 +11,23 @@ interface GondolinLeaseResponse {
   readonly tcpSlot: number;
   readonly workdir: string;
 }
+interface LeasePeekResponse {
+  readonly createdAt: number;
+  readonly lastUsedAt: number;
+  readonly leaseId: string;
+  readonly profileId: string;
+  readonly scopeKey: string;
+  readonly ssh: {
+    readonly host: string;
+    readonly port: number;
+    readonly user: string;
+  };
+  readonly tcpSlot: number;
+  readonly zoneId: string;
+}
 interface LeaseClient {
-  getLeaseStatus(leaseId: string): Promise<unknown>;
+  keepLeaseAlive(leaseId: string): Promise<GondolinLeaseResponse>;
+  peekLease(leaseId: string): Promise<LeasePeekResponse>;
   releaseLease(leaseId: string): Promise<void>;
   requestLease(request: {
     readonly agentWorkspaceDir: string;
@@ -289,5 +304,5 @@ declare const plugin: {
 //#region src/index.d.ts
 declare const OPENCLAW_GONDOLIN_PLUGIN_PACKAGE_NAME = "@agent-vm/openclaw-agent-vm-plugin";
 //#endregion
-export { CreateBackendDependencies, FsBridgeLeaseContext, GondolinFsBridge, GondolinLeaseResponse, GondolinSandboxBackendHandle, LeaseClient, OPENCLAW_GONDOLIN_PLUGIN_PACKAGE_NAME, ResolvedGondolinPluginConfig, type SshHelpers, createBackendDeps, createGondolinSandboxBackendFactory, createGondolinSandboxBackendManager, createLeaseClient, plugin as default, resolveGondolinPluginConfig };
+export { CreateBackendDependencies, FsBridgeLeaseContext, GondolinFsBridge, GondolinLeaseResponse, GondolinSandboxBackendHandle, LeaseClient, LeasePeekResponse, OPENCLAW_GONDOLIN_PLUGIN_PACKAGE_NAME, ResolvedGondolinPluginConfig, type SshHelpers, createBackendDeps, createGondolinSandboxBackendFactory, createGondolinSandboxBackendManager, createLeaseClient, plugin as default, resolveGondolinPluginConfig };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/controller-lease-client.ts","../src/sandbox-backend/sandbox-backend-contract.ts","../src/sandbox-backend/sandbox-backend-handle-factory.ts","../src/sandbox-backend/sandbox-backend-manager.ts","../src/gondolin-plugin-config.ts","../src/openclaw-sandbox-sdk-contract.ts","../src/openclaw-backend-dependencies.ts","../src/openclaw-plugin-registration.ts","../src/index.ts"],"sourcesContent":[],"mappings":";UAAiB,qBAAA;EAAA,SAAA,OAAA,EAAA,MAAqB;EAarB,SAAA,GAAA,EAAW;IACM,SAAA,IAAA,EAAA,MAAA;IACF,SAAA,WAAA,EAAA,MAAA;IAOnB,SAAA,cAAA,EAAA,MAAA;IAAR,SAAA,IAAA,EAAA,MAAA;IAAO,SAAA,IAAA,EAAA,MAAA;EAaI,CAAA;EAEuB,SAAA,OAAA,EAAA,MAAA;EAAM,SAAA,OAAA,EAAA,MAAA;;AAAwC,UAxBpE,WAAA,CAwBoE;EAAR,cAAA,CAAA,OAAA,EAAA,MAAA,CAAA,EAvB3C,OAuB2C,CAAA,OAAA,CAAA;EACzE,YAAA,CAAA,OAAA,EAAA,MAAA,CAAA,EAvB4B,OAuB5B,CAAA,IAAA,CAAA;EAAW,YAAA,CAAA,OAAA,EAAA;;;;ICxBE,SAAA,YAAoB,EAAA,MAAA;IAOjB,SAAA,MAAA,EAAA,MAAA;EACD,CAAA,CAAA,EDAd,OCAc,CDAN,qBCAM,CAAA;;AAIA,iBDSH,iBAAA,CCTG,OAAA,EAAA;EAHZ,SAAA,aAAA,EAAA,MAAA;EAAO,SAAA,SAAA,CAAA,EAAA,CAAA,KAAA,EAAA,MAAA,GDcyB,GCdzB,GDc+B,OCd/B,EAAA,IAAA,CAAA,EDc+C,WCd/C,EAAA,GDc+D,OCd/D,CDcuE,QCdvE,CAAA;AAOd,CAAA,CAAA,EDQI,WCRa;;;ADjBA,UCCA,oBAAA,CDDW;EACM,SAAA,uBAAA,EAAA,MAAA;EACF,SAAA,kBAAA,EAAA,MAAA;EAOnB,SAAA,oBAAA,EAAA,CAAA,MAAA,EAAA;IAAR,SAAA,YAAA,CAAA,EAAA,OAAA;IAAO,SAAA,IAAA,CAAA,EAAA,MAAA,EAAA;IAaI,SAAA,MAAA,EAAiB,MAAA;IAEM,SAAA,MAAA,CAAA,EChBnB,WDgBmB;IAAM,SAAA,KAAA,CAAA,ECf1B,MDe0B,GAAA,MAAA;EAAgB,CAAA,EAAA,GCdtD,ODcsD,CAAA;IAAwB,SAAA,IAAA,EAAA,MAAA;IAAR,SAAA,MAAA,ECZ1D,MDY0D;IACzE,SAAA,MAAA,ECZe,MDYf;EAAW,CAAA,CAAA;;UCRE,gBAAA;;IAhBA,SAAA,GAAA,CAAA,EAAA,MAAoB;IAOjB,SAAA,QAAA,EAAA,MAAA;IACD,SAAA,MAAA,CAAA,EAYC,WAZD;EAGA,CAAA,CAAA,EAUd,OAVc,CAAA,IAAA,CAAA;EACA,QAAA,CAAA,MAAA,EAAA;IAHZ,SAAA,GAAA,CAAA,EAAA,MAAA;IAAO,SAAA,QAAA,EAAA,MAAA;IAOG,SAAA,MAAgB,CAAA,EASb,WATa;EAIb,CAAA,CAAA,EAMf,OANe,CAMP,MANO,CAAA;EACf,MAAA,CAAA,MAAA,EAAA;IAIe,SAAA,GAAA,CAAA,EAAA,MAAA;IACP,SAAA,QAAA,EAAA,MAAA;IAAR,SAAA,KAAA,CAAA,EAAA,OAAA;IAMe,SAAA,SAAA,CAAA,EAAA,OAAA;IACf,SAAA,MAAA,CAAA,EADe,WACf;EAIe,CAAA,CAAA,EAJf,OAIe,CAAA,IAAA,CAAA;EAEf,MAAA,CAAA,MAAA,EAAA;IAQe,SAAA,GAAA,CAAA,EAAA,MAAA;IACf,SAAA,IAAA,EAAA,MAAA;IAOY,SAAA,MAAA,CAAA,EAlBG,WAkBH;IACK,SAAA,EAAA,EAAA,MAAA;EAGF,CAAA,CAAA,EApBf,OAoBe,CAAA,IAAA,CAAA;EACf,WAAA,CAAA,MAAA,EAAA;IAAO,SAAA,GAAA,CAAA,EAAA,MAAA;IAGK,SAAA,QAAA,EAAA,MAAyB;EAG1B,CAAA,CAAA,EAAA;IACA,SAAA,aAAA,EAAA,MAAA;IAKA,SAAA,YAAA,EAAA,MAAA;EAFT,CAAA;EAOS,IAAA,CAAA,MAAA,EAAA;IACiC,SAAA,GAAA,CAAA,EAAA,MAAA;IAC8B,SAAA,QAAA,EAAA,MAAA;IAI3D,SAAA,MAAA,CAAA,EApCA,WAoCA;EACJ,CAAA,CAAA,EApCX,OAoCW,CAAA;IACG,SAAA,OAAA,EAAA,MAAA;IAGA,SAAA,IAAA,EAAA,MAAA;IACA,SAAA,IAAA,EAAA,WAAA,GAAA,MAAA,GAAA,OAAA;EAHZ,CAAA,GAAA,IAAA,CAAA;EAAO,SAAA,CAAA,MAAA,EAAA;IAOG,SAAA,GAAA,CAAA,EAAA,MAAA;IAG4C,SAAA,IAAA,EAzC5C,MAyC4C,GAAA,MAAA;IACtD,SAAA,QAAA,CAAA,EAzCe,cAyCf;IAOS,SAAA,QAAA,EAAA,MAAA;IAKA,SAAA,KAAA,CAAA,EAAA,OAAA;IAFX,SAAA,MAAA,CAAA,EAhDe,WAgDf;EAWE,CAAA,CAAA,EA1DF,OA0DE,CAAA,IAAA,CAAA;;AAIY,UA3DF,yBAAA,CA2DE;EAHoC,SAAA,aAAA,EAAA,CAAA,MAAA,EAAA;IAAO,SAAA,OAAA,EAAA,MAAA;kBArD9C;kBACA;;ICvEA,SAAA,OAAA,EAAA,MAAA;EAMD,CAAA,EAAA,GDoER,OCpEQ,CAAA;IAKG,SAAA,IAAA,EAAA,MAAA,EAAA;IAMJ,SAAA,GAAA,ED2DE,MC3DF,CAAA,MAAA,EAAA,MAAA,CAAA;IAAR,SAAA,aAAA,CAAA,EAAA,OAAA;IAAO,SAAA,SAAA,EAAA,WAAA,GAAA,aAAA;;kDDgEG;;EExFA,CAAA,EAAA,GFyFiC,gBEzFjC;EAKD,SAAA,iBAAA,CAAA,EAAA,CAAA,OAAA,EAAA;IAIR,SAAA,aAAA,EAAA,MAAA;EAC6E,CAAA,EAAA,GFgFL,WEhFK;EAAO,SAAA,oBAAA,EAAA,CAAA,MAAA,EAAA;;;sBFoFvE;IGjGH,SAAA,GAAA,EHkGD,qBGlG6B,CAAA,KAAA,CAAA;IAM7B,SAAA,KAAA,CAAA,EH6FG,MG7FH,GAA2B,MAAA;QH8FpC;;qBAEY;IItGF,SAAA,MAAA,EJuGE,MIvGe;EAMjB,CAAA,CAAA;;AASG,UJ4FH,4BAAA,CI5FG;EAWE,SAAA,WAAA,CAAA,EAAA,MAAA;EACD,SAAA,eAAA,CAAA,EAAA,MAAA;EAGA,cAAA,CAAA,EAAA,CAAA,MAAA,EAAA;IACA,SAAA,OAAA,EAAA,OAAA;EAHZ,CAAA,EAAA,GJkFoD,gBIlFpD;EAAO,GAAA,CAAA,EJmFT,MInFS,CAAA,MAAA,EAAA,MAAA,CAAA;EAeD,SAAA,EAAA,EAAA,MAAA;EAAR,SAAA,SAAA,EAAA,MAAA;EACwC,SAAA,YAAA,EAAA,MAAA;EAAsB,SAAA,OAAA,EAAA,MAAA;EAIjD,aAAA,CAAA,MAAA,EAAA;IACA,SAAA,OAAA,EAAA,MAAA;IACD,SAAA,GAAA,EJoEH,MIpEG,CAAA,MAAA,EAAA,MAAA,CAAA;IAGA,SAAA,MAAA,EAAA,OAAA;IACA,SAAA,OAAA,CAAA,EAAA,MAAA;EAHZ,CAAA,CAAA,EJsEF,OItEE,CAAA;IAKiC,SAAA,IAAA,EAAA,MAAA,EAAA;IACpB,SAAA,GAAA,EJkEJ,MIlEI,CAAA,MAAA,EAAA,MAAA,CAAA;IAAM,SAAA,aAAA,CAAA,EAAA,OAAA;;;;IClDV,SAAA,QAAiB,EAAA,MAAA,GAAA,IAAA;IAAM,SAAA,MAAA,EAAA,WAAA,GAAA,QAAA;IACd,SAAA,QAAA,EAAA,OAAA;IAET,SAAA,KAAA,CAAA,EAAA,OAAA;EACiC,CAAA,EAAA,GLyH1C,OKzH0C,CAAA,IAAA,CAAA;EACjB,eAAA,CAAA,MAAA,EAAA;IAAyB,SAAA,MAAA,EAAA,MAAA;MLyHF;;qBAEpC;IM3Hb,SA+CL,MAAA,EN6EkB,MMtHY;;;;;APlBd,iBEUD,mCAAA,CFVsB,OAAA,EAAA;EAarB,SAAA,aAAW,EAAA,MAAA;EACM,SAAA,SAAA,CAAA,EAAA,MAAA;EACF,SAAA,MAAA,EAAA,MAAA;CAOnB,EAAA,YAAA,EENE,yBFMF,CAAA,EAAA,CAAA,MAAA,EAAA;EAAR,SAAA,iBAAA,EAAA,MAAA;EAAO,SAAA,GAAA,EAAA;IAaI,SAAA,MAAA,CAAiB,EAAA;MAEM,SAAA,GAAA,CAAA,EEhBrB,MFgBqB,CAAA,MAAA,EAAA,MAAA,CAAA;IAAM,CAAA;EAAgB,CAAA;EAAwB,SAAA,QAAA,EAAA,MAAA;EAAR,SAAA,UAAA,EAAA,MAAA;EACzE,SAAA,YAAA,EAAA,MAAA;CAAW,EAAA,GEXT,OFWS,CEXD,4BFWC,CAAA;;;AAtCE,iBGGD,mCAAA,CHHsB,OAAA,EAAA;EAarB,SAAA,aAAW,EAAA,MAAA;EACM,SAAA,MAAA,EAAA,MAAA;CACF,EAAA,YAAA,EGPjB,yBHOiB,CAAA,EAAA;EAOnB,eAAA,EAAA,CAAA,MAAA,EAAA;IAAR,SAAA,KAAA,EAAA;MAAO,SAAA,aAAA,EAAA,MAAA;IAaI,CAAA;EAEuB,CAAA,EAAA,GGzBhC,OHyBgC,CAAA;IAAM,SAAA,gBAAA,EAAA,OAAA;IAAgB,SAAA,OAAA,EAAA,OAAA;EAAwB,CAAA,CAAA;EAAR,aAAA,EAAA,CAAA,MAAA,EAAA;IACzE,SAAA,KAAA,EAAA;MAAW,SAAA,aAAA,EAAA,MAAA;;QGzBqE;;;;UCbnE,4BAAA;EJAA,SAAA,aAAA,EAAqB,MAAA;EAarB,SAAA,SAAW,CAAA,EAAA,MAAA;EACM,SAAA,MAAA,EAAA,MAAA;;AAQrB,iBIhBG,2BAAA,CJgBH,MAAA,EIfJ,MJeI,CAAA,MAAA,EAAA,OAAA,CAAA,CAAA,EIdV,4BJcU;;;UKtBI,iBAAA;ELAA,SAAA,OAAA,EAAA,MAAqB;EAarB,SAAA,UAAW,EAAA,MAAA;EACM,SAAA,IAAA,EAAA,MAAA;;AAQrB,UKhBI,UAAA,CLgBJ;EAAR,SAAA,sBAAA,EAAA,CAAA,MAAA,EAAA;IAAO,SAAA,OAAA,EAAA,MAAA;IAaI,SAAA,GAAA,EK1BA,ML0BiB,CAAA,MAAA,EAAA,MAAA,CAAA;IAEM,SAAA,OAAA,CAAA,EAAA,MAAA;EAAM,CAAA,EAAA,GAAA,MAAA;EAAgB,SAAA,kBAAA,EAAA,CAAA,IAAA,EAAA,SAAA,MAAA,EAAA,EAAA,GAAA,MAAA;EAAwB,SAAA,mBAAA,EAAA,CAAA,MAAA,EAAA;IAAR,SAAA,aAAA,EAAA,MAAA;IACzE,SAAA,OAAA,EKvBgB,iBLuBhB;IAAW,SAAA,GAAA,CAAA,EAAA,OAAA;;;;MCxBE,SAAA,uBAAoB,EAAA,MAAA;MAOjB,SAAA,kBAAA,EAAA,MAAA;MACD,SAAA,oBAAA,EAAA,CAAA,WAAA,EAAA;QAGA,SAAA,YAAA,CAAA,EAAA,OAAA;QACA,SAAA,IAAA,CAAA,EAAA,MAAA,EAAA;QAHZ,SAAA,MAAA,EAAA,MAAA;QAAO,SAAA,MAAA,CAAA,EIGQ,WJHR;QAOG,SAAgB,KAAA,CAAA,EIHZ,MJGY,GAAA,MAAA;MAIb,CAAA,EAAA,GINX,OJMW,CAAA;QACf,SAAA,IAAA,EAAA,MAAA;QAIe,SAAA,MAAA,EITC,MJSD;QACP,SAAA,MAAA,EITQ,MJSR;MAAR,CAAA,CAAA;IAMe,CAAA;IACf,SAAA,OAAA,EAAA,OAAA;EAIe,CAAA,EAAA,GIvBJ,gBJuBI;EAEf,SAAA,mCAAA,EAAA,CAAA,QAAA,EAAA;IAQe,SAAA,OAAA,EAAA,MAAA;IACf,SAAA,YAAA,CAAA,EAAA,MAAA;IAOY,SAAA,qBAAA,EAAA,OAAA;IACK,SAAA,MAAA,EAAA,MAAA;IAGF,SAAA,cAAA,EAAA,OAAA;IACf,SAAA,aAAA,EAAA,MAAA;EAAO,CAAA,EAAA,GI/BL,OJ+BK,CI/BG,iBJ+BH,CAAA;EAGK,SAAA,wBAAyB,CAAA,EAAA,CAAA,OAAA,EIjCK,iBJiCL,EAAA,GIjC2B,OJiC3B,CAAA,IAAA,CAAA;EAG1B,SAAA,oBAAA,EAAA,CAAA,MAAA,EAAA;IACA,SAAA,YAAA,CAAA,EAAA,OAAA;IAKA,SAAA,aAAA,EAAA,MAAA;IAFT,SAAA,OAAA,EIpCa,iBJoCb;IAOS,SAAA,MAAA,CAAA,EI1CI,WJ0CJ;IACiC,SAAA,KAAA,CAAA,EI1C9B,MJ0C8B,GAAA,MAAA;EAC8B,CAAA,EAAA,GI1CxE,OJ0CwE,CAAA;IAI3D,SAAA,IAAA,EAAA,MAAA;IACJ,SAAA,MAAA,EI7CG,MJ6CH;IACG,SAAA,MAAA,EI7CA,MJ6CA;EAGA,CAAA,CAAA;EACA,SAAA,eAAA,EAAA,CAAA,GAAA,EI/Cc,MAAA,CAAO,UJ+CrB,EAAA,GAAA;IAHZ,SAAA,OAAA,EI3Ca,MJ2Cb,CAAA,MAAA,EAAA,MAAA,CAAA;EAAO,CAAA;AAOd;;;AD9FiB,iBMND,iBAAA,CNMY,GAAA,EMNW,UNMX,CAAA,EAAA;EACM,SAAA,aAAA,EMNT,yBNMS,CAAA,eAAA,CAAA;EACF,SAAA,qBAAA,EAAA,CAAA,YAAA,EMLhB,oBNKgB,EAAA,GAAA,CAAA,MAAA,EAAA;IAOnB,SAAA,OAAA,EAAA,OAAA;EAAR,CAAA,EAAA,GMX4C,gBNW5C;EAAO,SAAA,oBAAA,EMVoB,yBNUpB,CAAA,sBAAA,CAAA;AAaZ,CAAA;;;AAtBA,cODM,MPCsB,EAAA;EACM,EAAA,EAAA,MAAA;EACF,IAAA,EAAA,MAAA;EAOnB,WAAA,EAAA,MAAA;EAAR,QAAA,CAAA,GAAA,EAAA;IAAO,SAAA,YAAA,EOJa,MPIb,CAAA,MAAA,EAAA,OAAA,CAAA;IAaI,SAAA,gBAAiB,EAAA,MAAA;EAEM,CAAA,CAAA,EAAA,IAAA;CAAM;;;AAfhC,cQhBA,qCAAA,GRgBA,oCAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/controller-lease-client.ts","../src/sandbox-backend/sandbox-backend-contract.ts","../src/sandbox-backend/sandbox-backend-handle-factory.ts","../src/sandbox-backend/sandbox-backend-manager.ts","../src/gondolin-plugin-config.ts","../src/openclaw-sandbox-sdk-contract.ts","../src/openclaw-backend-dependencies.ts","../src/openclaw-plugin-registration.ts","../src/index.ts"],"sourcesContent":[],"mappings":";UAAiB,qBAAA;EAAA,SAAA,OAAA,EAAA,MAAqB;EAarB,SAAA,GAAA,EAAA;IAeA,SAAA,IAAW,EAAA,MAAA;IAEc,SAAA,WAAA,EAAA,MAAA;IAAR,SAAA,cAAA,EAAA,MAAA;IACG,SAAA,IAAA,EAAA,MAAA;IAAR,SAAA,IAAA,EAAA,MAAA;EACG,CAAA;EAOnB,SAAA,OAAA,EAAA,MAAA;EAAR,SAAA,OAAA,EAAA,MAAA;;AAyEW,UAnGC,iBAAA,CAmGgB;EAEM,SAAA,SAAA,EAAA,MAAA;EAAM,SAAA,UAAA,EAAA,MAAA;EAAgB,SAAA,OAAA,EAAA,MAAA;EAAwB,SAAA,SAAA,EAAA,MAAA;EAAR,SAAA,QAAA,EAAA,MAAA;EACzE,SAAA,GAAA,EAAA;IAAW,SAAA,IAAA,EAAA,MAAA;;;;ECrGE,SAAA,OAAA,EAAA,MAAoB;EAOjB,SAAA,MAAA,EAAA,MAAA;;AAID,UDGF,WAAA,CCHE;EACA,cAAA,CAAA,OAAA,EAAA,MAAA,CAAA,EDIe,OCJf,CDIuB,qBCJvB,CAAA;EAHZ,SAAA,CAAA,OAAA,EAAA,MAAA,CAAA,EDQsB,OCRtB,CDQ8B,iBCR9B,CAAA;EAAO,YAAA,CAAA,OAAA,EAAA,MAAA,CAAA,EDSkB,OCTlB,CAAA,IAAA,CAAA;EAOG,YAAA,CAAA,OAAgB,EAAA;IAIb,SAAA,iBAAA,EAAA,MAAA;IACf,SAAA,SAAA,EAAA,MAAA;IAIe,SAAA,QAAA,EAAA,MAAA;IACP,SAAA,YAAA,EAAA,MAAA;IAAR,SAAA,MAAA,EAAA,MAAA;EAMe,CAAA,CAAA,EDPf,OCOe,CDPP,qBCOO,CAAA;;AAKA,iBD6DJ,iBAAA,CC7DI,OAAA,EAAA;EAEf,SAAA,aAAA,EAAA,MAAA;EAQe,SAAA,SAAA,CAAA,EAAA,CAAA,KAAA,EAAA,MAAA,GDqDmB,GCrDnB,GDqDyB,OCrDzB,EAAA,IAAA,CAAA,EDqDyC,WCrDzC,EAAA,GDqDyD,OCrDzD,CDqDiE,QCrDjE,CAAA;CACf,CAAA,EDqDD,WCrDC;;;ADjDY,UCCA,oBAAA,CDDiB;EAejB,SAAA,uBAAW,EAAA,MAAA;EAEc,SAAA,kBAAA,EAAA,MAAA;EAAR,SAAA,oBAAA,EAAA,CAAA,MAAA,EAAA;IACG,SAAA,YAAA,CAAA,EAAA,OAAA;IAAR,SAAA,IAAA,CAAA,EAAA,MAAA,EAAA;IACG,SAAA,MAAA,EAAA,MAAA;IAOnB,SAAA,MAAA,CAAA,EClBO,WDkBP;IAAR,SAAA,KAAA,CAAA,ECjBc,MDiBd,GAAA,MAAA;EAAO,CAAA,EAAA,GChBL,ODgBK,CAAA;IAyEI,SAAA,IAAA,EAAA,MAAiB;IAEM,SAAA,MAAA,ECzFpB,MDyFoB;IAAM,SAAA,MAAA,ECxF1B,MDwF0B;EAAgB,CAAA,CAAA;;AAAgB,UCpF5D,gBAAA,CDoF4D;EACzE,MAAA,CAAA,MAAA,EAAA;IAAW,SAAA,GAAA,CAAA,EAAA,MAAA;;sBCjFK;MACf;EArBY,QAAA,CAAA,MAAA,EAAA;IAOG,SAAA,GAAA,CAAA,EAAA,MAAA;IACD,SAAA,QAAA,EAAA,MAAA;IAGA,SAAA,MAAA,CAAA,EAcC,WAdD;EACA,CAAA,CAAA,EAcd,OAdc,CAcN,MAdM,CAAA;EAHZ,MAAA,CAAA,MAAA,EAAA;IAAO,SAAA,GAAA,CAAA,EAAA,MAAA;IAOG,SAAA,QAAgB,EAAA,MAAA;IAIb,SAAA,KAAA,CAAA,EAAA,OAAA;IACf,SAAA,SAAA,CAAA,EAAA,OAAA;IAIe,SAAA,MAAA,CAAA,EAOA,WAPA;EACP,CAAA,CAAA,EAOR,OAPQ,CAAA,IAAA,CAAA;EAAR,MAAA,CAAA,MAAA,EAAA;IAMe,SAAA,GAAA,CAAA,EAAA,MAAA;IACf,SAAA,IAAA,EAAA,MAAA;IAIe,SAAA,MAAA,CAAA,EAAA,WAAA;IAEf,SAAA,EAAA,EAAA,MAAA;EAQe,CAAA,CAAA,EARf,OAQe,CAAA,IAAA,CAAA;EACf,WAAA,CAAA,MAAA,EAAA;IAOY,SAAA,GAAA,CAAA,EAAA,MAAA;IACK,SAAA,QAAA,EAAA,MAAA;EAGF,CAAA,CAAA,EAAA;IACf,SAAA,aAAA,EAAA,MAAA;IAAO,SAAA,YAAA,EAAA,MAAA;EAGK,CAAA;EAGD,IAAA,CAAA,MAAA,EAAA;IACA,SAAA,GAAA,CAAA,EAAA,MAAA;IAKA,SAAA,QAAA,EAAA,MAAA;IAFT,SAAA,MAAA,CAAA,EAvBa,WAuBb;EAOS,CAAA,CAAA,EA7BX,OA6BW,CAAA;IACiC,SAAA,OAAA,EAAA,MAAA;IAC8B,SAAA,IAAA,EAAA,MAAA;IAI3D,SAAA,IAAA,EAAA,WAAA,GAAA,MAAA,GAAA,OAAA;EACJ,CAAA,GAAA,IAAA,CAAA;EACG,SAAA,CAAA,MAAA,EAAA;IAGA,SAAA,GAAA,CAAA,EAAA,MAAA;IACA,SAAA,IAAA,EAlCF,MAkCE,GAAA,MAAA;IAHZ,SAAA,QAAA,CAAA,EA9Be,cA8Bf;IAAO,SAAA,QAAA,EAAA,MAAA;IAOG,SAAA,KAAA,CAAA,EAAA,OAAA;IAG4C,SAAA,MAAA,CAAA,EArCzC,WAqCyC;EACtD,CAAA,CAAA,EArCF,OAqCE,CAAA,IAAA,CAAA;;AAYS,UA9CC,yBAAA,CA8CD;EAFX,SAAA,aAAA,EAAA,CAAA,MAAA,EAAA;IAWE,SAAA,OAAA,EAAA,MAAA;IAGY,SAAA,GAAA,EAvDH,MAuDG,CAAA,MAAA,EAAA,MAAA,CAAA;IACA,SAAA,GAAA,EAvDH,qBAuDG,CAAA,KAAA,CAAA;IAHoC,SAAA,MAAA,EAAA,OAAA;IAAO,SAAA,OAAA,EAAA,MAAA;QAjDvD;;kBAES;IC5DA,SAAA,aAAA,CAAA,EAAA,OAAA;IAMD,SAAA,SAAA,EAAA,WAAA,GAAA,aAAA;EAKG,CAAA,CAAA;EAMJ,SAAA,qBAAA,CAAA,EAAA,CAAA,YAAA,EDgDE,oBChDF,EAAA,GAAA,CAAA,MAAA,EAAA;IAAR,SAAA,OAAA,EAAA,OAAA;EAAO,CAAA,EAAA,GDiDoC,gBCjDpC;;;QDkDkE;EE1F/D,SAAA,oBAAA,EAAA,CAAA,MAAmC,EAAA;IAKpC,SAAA,YAAA,CAAA,EAAA,OAAA;IAIR,SAAA,MAAA,EAAA,MAAA;IAC6E,SAAA,MAAA,CAAA,EFoFhE,WEpFgE;IAAO,SAAA,GAAA,EFqF3E,qBErF2E,CAAA,KAAA,CAAA;qBFsFxE;QACZ;;IGpGU,SAAA,MAAA,EHsGE,MGtGF;IAMD,SAAA,MAAA,EHiGG,MGjGH;;;UHqGC,4BAAA;EI3GA,SAAA,WAAiB,CAAA,EAAA,MAAA;EAMjB,SAAA,eAAU,CAAA,EAAA,MAAA;EAGX,cAAA,CAAA,EAAA,CAAA,MAAA,EAAA;IAMI,SAAA,OAAA,EAAA,OAAA;EAWE,CAAA,EAAA,GJoFuC,gBIpFvC;EACD,GAAA,CAAA,EJoFd,MIpFc,CAAA,MAAA,EAAA,MAAA,CAAA;EAGA,SAAA,EAAA,EAAA,MAAA;EACA,SAAA,SAAA,EAAA,MAAA;EAHZ,SAAA,YAAA,EAAA,MAAA;EAAO,SAAA,OAAA,EAAA,MAAA;EAeD,aAAA,CAAA,MAAA,EAAA;IAAR,SAAA,OAAA,EAAA,MAAA;IACwC,SAAA,GAAA,EJ0E/B,MI1E+B,CAAA,MAAA,EAAA,MAAA,CAAA;IAAsB,SAAA,MAAA,EAAA,OAAA;IAIjD,SAAA,OAAA,CAAA,EAAA,MAAA;EACA,CAAA,CAAA,EJwEf,OIxEe,CAAA;IACD,SAAA,IAAA,EAAA,MAAA,EAAA;IAGA,SAAA,GAAA,EJsEH,MItEG,CAAA,MAAA,EAAA,MAAA,CAAA;IACA,SAAA,aAAA,CAAA,EAAA,OAAA;IAHZ,SAAA,SAAA,EAAA,WAAA,GAAA,aAAA;EAK0B,CAAA,CAAA;EACb,YAAA,CAAA,EAAA,CAAA,MAAA,EAAA;IAAM,SAAA,QAAA,EAAA,MAAA,GAAA,IAAA;;;;EClDV,CAAA,EAAA,GL6HT,OK7HS,CAAA,IAAA,CAAA;EAAuB,eAAA,CAAA,MAAA,EAAA;IACd,SAAA,MAAA,EAAA,MAAA;EAET,CAAA,CAAA,EL2HuC,OK3HvC,CAAA;IACiC,SAAA,IAAA,EAAA,MAAA;IACjB,SAAA,MAAA,EL2Hb,MK3Ha;IAAyB,SAAA,MAAA,EL4HtC,MK5HsC;;;;;ANZxC,iBE0BD,mCAAA,CF1BsB,OAAA,EAAA;EAarB,SAAA,aAAiB,EAAA,MAAA;EAejB,SAAA,SAAW,CAAA,EAAA,MAAA;EAEc,SAAA,MAAA,EAAA,MAAA;CAAR,EAAA,YAAA,EEEnB,yBFFmB,CAAA,EAAA,CAAA,MAAA,EAAA;EACG,SAAA,iBAAA,EAAA,MAAA;EAAR,SAAA,GAAA,EAAA;IACG,SAAA,MAAA,CAAA,EAAA;MAOnB,SAAA,GAAA,CAAA,EEFK,MFEL,CAAA,MAAA,EAAA,MAAA,CAAA;IAAR,CAAA;EAAO,CAAA;EAyEI,SAAA,QAAA,EAAA,MAAiB;EAEM,SAAA,UAAA,EAAA,MAAA;EAAM,SAAA,YAAA,EAAA,MAAA;CAAgB,EAAA,GEvEvD,OFuEuD,CEvE/C,4BFuE+C,CAAA;;;AAlH5C,iBGGD,mCAAA,CHHsB,OAAA,EAAA;EAarB,SAAA,aAAiB,EAAA,MAAA;EAejB,SAAA,MAAW,EAAA,MAAA;CAEc,EAAA,YAAA,EGtB3B,yBHsB2B,CAAA,EAAA;EAAR,eAAA,EAAA,CAAA,MAAA,EAAA;IACG,SAAA,KAAA,EAAA;MAAR,SAAA,aAAA,EAAA,MAAA;IACG,CAAA;EAOnB,CAAA,EAAA,GG3BN,OH2BM,CAAA;IAAR,SAAA,gBAAA,EAAA,OAAA;IAAO,SAAA,OAAA,EAAA,OAAA;EAyEI,CAAA,CAAA;EAEuB,aAAA,EAAA,CAAA,MAAA,EAAA;IAAM,SAAA,KAAA,EAAA;MAAgB,SAAA,aAAA,EAAA,MAAA;IAAwB,CAAA;EAAR,CAAA,EAAA,GGrGO,OHqGP,CAAA,IAAA,CAAA;CACzE;;;UInHa,4BAAA;EJAA,SAAA,aAAA,EAAqB,MAAA;EAarB,SAAA,SAAA,CAAA,EAAiB,MAAA;EAejB,SAAA,MAAW,EAAA,MAAA;;AAEM,iBIxBlB,2BAAA,CJwBkB,MAAA,EIvBzB,MJuByB,CAAA,MAAA,EAAA,OAAA,CAAA,CAAA,EItB/B,4BJsB+B;;;UK9BjB,iBAAA;ELAA,SAAA,OAAA,EAAA,MAAqB;EAarB,SAAA,UAAA,EAAiB,MAAA;EAejB,SAAA,IAAA,EAAW,MAAA;;AAEM,UKxBjB,UAAA,CLwBiB;EACG,SAAA,sBAAA,EAAA,CAAA,MAAA,EAAA;IAAR,SAAA,OAAA,EAAA,MAAA;IACG,SAAA,GAAA,EKvBhB,MLuBgB,CAAA,MAAA,EAAA,MAAA,CAAA;IAOnB,SAAA,OAAA,CAAA,EAAA,MAAA;EAAR,CAAA,EAAA,GAAA,MAAA;EAAO,SAAA,kBAAA,EAAA,CAAA,IAAA,EAAA,SAAA,MAAA,EAAA,EAAA,GAAA,MAAA;EAyEI,SAAA,mBAAiB,EAAA,CAAA,MAAA,EAAA;IAEM,SAAA,aAAA,EAAA,MAAA;IAAM,SAAA,OAAA,EKnGzB,iBLmGyB;IAAgB,SAAA,GAAA,CAAA,EAAA,OAAA;EAAwB,CAAA,EAAA,GAAA,MAAA,EAAA;EAAR,SAAA,gCAAA,EAAA,CAAA,MAAA,EAAA;IACzE,SAAA,OAAA,EAAA;MAAW,SAAA,uBAAA,EAAA,MAAA;;;;QCrGE,SAAA,IAAoB,CAAA,EAAA,MAAA,EAAA;QAOjB,SAAA,MAAA,EAAA,MAAA;QACD,SAAA,MAAA,CAAA,EIIG,WJJH;QAGA,SAAA,KAAA,CAAA,EIEE,MJFF,GAAA,MAAA;MACA,CAAA,EAAA,GIEV,OJFU,CAAA;QAHZ,SAAA,IAAA,EAAA,MAAA;QAAO,SAAA,MAAA,EIOO,MJPP;QAOG,SAAgB,MAAA,EICZ,MJDY;MAIb,CAAA,CAAA;IACf,CAAA;IAIe,SAAA,OAAA,EAAA,OAAA;EACP,CAAA,EAAA,GIZG,gBJYH;EAAR,SAAA,mCAAA,EAAA,CAAA,QAAA,EAAA;IAMe,SAAA,OAAA,EAAA,MAAA;IACf,SAAA,YAAA,CAAA,EAAA,MAAA;IAIe,SAAA,qBAAA,EAAA,OAAA;IAEf,SAAA,MAAA,EAAA,MAAA;IAQe,SAAA,cAAA,EAAA,OAAA;IACf,SAAA,aAAA,EAAA,MAAA;EAOY,CAAA,EAAA,GI1BV,OJ0BU,CI1BF,iBJ0BE,CAAA;EACK,SAAA,wBAAA,CAAA,EAAA,CAAA,OAAA,EI1ByB,iBJ0BzB,EAAA,GI1B+C,OJ0B/C,CAAA,IAAA,CAAA;EAGF,SAAA,oBAAA,EAAA,CAAA,MAAA,EAAA;IACf,SAAA,YAAA,CAAA,EAAA,OAAA;IAAO,SAAA,aAAA,EAAA,MAAA;IAGK,SAAA,OAAA,EI7BG,iBJ6BsB;IAG1B,SAAA,MAAA,CAAA,EI/BI,WJ+BJ;IACA,SAAA,KAAA,CAAA,EI/BG,MJ+BH,GAAA,MAAA;EAKA,CAAA,EAAA,GInCT,OJmCS,CAAA;IAFT,SAAA,IAAA,EAAA,MAAA;IAOS,SAAA,MAAA,EItCG,MJsCH;IACiC,SAAA,MAAA,EItC9B,MJsC8B;EAC8B,CAAA,CAAA;EAI3D,SAAA,eAAA,EAAA,CAAA,GAAA,EIzCa,MAAA,CAAO,UJyCpB,EAAA,GAAA;IACJ,SAAA,OAAA,EIzCI,MJyCJ,CAAA,MAAA,EAAA,MAAA,CAAA;EACG,CAAA;;;;ADtFF,iBMND,iBAAA,CNMkB,GAAA,EMNK,UNML,CAAA,EAAA;EAejB,SAAA,aAAW,EMpBH,yBNoBG,CAAA,eAAA,CAAA;EAEc,SAAA,qBAAA,EAAA,CAAA,YAAA,EMpB1B,oBNoB0B,EAAA,GAAA,CAAA,MAAA,EAAA;IAAR,SAAA,OAAA,EAAA,OAAA;EACG,CAAA,EAAA,GMpBY,gBNoBZ;EAAR,SAAA,oBAAA,EMnBG,yBNmBH,CAAA,sBAAA,CAAA;CACG;;;AAnBhC,cODM,MPCW,EAAA;EAeA,EAAA,EAAA,MAAA;EAEyB,IAAA,EAAA,MAAA;EAAR,WAAA,EAAA,MAAA;EACG,QAAA,CAAA,GAAA,EAAA;IAAR,SAAA,YAAA,EObJ,MPaI,CAAA,MAAA,EAAA,OAAA,CAAA;IACG,SAAA,gBAAA,EAAA,MAAA;EAOnB,CAAA,CAAA,EAAA,IAAA;CAAR;;;AAT6B,cQxBrB,qCAAA,GRwBqB,oCAAA"}

package/dist/index.js

@@ -1,18 +1,41 @@
 //#region src/controller-lease-client.ts
+function objectValue(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function isSshResponse(value) {
+	const record = objectValue(value);
+	return record !== void 0 && typeof Reflect.get(record, "host") === "string" && typeof Reflect.get(record, "identityPem") === "string" && typeof Reflect.get(record, "knownHostsLine") === "string" && typeof Reflect.get(record, "port") === "number" && typeof Reflect.get(record, "user") === "string";
+}
+function isLeasePeekSshResponse(value) {
+	const record = objectValue(value);
+	return record !== void 0 && typeof Reflect.get(record, "host") === "string" && typeof Reflect.get(record, "port") === "number" && typeof Reflect.get(record, "user") === "string";
+}
 function isGondolinLeaseResponse$1(value) {
-	return typeof value === "object" && value !== null && typeof value.leaseId === "string" && typeof value.tcpSlot === "number" && typeof value.workdir === "string";
+	const record = objectValue(value);
+	return record !== void 0 && typeof Reflect.get(record, "leaseId") === "string" && isSshResponse(Reflect.get(record, "ssh")) && typeof Reflect.get(record, "tcpSlot") === "number" && typeof Reflect.get(record, "workdir") === "string";
+}
+function isLeasePeekResponse(value) {
+	const record = objectValue(value);
+	return record !== void 0 && typeof Reflect.get(record, "createdAt") === "number" && typeof Reflect.get(record, "lastUsedAt") === "number" && typeof Reflect.get(record, "leaseId") === "string" && typeof Reflect.get(record, "profileId") === "string" && typeof Reflect.get(record, "scopeKey") === "string" && isLeasePeekSshResponse(Reflect.get(record, "ssh")) && typeof Reflect.get(record, "tcpSlot") === "number" && typeof Reflect.get(record, "zoneId") === "string";
+}
+async function readJsonResponse(response, context, isExpectedResponse) {
+	if (!response.ok) {
+		const errorBody = await response.text().catch(() => "(unreadable)");
+		throw new TypeError(`${context} returned HTTP ${response.status}: ${errorBody}`);
+	}
+	const payload = await response.json();
+	if (!isExpectedResponse(payload)) throw new TypeError(`${context} returned an invalid response: ${JSON.stringify(payload).slice(0, 200)}`);
+	return payload;
 }
 function createLeaseClient(options) {
 	const fetchImpl = options.fetchImpl ?? fetch;
 	const baseUrl = options.controllerUrl.replace(/\/$/u, "");
 	return {
-		getLeaseStatus: async (leaseId) => {
-			const response = await fetchImpl(`${baseUrl}/lease/${leaseId}`);
-			if (!response.ok) {
-				const errorBody = await response.text().catch(() => "(unreadable)");
-				throw new TypeError(`Controller lease status API returned HTTP ${response.status}: ${errorBody}`);
-			}
-			return await response.json();
+		keepLeaseAlive: async (leaseId) => {
+			return await readJsonResponse(await fetchImpl(`${baseUrl}/lease/${leaseId}`), "Controller lease keepalive API", isGondolinLeaseResponse$1);
+		},
+		peekLease: async (leaseId) => {
+			return await readJsonResponse(await fetchImpl(`${baseUrl}/lease/${leaseId}/peek`), "Controller lease peek API", isLeasePeekResponse);
 		},
 		releaseLease: async (leaseId) => {
 			await fetchImpl(`${baseUrl}/lease/${leaseId}`, { method: "DELETE" });
@@ -49,20 +72,37 @@ function buildShellScriptWithArgs(script, args) {
 
 //#endregion
 //#region src/sandbox-backend/sandbox-backend-handle-factory.ts
+function scopeCacheKey(params) {
+	return [
+		params.zoneId,
+		params.scopeKey,
+		params.profileId,
+		params.agentWorkspaceDir,
+		params.workspaceDir
+	].join("\0");
+}
 function createGondolinSandboxBackendFactory(options, dependencies) {
 	const scopeCache = /* @__PURE__ */ new Map();
 	return async (params) => {
+		const profileId = options.profileId ?? "standard";
+		const cacheKey = scopeCacheKey({
+			agentWorkspaceDir: params.agentWorkspaceDir,
+			profileId,
+			scopeKey: params.scopeKey,
+			workspaceDir: params.workspaceDir,
+			zoneId: options.zoneId
+		});
 		const leaseClient = dependencies.createLeaseClient?.({ controllerUrl: options.controllerUrl }) ?? createLeaseClient({ controllerUrl: options.controllerUrl });
-		const cachedEntry = scopeCache.get(params.scopeKey);
+		const cachedEntry = scopeCache.get(cacheKey);
 		if (cachedEntry) try {
-			await leaseClient.getLeaseStatus(cachedEntry.lease.leaseId);
+			await leaseClient.keepLeaseAlive(cachedEntry.lease.leaseId);
 			return cachedEntry.handle;
 		} catch {
-			scopeCache.delete(params.scopeKey);
+			scopeCache.delete(cacheKey);
 		}
 		const leaseResponse = await leaseClient.requestLease({
 			agentWorkspaceDir: params.agentWorkspaceDir,
-			profileId: options.profileId ?? "standard",
+			profileId,
 			scopeKey: params.scopeKey,
 			workspaceDir: params.workspaceDir,
 			zoneId: options.zoneId
@@ -79,7 +119,7 @@ function createGondolinSandboxBackendFactory(options, dependencies) {
 			scopeKey: params.scopeKey,
 			zoneId: options.zoneId
 		});
-		scopeCache.set(params.scopeKey, {
+		scopeCache.set(cacheKey, {
 			handle,
 			lease
 		});
@@ -134,7 +174,7 @@ function createGondolinSandboxBackendManager(options, dependencies) {
 			try {
 				return {
 					configLabelMatch: true,
-					running: await leaseClient.getLeaseStatus(params.entry.containerName) !== null
+					running: await leaseClient.peekLease(params.entry.containerName) !== null
 				};
 			} catch {
 				return {
@@ -209,7 +249,7 @@ function createBackendDeps(ssh) {
 				strictHostKeyChecking: false,
 				target: `${sshCreds.user}@${sshCreds.host}:${sshCreds.port}`,
 				updateHostKeys: false,
-				workspaceRoot: "/workspace"
+				workspaceRoot: "/work"
 			});
 			return await ssh.runSshSandboxCommand({
 				...allowFailure !== void 0 ? { allowFailure } : {},

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["isGondolinLeaseResponse","boundRunRemoteShellScript: FsBridgeLeaseContext['runRemoteShellScript']"],"sources":["../src/controller-lease-client.ts","../src/sandbox-backend/sandbox-backend-contract.ts","../src/sandbox-backend/sandbox-shell-script.ts","../src/sandbox-backend/sandbox-backend-handle-factory.ts","../src/sandbox-backend/sandbox-backend-manager.ts","../src/gondolin-plugin-config.ts","../src/openclaw-backend-dependencies.ts","../src/openclaw-sandbox-sdk-contract.ts","../src/openclaw-plugin-registration.ts","../src/index.ts"],"sourcesContent":["export interface GondolinLeaseResponse {\n\treadonly leaseId: string;\n\treadonly ssh: {\n\t\treadonly host: string;\n\t\treadonly identityPem: string;\n\t\treadonly knownHostsLine: string;\n\t\treadonly port: number;\n\t\treadonly user: string;\n\t};\n\treadonly tcpSlot: number;\n\treadonly workdir: string;\n}\n\nexport interface LeaseClient {\n\tgetLeaseStatus(leaseId: string): Promise<unknown>;\n\treleaseLease(leaseId: string): Promise<void>;\n\trequestLease(request: {\n\t\treadonly agentWorkspaceDir: string;\n\t\treadonly profileId: string;\n\t\treadonly scopeKey: string;\n\t\treadonly workspaceDir: string;\n\t\treadonly zoneId: string;\n\t}): Promise<GondolinLeaseResponse>;\n}\n\nfunction isGondolinLeaseResponse(value: unknown): value is GondolinLeaseResponse {\n\treturn (\n\t\ttypeof value === 'object' &&\n\t\tvalue !== null &&\n\t\ttypeof (value as { leaseId?: unknown }).leaseId === 'string' &&\n\t\ttypeof (value as { tcpSlot?: unknown }).tcpSlot === 'number' &&\n\t\ttypeof (value as { workdir?: unknown }).workdir === 'string'\n\t);\n}\n\nexport function createLeaseClient(options: {\n\treadonly controllerUrl: string;\n\treadonly fetchImpl?: (input: string | URL | Request, init?: RequestInit) => Promise<Response>;\n}): LeaseClient {\n\tconst fetchImpl = options.fetchImpl ?? fetch;\n\tconst baseUrl = options.controllerUrl.replace(/\\/$/u, '');\n\n\treturn {\n\t\tgetLeaseStatus: async (leaseId: string): Promise<unknown> => {\n\t\t\tconst response = await fetchImpl(`${baseUrl}/lease/${leaseId}`);\n\t\t\tif (!response.ok) {\n\t\t\t\tconst errorBody = await response.text().catch(() => '(unreadable)');\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t`Controller lease status API returned HTTP ${response.status}: ${errorBody}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn await response.json();\n\t\t},\n\t\treleaseLease: async (leaseId: string): Promise<void> => {\n\t\t\tawait fetchImpl(`${baseUrl}/lease/${leaseId}`, {\n\t\t\t\tmethod: 'DELETE',\n\t\t\t});\n\t\t},\n\t\trequestLease: async (request): Promise<GondolinLeaseResponse> => {\n\t\t\tconst response = await fetchImpl(`${baseUrl}/lease`, {\n\t\t\t\tbody: JSON.stringify(request),\n\t\t\t\theaders: {\n\t\t\t\t\t'content-type': 'application/json',\n\t\t\t\t},\n\t\t\t\tmethod: 'POST',\n\t\t\t});\n\t\t\tif (!response.ok) {\n\t\t\t\tconst errorBody = await response.text().catch(() => '(unreadable)');\n\t\t\t\tthrow new TypeError(`Controller lease API returned HTTP ${response.status}: ${errorBody}`);\n\t\t\t}\n\t\t\tconst payload = await response.json();\n\t\t\tif (!isGondolinLeaseResponse(payload)) {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t`Controller returned an invalid lease response: ${JSON.stringify(payload).slice(0, 200)}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn payload;\n\t\t},\n\t};\n}\n","import type { GondolinLeaseResponse, LeaseClient } from '../controller-lease-client.js';\n\nexport function isGondolinLeaseResponse(value: unknown): value is GondolinLeaseResponse {\n\treturn (\n\t\ttypeof value === 'object' &&\n\t\tvalue !== null &&\n\t\ttypeof (value as { leaseId?: unknown }).leaseId === 'string' &&\n\t\ttypeof (value as { tcpSlot?: unknown }).tcpSlot === 'number' &&\n\t\ttypeof (value as { workdir?: unknown }).workdir === 'string' &&\n\t\ttypeof (value as { ssh?: unknown }).ssh === 'object' &&\n\t\t(value as { ssh?: unknown }).ssh !== null\n\t);\n}\n\nexport interface FsBridgeLeaseContext {\n\treadonly remoteAgentWorkspaceDir: string;\n\treadonly remoteWorkspaceDir: string;\n\treadonly runRemoteShellScript: (params: {\n\t\treadonly allowFailure?: boolean;\n\t\treadonly args?: string[];\n\t\treadonly script: string;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly stdin?: Buffer | string;\n\t}) => Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n}\n\nexport interface GondolinFsBridge {\n\tmkdirp(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\treadFile(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<Buffer>;\n\tremove(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly force?: boolean;\n\t\treadonly recursive?: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\trename(params: {\n\t\treadonly cwd?: string;\n\t\treadonly from: string;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly to: string;\n\t}): Promise<void>;\n\tresolvePath(params: { readonly cwd?: string; readonly filePath: string }): {\n\t\treadonly containerPath: string;\n\t\treadonly relativePath: string;\n\t};\n\tstat(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<{\n\t\treadonly mtimeMs: number;\n\t\treadonly size: number;\n\t\treadonly type: 'directory' | 'file' | 'other';\n\t} | null>;\n\twriteFile(params: {\n\t\treadonly cwd?: string;\n\t\treadonly data: Buffer | string;\n\t\treadonly encoding?: BufferEncoding;\n\t\treadonly filePath: string;\n\t\treadonly mkdir?: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n}\n\nexport interface CreateBackendDependencies {\n\treadonly buildExecSpec: (params: {\n\t\treadonly command: string;\n\t\treadonly env: Record<string, string>;\n\t\treadonly ssh: GondolinLeaseResponse['ssh'];\n\t\treadonly usePty: boolean;\n\t\treadonly workdir: string;\n\t}) => Promise<{\n\t\treadonly argv: string[];\n\t\treadonly env: Record<string, string>;\n\t\treadonly finalizeToken?: unknown;\n\t\treadonly stdinMode: 'pipe-open' | 'pipe-closed';\n\t}>;\n\treadonly createFsBridgeBuilder?: (\n\t\tleaseContext: FsBridgeLeaseContext,\n\t) => (params: { readonly sandbox: unknown }) => GondolinFsBridge;\n\treadonly createLeaseClient?: (options: { readonly controllerUrl: string }) => LeaseClient;\n\treadonly runRemoteShellScript: (params: {\n\t\treadonly allowFailure?: boolean;\n\t\treadonly script: string;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly ssh: GondolinLeaseResponse['ssh'];\n\t\treadonly stdin?: Buffer | string;\n\t}) => Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n}\n\nexport interface GondolinSandboxBackendHandle {\n\treadonly configLabel?: string;\n\treadonly configLabelKind?: string;\n\tcreateFsBridge?: (params: { readonly sandbox: unknown }) => GondolinFsBridge;\n\tenv?: Record<string, string>;\n\treadonly id: string;\n\treadonly runtimeId: string;\n\treadonly runtimeLabel: string;\n\treadonly workdir: string;\n\tbuildExecSpec(params: {\n\t\treadonly command: string;\n\t\treadonly env: Record<string, string>;\n\t\treadonly usePty: boolean;\n\t\treadonly workdir?: string;\n\t}): Promise<{\n\t\treadonly argv: string[];\n\t\treadonly env: Record<string, string>;\n\t\treadonly finalizeToken?: unknown;\n\t\treadonly stdinMode: 'pipe-open' | 'pipe-closed';\n\t}>;\n\tfinalizeExec?: (params: {\n\t\treadonly exitCode: number | null;\n\t\treadonly status: 'completed' | 'failed';\n\t\treadonly timedOut: boolean;\n\t\treadonly token?: unknown;\n\t}) => Promise<void>;\n\trunShellCommand(params: { readonly script: string }): Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n}\n\nexport interface CachedScopeEntry {\n\treadonly handle: GondolinSandboxBackendHandle;\n\treadonly lease: GondolinLeaseResponse;\n}\n","export function buildShellScriptWithArgs(script: string, args?: readonly string[]): string {\n\tif (!args || args.length === 0) {\n\t\treturn script;\n\t}\n\n\tconst escapedArgs = args.map((arg) => `'${arg.replace(/'/g, \"'\\\\''\")}'`).join(' ');\n\treturn `set -- ${escapedArgs}; ${script}`;\n}\n","import { createLeaseClient, type GondolinLeaseResponse } from '../controller-lease-client.js';\nimport {\n\ttype CachedScopeEntry,\n\ttype CreateBackendDependencies,\n\ttype FsBridgeLeaseContext,\n\ttype GondolinSandboxBackendHandle,\n\tisGondolinLeaseResponse,\n} from './sandbox-backend-contract.js';\nimport { buildShellScriptWithArgs } from './sandbox-shell-script.js';\n\nexport function createGondolinSandboxBackendFactory(\n\toptions: {\n\t\treadonly controllerUrl: string;\n\t\treadonly profileId?: string;\n\t\treadonly zoneId: string;\n\t},\n\tdependencies: CreateBackendDependencies,\n): (params: {\n\treadonly agentWorkspaceDir: string;\n\treadonly cfg: {\n\t\treadonly docker?: {\n\t\t\treadonly env?: Record<string, string>;\n\t\t};\n\t};\n\treadonly scopeKey: string;\n\treadonly sessionKey: string;\n\treadonly workspaceDir: string;\n}) => Promise<GondolinSandboxBackendHandle> {\n\tconst scopeCache = new Map<string, CachedScopeEntry>();\n\n\treturn async (params) => {\n\t\tconst leaseClient =\n\t\t\tdependencies.createLeaseClient?.({\n\t\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\t}) ?? createLeaseClient({ controllerUrl: options.controllerUrl });\n\t\tconst cachedEntry = scopeCache.get(params.scopeKey);\n\t\tif (cachedEntry) {\n\t\t\ttry {\n\t\t\t\tawait leaseClient.getLeaseStatus(cachedEntry.lease.leaseId);\n\t\t\t\treturn cachedEntry.handle;\n\t\t\t} catch {\n\t\t\t\tscopeCache.delete(params.scopeKey);\n\t\t\t}\n\t\t}\n\t\tconst leaseResponse = await leaseClient.requestLease({\n\t\t\tagentWorkspaceDir: params.agentWorkspaceDir,\n\t\t\tprofileId: options.profileId ?? 'standard',\n\t\t\tscopeKey: params.scopeKey,\n\t\t\tworkspaceDir: params.workspaceDir,\n\t\t\tzoneId: options.zoneId,\n\t\t});\n\t\tif (!isGondolinLeaseResponse(leaseResponse)) {\n\t\t\tthrow new TypeError('Controller lease API returned an unexpected response.');\n\t\t}\n\n\t\tconst lease = leaseResponse;\n\t\tconst handle = createSandboxBackendHandle({\n\t\t\tcfg: params.cfg,\n\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\tcreateFsBridgeBuilder: dependencies.createFsBridgeBuilder,\n\t\t\tlease,\n\t\t\trunRemoteShellScript: dependencies.runRemoteShellScript,\n\t\t\tbuildExecSpec: dependencies.buildExecSpec,\n\t\t\tscopeKey: params.scopeKey,\n\t\t\tzoneId: options.zoneId,\n\t\t});\n\t\tscopeCache.set(params.scopeKey, { handle, lease });\n\t\treturn handle;\n\t};\n}\n\nfunction createSandboxBackendHandle(options: {\n\treadonly buildExecSpec: CreateBackendDependencies['buildExecSpec'];\n\treadonly cfg: {\n\t\treadonly docker?: {\n\t\t\treadonly env?: Record<string, string>;\n\t\t};\n\t};\n\treadonly controllerUrl: string;\n\treadonly createFsBridgeBuilder?: CreateBackendDependencies['createFsBridgeBuilder'];\n\treadonly lease: GondolinLeaseResponse;\n\treadonly runRemoteShellScript: CreateBackendDependencies['runRemoteShellScript'];\n\treadonly scopeKey: string;\n\treadonly zoneId: string;\n}): GondolinSandboxBackendHandle {\n\tconst boundRunRemoteShellScript: FsBridgeLeaseContext['runRemoteShellScript'] = async (\n\t\tshellParams,\n\t) =>\n\t\tawait options.runRemoteShellScript({\n\t\t\t...(shellParams.allowFailure !== undefined ? { allowFailure: shellParams.allowFailure } : {}),\n\t\t\tscript: buildShellScriptWithArgs(shellParams.script, shellParams.args),\n\t\t\t...(shellParams.signal !== undefined ? { signal: shellParams.signal } : {}),\n\t\t\tssh: options.lease.ssh,\n\t\t\t...(shellParams.stdin !== undefined ? { stdin: shellParams.stdin } : {}),\n\t\t});\n\n\tconst createFsBridge = options.createFsBridgeBuilder?.({\n\t\tremoteAgentWorkspaceDir: options.lease.workdir,\n\t\tremoteWorkspaceDir: options.lease.workdir,\n\t\trunRemoteShellScript: boundRunRemoteShellScript,\n\t});\n\n\treturn {\n\t\t...(createFsBridge ? { createFsBridge } : {}),\n\t\t...(options.cfg.docker?.env ? { env: options.cfg.docker.env } : {}),\n\t\tconfigLabel: `${options.controllerUrl} (${options.zoneId})`,\n\t\tconfigLabelKind: 'VM',\n\t\tid: 'gondolin',\n\t\truntimeId: options.lease.leaseId,\n\t\truntimeLabel: options.lease.leaseId,\n\t\tworkdir: options.lease.workdir,\n\t\tbuildExecSpec: async (execParams) =>\n\t\t\tawait options.buildExecSpec({\n\t\t\t\tcommand: execParams.command,\n\t\t\t\tenv: execParams.env,\n\t\t\t\tssh: options.lease.ssh,\n\t\t\t\tusePty: execParams.usePty,\n\t\t\t\tworkdir: execParams.workdir ?? options.lease.workdir,\n\t\t\t}),\n\t\tfinalizeExec: async (finalizeParams) => {\n\t\t\tif (\n\t\t\t\tfinalizeParams.token &&\n\t\t\t\ttypeof finalizeParams.token === 'object' &&\n\t\t\t\t'dispose' in finalizeParams.token\n\t\t\t) {\n\t\t\t\tawait (finalizeParams.token as { dispose: () => Promise<void> }).dispose();\n\t\t\t}\n\t\t},\n\t\trunShellCommand: async (commandParams) =>\n\t\t\tawait options.runRemoteShellScript({\n\t\t\t\tscript: commandParams.script,\n\t\t\t\tssh: options.lease.ssh,\n\t\t\t}),\n\t} satisfies GondolinSandboxBackendHandle;\n}\n","import { createLeaseClient } from '../controller-lease-client.js';\nimport type { CreateBackendDependencies } from './sandbox-backend-contract.js';\n\nexport function createGondolinSandboxBackendManager(\n\toptions: {\n\t\treadonly controllerUrl: string;\n\t\treadonly zoneId: string;\n\t},\n\tdependencies: CreateBackendDependencies,\n): {\n\tdescribeRuntime: (params: {\n\t\treadonly entry: { readonly containerName: string };\n\t}) => Promise<{ readonly configLabelMatch: boolean; readonly running: boolean }>;\n\tremoveRuntime: (params: { readonly entry: { readonly containerName: string } }) => Promise<void>;\n} {\n\treturn {\n\t\tdescribeRuntime: async (params) => {\n\t\t\tconst leaseClient =\n\t\t\t\tdependencies.createLeaseClient?.({\n\t\t\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\t\t}) ?? createLeaseClient({ controllerUrl: options.controllerUrl });\n\t\t\ttry {\n\t\t\t\tconst leaseStatus = await leaseClient.getLeaseStatus(params.entry.containerName);\n\t\t\t\treturn { configLabelMatch: true, running: leaseStatus !== null };\n\t\t\t} catch {\n\t\t\t\treturn { configLabelMatch: false, running: false };\n\t\t\t}\n\t\t},\n\t\tremoveRuntime: async (params) => {\n\t\t\tconst leaseClient =\n\t\t\t\tdependencies.createLeaseClient?.({\n\t\t\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\t\t}) ?? createLeaseClient({ controllerUrl: options.controllerUrl });\n\t\t\tawait leaseClient.releaseLease(params.entry.containerName);\n\t\t},\n\t};\n}\n","export interface ResolvedGondolinPluginConfig {\n\treadonly controllerUrl: string;\n\treadonly profileId?: string;\n\treadonly zoneId: string;\n}\n\nexport function resolveGondolinPluginConfig(\n\tconfig: Record<string, unknown>,\n): ResolvedGondolinPluginConfig {\n\tif (typeof config.controllerUrl !== 'string' || typeof config.zoneId !== 'string') {\n\t\tthrow new Error('Gondolin plugin config requires controllerUrl and zoneId.');\n\t}\n\n\treturn {\n\t\tcontrollerUrl: config.controllerUrl,\n\t\t...(typeof config.profileId === 'string' ? { profileId: config.profileId } : {}),\n\t\tzoneId: config.zoneId,\n\t};\n}\n","import type { SshHelpers, SshSandboxSession } from './openclaw-sandbox-sdk-contract.js';\nimport type {\n\tCreateBackendDependencies,\n\tFsBridgeLeaseContext,\n\tGondolinFsBridge,\n} from './sandbox-backend-factory.js';\n\nexport function createBackendDeps(ssh: SshHelpers): {\n\treadonly buildExecSpec: CreateBackendDependencies['buildExecSpec'];\n\treadonly createFsBridgeBuilder: (\n\t\tleaseContext: FsBridgeLeaseContext,\n\t) => (params: { readonly sandbox: unknown }) => GondolinFsBridge;\n\treadonly runRemoteShellScript: CreateBackendDependencies['runRemoteShellScript'];\n} {\n\treturn {\n\t\tbuildExecSpec: async ({ command, env, ssh: sshCreds, usePty, workdir }) => {\n\t\t\tconst session = await ssh.createSshSandboxSessionFromSettings({\n\t\t\t\tcommand: 'ssh',\n\t\t\t\tidentityData: sshCreds.identityPem,\n\t\t\t\tstrictHostKeyChecking: false,\n\t\t\t\ttarget: `${sshCreds.user}@${sshCreds.host}:${sshCreds.port}`,\n\t\t\t\tupdateHostKeys: false,\n\t\t\t\tworkspaceRoot: workdir,\n\t\t\t});\n\t\t\tconst disposeSshSandboxSession = ssh.disposeSshSandboxSession;\n\t\t\treturn {\n\t\t\t\targv: ssh.buildSshSandboxArgv({\n\t\t\t\t\tremoteCommand: ssh.buildExecRemoteCommand({\n\t\t\t\t\t\tcommand,\n\t\t\t\t\t\tenv,\n\t\t\t\t\t\tworkdir,\n\t\t\t\t\t}),\n\t\t\t\t\tsession,\n\t\t\t\t\ttty: usePty,\n\t\t\t\t}),\n\t\t\t\tenv: ssh.sanitizeEnvVars(process.env).allowed,\n\t\t\t\tfinalizeToken: {\n\t\t\t\t\tdispose: async (): Promise<void> => {\n\t\t\t\t\t\tif (disposeSshSandboxSession) {\n\t\t\t\t\t\t\tawait disposeSshSandboxSession(session);\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\tsession,\n\t\t\t\t},\n\t\t\t\tstdinMode: 'pipe-open' as const,\n\t\t\t};\n\t\t},\n\t\tcreateFsBridgeBuilder:\n\t\t\t(leaseContext: FsBridgeLeaseContext) =>\n\t\t\t(params: { readonly sandbox: unknown }): GondolinFsBridge =>\n\t\t\t\tssh.createRemoteShellSandboxFsBridge({\n\t\t\t\t\tsandbox: params.sandbox,\n\t\t\t\t\truntime: {\n\t\t\t\t\t\tremoteAgentWorkspaceDir: leaseContext.remoteAgentWorkspaceDir,\n\t\t\t\t\t\tremoteWorkspaceDir: leaseContext.remoteWorkspaceDir,\n\t\t\t\t\t\trunRemoteShellScript: leaseContext.runRemoteShellScript,\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\trunRemoteShellScript: async ({ allowFailure, script, signal, ssh: sshCreds, stdin }) => {\n\t\t\tconst session = await ssh.createSshSandboxSessionFromSettings({\n\t\t\t\tcommand: 'ssh',\n\t\t\t\tidentityData: sshCreds.identityPem,\n\t\t\t\tstrictHostKeyChecking: false,\n\t\t\t\ttarget: `${sshCreds.user}@${sshCreds.host}:${sshCreds.port}`,\n\t\t\t\tupdateHostKeys: false,\n\t\t\t\tworkspaceRoot: '/workspace',\n\t\t\t});\n\t\t\treturn await ssh.runSshSandboxCommand({\n\t\t\t\t...(allowFailure !== undefined ? { allowFailure } : {}),\n\t\t\t\tremoteCommand: ssh.buildRemoteCommand(['/bin/sh', '-c', script, 'gondolin-sandbox-fs']),\n\t\t\t\tsession,\n\t\t\t\t...(signal !== undefined ? { signal } : {}),\n\t\t\t\t...(stdin !== undefined ? { stdin } : {}),\n\t\t\t});\n\t\t},\n\t};\n}\n\nexport type { SshHelpers, SshSandboxSession };\n","export interface SshSandboxSession {\n\treadonly command: string;\n\treadonly configPath: string;\n\treadonly host: string;\n}\n\nexport interface SshHelpers {\n\treadonly buildExecRemoteCommand: (params: {\n\t\treadonly command: string;\n\t\treadonly env: Record<string, string>;\n\t\treadonly workdir?: string;\n\t}) => string;\n\treadonly buildRemoteCommand: (argv: readonly string[]) => string;\n\treadonly buildSshSandboxArgv: (params: {\n\t\treadonly remoteCommand: string;\n\t\treadonly session: SshSandboxSession;\n\t\treadonly tty?: boolean;\n\t}) => string[];\n\treadonly createRemoteShellSandboxFsBridge: (params: {\n\t\treadonly runtime: {\n\t\t\treadonly remoteAgentWorkspaceDir: string;\n\t\t\treadonly remoteWorkspaceDir: string;\n\t\t\treadonly runRemoteShellScript: (shellParams: {\n\t\t\t\treadonly allowFailure?: boolean;\n\t\t\t\treadonly args?: string[];\n\t\t\t\treadonly script: string;\n\t\t\t\treadonly signal?: AbortSignal;\n\t\t\t\treadonly stdin?: Buffer | string;\n\t\t\t}) => Promise<{\n\t\t\t\treadonly code: number;\n\t\t\t\treadonly stderr: Buffer;\n\t\t\t\treadonly stdout: Buffer;\n\t\t\t}>;\n\t\t};\n\t\treadonly sandbox: unknown;\n\t}) => import('./sandbox-backend-factory.js').GondolinFsBridge;\n\treadonly createSshSandboxSessionFromSettings: (settings: {\n\t\treadonly command: string;\n\t\treadonly identityData?: string;\n\t\treadonly strictHostKeyChecking: boolean;\n\t\treadonly target: string;\n\t\treadonly updateHostKeys: boolean;\n\t\treadonly workspaceRoot: string;\n\t}) => Promise<SshSandboxSession>;\n\treadonly disposeSshSandboxSession?: (session: SshSandboxSession) => Promise<void>;\n\treadonly runSshSandboxCommand: (params: {\n\t\treadonly allowFailure?: boolean;\n\t\treadonly remoteCommand: string;\n\t\treadonly session: SshSandboxSession;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly stdin?: Buffer | string;\n\t}) => Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n\treadonly sanitizeEnvVars: (env: NodeJS.ProcessEnv) => {\n\t\treadonly allowed: Record<string, string>;\n\t};\n}\n\nexport function assertSdkShape(value: unknown): asserts value is SshHelpers & {\n\tregisterSandboxBackend: (\n\t\tid: string,\n\t\tregistration: {\n\t\t\tfactory: ReturnType<\n\t\t\t\ttypeof import('./sandbox-backend-factory.js').createGondolinSandboxBackendFactory\n\t\t\t>;\n\t\t\tmanager?: ReturnType<\n\t\t\t\ttypeof import('./sandbox-backend-factory.js').createGondolinSandboxBackendManager\n\t\t\t>;\n\t\t},\n\t) => void;\n} {\n\tif (typeof value !== 'object' || value === null) {\n\t\tthrow new TypeError('OpenClaw SDK module is not an object');\n\t}\n\n\tfor (const exportName of [\n\t\t'buildExecRemoteCommand',\n\t\t'buildRemoteCommand',\n\t\t'buildSshSandboxArgv',\n\t\t'createRemoteShellSandboxFsBridge',\n\t\t'createSshSandboxSessionFromSettings',\n\t\t'runSshSandboxCommand',\n\t\t'sanitizeEnvVars',\n\t\t'registerSandboxBackend',\n\t] as const) {\n\t\tif (typeof (value as Record<string, unknown>)[exportName] !== 'function') {\n\t\t\tthrow new TypeError(`OpenClaw SDK missing required export: ${exportName}`);\n\t\t}\n\t}\n}\n","import { resolveGondolinPluginConfig } from './gondolin-plugin-config.js';\nimport { createBackendDeps } from './openclaw-backend-dependencies.js';\nimport {\n\tassertSdkShape,\n\ttype SshHelpers,\n\ttype SshSandboxSession,\n} from './openclaw-sandbox-sdk-contract.js';\nimport {\n\tcreateGondolinSandboxBackendFactory,\n\tcreateGondolinSandboxBackendManager,\n} from './sandbox-backend-factory.js';\n\nconst plugin = {\n\tid: 'gondolin',\n\tname: 'Gondolin VM Sandbox',\n\tdescription: 'Sandbox backend powered by Gondolin micro-VMs.',\n\n\tregister(api: {\n\t\treadonly pluginConfig: Record<string, unknown>;\n\t\treadonly registrationMode: string;\n\t}): void {\n\t\tif (api.registrationMode !== 'full') {\n\t\t\treturn;\n\t\t}\n\n\t\tconst pluginConfig = resolveGondolinPluginConfig(api.pluginConfig);\n\t\tconst sdkPath = '/opt/openclaw-sdk/sandbox.js';\n\t\tconst sdkPromise = import(sdkPath).then((sdkRaw: Record<string, unknown>) => {\n\t\t\tassertSdkShape(sdkRaw);\n\n\t\t\tconst sshHelpers: SshHelpers = {\n\t\t\t\tbuildExecRemoteCommand: sdkRaw.buildExecRemoteCommand,\n\t\t\t\tbuildRemoteCommand: sdkRaw.buildRemoteCommand,\n\t\t\t\tbuildSshSandboxArgv: sdkRaw.buildSshSandboxArgv,\n\t\t\t\tcreateRemoteShellSandboxFsBridge: sdkRaw.createRemoteShellSandboxFsBridge,\n\t\t\t\tcreateSshSandboxSessionFromSettings: sdkRaw.createSshSandboxSessionFromSettings,\n\t\t\t\t...(typeof sdkRaw.disposeSshSandboxSession === 'function'\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tdisposeSshSandboxSession: sdkRaw.disposeSshSandboxSession as (\n\t\t\t\t\t\t\t\tsession: SshSandboxSession,\n\t\t\t\t\t\t\t) => Promise<void>,\n\t\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t\trunSshSandboxCommand: sdkRaw.runSshSandboxCommand,\n\t\t\t\tsanitizeEnvVars: sdkRaw.sanitizeEnvVars,\n\t\t\t};\n\n\t\t\tconst backendDependencies = createBackendDeps(sshHelpers);\n\t\t\tsdkRaw.registerSandboxBackend('gondolin', {\n\t\t\t\tfactory: createGondolinSandboxBackendFactory(pluginConfig, backendDependencies),\n\t\t\t\tmanager: createGondolinSandboxBackendManager(pluginConfig, backendDependencies),\n\t\t\t});\n\t\t});\n\n\t\tsdkPromise.catch((error: unknown) => {\n\t\t\tconst message = error instanceof Error ? error.message : JSON.stringify(error);\n\t\t\tprocess.stderr.write(`[gondolin] failed to load OpenClaw SDK: ${message}\\n`);\n\t\t});\n\t},\n};\n\nexport default plugin;\n\nexport { createBackendDeps };\nexport type { SshHelpers };\n","export * from './sandbox-backend-factory.js';\nexport * from './gondolin-plugin-config.js';\nexport * from './controller-lease-client.js';\nexport * from './openclaw-plugin-registration.js';\nexport { default } from './openclaw-plugin-registration.js';\n\nexport const OPENCLAW_GONDOLIN_PLUGIN_PACKAGE_NAME = '@agent-vm/openclaw-agent-vm-plugin';\n"],"mappings":";AAyBA,SAASA,0BAAwB,OAAgD;AAChF,QACC,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAAgC,YAAY;;AAItD,SAAgB,kBAAkB,SAGlB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,UAAU,QAAQ,cAAc,QAAQ,QAAQ,GAAG;AAEzD,QAAO;EACN,gBAAgB,OAAO,YAAsC;GAC5D,MAAM,WAAW,MAAM,UAAU,GAAG,QAAQ,SAAS,UAAU;AAC/D,OAAI,CAAC,SAAS,IAAI;IACjB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,eAAe;AACnE,UAAM,IAAI,UACT,6CAA6C,SAAS,OAAO,IAAI,YACjE;;AAEF,UAAO,MAAM,SAAS,MAAM;;EAE7B,cAAc,OAAO,YAAmC;AACvD,SAAM,UAAU,GAAG,QAAQ,SAAS,WAAW,EAC9C,QAAQ,UACR,CAAC;;EAEH,cAAc,OAAO,YAA4C;GAChE,MAAM,WAAW,MAAM,UAAU,GAAG,QAAQ,SAAS;IACpD,MAAM,KAAK,UAAU,QAAQ;IAC7B,SAAS,EACR,gBAAgB,oBAChB;IACD,QAAQ;IACR,CAAC;AACF,OAAI,CAAC,SAAS,IAAI;IACjB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,eAAe;AACnE,UAAM,IAAI,UAAU,sCAAsC,SAAS,OAAO,IAAI,YAAY;;GAE3F,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,OAAI,CAACA,0BAAwB,QAAQ,CACpC,OAAM,IAAI,UACT,kDAAkD,KAAK,UAAU,QAAQ,CAAC,MAAM,GAAG,IAAI,GACvF;AAEF,UAAO;;EAER;;;;;AC5EF,SAAgB,wBAAwB,OAAgD;AACvF,QACC,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAA4B,QAAQ,YAC3C,MAA4B,QAAQ;;;;;ACVvC,SAAgB,yBAAyB,QAAgB,MAAkC;AAC1F,KAAI,CAAC,QAAQ,KAAK,WAAW,EAC5B,QAAO;AAIR,QAAO,UADa,KAAK,KAAK,QAAQ,IAAI,IAAI,QAAQ,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CACrD,IAAI;;;;;ACIlC,SAAgB,oCACf,SAKA,cAW2C;CAC3C,MAAM,6BAAa,IAAI,KAA+B;AAEtD,QAAO,OAAO,WAAW;EACxB,MAAM,cACL,aAAa,oBAAoB,EAChC,eAAe,QAAQ,eACvB,CAAC,IAAI,kBAAkB,EAAE,eAAe,QAAQ,eAAe,CAAC;EAClE,MAAM,cAAc,WAAW,IAAI,OAAO,SAAS;AACnD,MAAI,YACH,KAAI;AACH,SAAM,YAAY,eAAe,YAAY,MAAM,QAAQ;AAC3D,UAAO,YAAY;UACZ;AACP,cAAW,OAAO,OAAO,SAAS;;EAGpC,MAAM,gBAAgB,MAAM,YAAY,aAAa;GACpD,mBAAmB,OAAO;GAC1B,WAAW,QAAQ,aAAa;GAChC,UAAU,OAAO;GACjB,cAAc,OAAO;GACrB,QAAQ,QAAQ;GAChB,CAAC;AACF,MAAI,CAAC,wBAAwB,cAAc,CAC1C,OAAM,IAAI,UAAU,wDAAwD;EAG7E,MAAM,QAAQ;EACd,MAAM,SAAS,2BAA2B;GACzC,KAAK,OAAO;GACZ,eAAe,QAAQ;GACvB,uBAAuB,aAAa;GACpC;GACA,sBAAsB,aAAa;GACnC,eAAe,aAAa;GAC5B,UAAU,OAAO;GACjB,QAAQ,QAAQ;GAChB,CAAC;AACF,aAAW,IAAI,OAAO,UAAU;GAAE;GAAQ;GAAO,CAAC;AAClD,SAAO;;;AAIT,SAAS,2BAA2B,SAaH;CAChC,MAAMC,4BAA0E,OAC/E,gBAEA,MAAM,QAAQ,qBAAqB;EAClC,GAAI,YAAY,iBAAiB,SAAY,EAAE,cAAc,YAAY,cAAc,GAAG,EAAE;EAC5F,QAAQ,yBAAyB,YAAY,QAAQ,YAAY,KAAK;EACtE,GAAI,YAAY,WAAW,SAAY,EAAE,QAAQ,YAAY,QAAQ,GAAG,EAAE;EAC1E,KAAK,QAAQ,MAAM;EACnB,GAAI,YAAY,UAAU,SAAY,EAAE,OAAO,YAAY,OAAO,GAAG,EAAE;EACvE,CAAC;CAEH,MAAM,iBAAiB,QAAQ,wBAAwB;EACtD,yBAAyB,QAAQ,MAAM;EACvC,oBAAoB,QAAQ,MAAM;EAClC,sBAAsB;EACtB,CAAC;AAEF,QAAO;EACN,GAAI,iBAAiB,EAAE,gBAAgB,GAAG,EAAE;EAC5C,GAAI,QAAQ,IAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,GAAG,EAAE;EAClE,aAAa,GAAG,QAAQ,cAAc,IAAI,QAAQ,OAAO;EACzD,iBAAiB;EACjB,IAAI;EACJ,WAAW,QAAQ,MAAM;EACzB,cAAc,QAAQ,MAAM;EAC5B,SAAS,QAAQ,MAAM;EACvB,eAAe,OAAO,eACrB,MAAM,QAAQ,cAAc;GAC3B,SAAS,WAAW;GACpB,KAAK,WAAW;GAChB,KAAK,QAAQ,MAAM;GACnB,QAAQ,WAAW;GACnB,SAAS,WAAW,WAAW,QAAQ,MAAM;GAC7C,CAAC;EACH,cAAc,OAAO,mBAAmB;AACvC,OACC,eAAe,SACf,OAAO,eAAe,UAAU,YAChC,aAAa,eAAe,MAE5B,OAAO,eAAe,MAA2C,SAAS;;EAG5E,iBAAiB,OAAO,kBACvB,MAAM,QAAQ,qBAAqB;GAClC,QAAQ,cAAc;GACtB,KAAK,QAAQ,MAAM;GACnB,CAAC;EACH;;;;;AClIF,SAAgB,oCACf,SAIA,cAMC;AACD,QAAO;EACN,iBAAiB,OAAO,WAAW;GAClC,MAAM,cACL,aAAa,oBAAoB,EAChC,eAAe,QAAQ,eACvB,CAAC,IAAI,kBAAkB,EAAE,eAAe,QAAQ,eAAe,CAAC;AAClE,OAAI;AAEH,WAAO;KAAE,kBAAkB;KAAM,SADb,MAAM,YAAY,eAAe,OAAO,MAAM,cAAc,KACtB;KAAM;WACzD;AACP,WAAO;KAAE,kBAAkB;KAAO,SAAS;KAAO;;;EAGpD,eAAe,OAAO,WAAW;AAKhC,UAHC,aAAa,oBAAoB,EAChC,eAAe,QAAQ,eACvB,CAAC,IAAI,kBAAkB,EAAE,eAAe,QAAQ,eAAe,CAAC,EAChD,aAAa,OAAO,MAAM,cAAc;;EAE3D;;;;;AC7BF,SAAgB,4BACf,QAC+B;AAC/B,KAAI,OAAO,OAAO,kBAAkB,YAAY,OAAO,OAAO,WAAW,SACxE,OAAM,IAAI,MAAM,4DAA4D;AAG7E,QAAO;EACN,eAAe,OAAO;EACtB,GAAI,OAAO,OAAO,cAAc,WAAW,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;EAC/E,QAAQ,OAAO;EACf;;;;;ACVF,SAAgB,kBAAkB,KAMhC;AACD,QAAO;EACN,eAAe,OAAO,EAAE,SAAS,KAAK,KAAK,UAAU,QAAQ,cAAc;GAC1E,MAAM,UAAU,MAAM,IAAI,oCAAoC;IAC7D,SAAS;IACT,cAAc,SAAS;IACvB,uBAAuB;IACvB,QAAQ,GAAG,SAAS,KAAK,GAAG,SAAS,KAAK,GAAG,SAAS;IACtD,gBAAgB;IAChB,eAAe;IACf,CAAC;GACF,MAAM,2BAA2B,IAAI;AACrC,UAAO;IACN,MAAM,IAAI,oBAAoB;KAC7B,eAAe,IAAI,uBAAuB;MACzC;MACA;MACA;MACA,CAAC;KACF;KACA,KAAK;KACL,CAAC;IACF,KAAK,IAAI,gBAAgB,QAAQ,IAAI,CAAC;IACtC,eAAe;KACd,SAAS,YAA2B;AACnC,UAAI,yBACH,OAAM,yBAAyB,QAAQ;;KAGzC;KACA;IACD,WAAW;IACX;;EAEF,wBACE,kBACA,WACA,IAAI,iCAAiC;GACpC,SAAS,OAAO;GAChB,SAAS;IACR,yBAAyB,aAAa;IACtC,oBAAoB,aAAa;IACjC,sBAAsB,aAAa;IACnC;GACD,CAAC;EACJ,sBAAsB,OAAO,EAAE,cAAc,QAAQ,QAAQ,KAAK,UAAU,YAAY;GACvF,MAAM,UAAU,MAAM,IAAI,oCAAoC;IAC7D,SAAS;IACT,cAAc,SAAS;IACvB,uBAAuB;IACvB,QAAQ,GAAG,SAAS,KAAK,GAAG,SAAS,KAAK,GAAG,SAAS;IACtD,gBAAgB;IAChB,eAAe;IACf,CAAC;AACF,UAAO,MAAM,IAAI,qBAAqB;IACrC,GAAI,iBAAiB,SAAY,EAAE,cAAc,GAAG,EAAE;IACtD,eAAe,IAAI,mBAAmB;KAAC;KAAW;KAAM;KAAQ;KAAsB,CAAC;IACvF;IACA,GAAI,WAAW,SAAY,EAAE,QAAQ,GAAG,EAAE;IAC1C,GAAI,UAAU,SAAY,EAAE,OAAO,GAAG,EAAE;IACxC,CAAC;;EAEH;;;;;ACdF,SAAgB,eAAe,OAY7B;AACD,KAAI,OAAO,UAAU,YAAY,UAAU,KAC1C,OAAM,IAAI,UAAU,uCAAuC;AAG5D,MAAK,MAAM,cAAc;EACxB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CACA,KAAI,OAAQ,MAAkC,gBAAgB,WAC7D,OAAM,IAAI,UAAU,yCAAyC,aAAa;;;;;AC7E7E,MAAM,SAAS;CACd,IAAI;CACJ,MAAM;CACN,aAAa;CAEb,SAAS,KAGA;AACR,MAAI,IAAI,qBAAqB,OAC5B;EAGD,MAAM,eAAe,4BAA4B,IAAI,aAAa;AA6BlE,EA3BmB,OADH,gCACmB,MAAM,WAAoC;AAC5E,kBAAe,OAAO;GAmBtB,MAAM,sBAAsB,kBAjBG;IAC9B,wBAAwB,OAAO;IAC/B,oBAAoB,OAAO;IAC3B,qBAAqB,OAAO;IAC5B,kCAAkC,OAAO;IACzC,qCAAqC,OAAO;IAC5C,GAAI,OAAO,OAAO,6BAA6B,aAC5C,EACA,0BAA0B,OAAO,0BAGjC,GACA,EAAE;IACL,sBAAsB,OAAO;IAC7B,iBAAiB,OAAO;IACxB,CAEwD;AACzD,UAAO,uBAAuB,YAAY;IACzC,SAAS,oCAAoC,cAAc,oBAAoB;IAC/E,SAAS,oCAAoC,cAAc,oBAAoB;IAC/E,CAAC;IACD,CAES,OAAO,UAAmB;GACpC,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,KAAK,UAAU,MAAM;AAC9E,WAAQ,OAAO,MAAM,2CAA2C,QAAQ,IAAI;IAC3E;;CAEH;AAED,2CAAe;;;;ACvDf,MAAa,wCAAwC"}
+{"version":3,"file":"index.js","names":["isGondolinLeaseResponse","boundRunRemoteShellScript: FsBridgeLeaseContext['runRemoteShellScript']"],"sources":["../src/controller-lease-client.ts","../src/sandbox-backend/sandbox-backend-contract.ts","../src/sandbox-backend/sandbox-shell-script.ts","../src/sandbox-backend/sandbox-backend-handle-factory.ts","../src/sandbox-backend/sandbox-backend-manager.ts","../src/gondolin-plugin-config.ts","../src/openclaw-backend-dependencies.ts","../src/openclaw-sandbox-sdk-contract.ts","../src/openclaw-plugin-registration.ts","../src/index.ts"],"sourcesContent":["export interface GondolinLeaseResponse {\n\treadonly leaseId: string;\n\treadonly ssh: {\n\t\treadonly host: string;\n\t\treadonly identityPem: string;\n\t\treadonly knownHostsLine: string;\n\t\treadonly port: number;\n\t\treadonly user: string;\n\t};\n\treadonly tcpSlot: number;\n\treadonly workdir: string;\n}\n\nexport interface LeasePeekResponse {\n\treadonly createdAt: number;\n\treadonly lastUsedAt: number;\n\treadonly leaseId: string;\n\treadonly profileId: string;\n\treadonly scopeKey: string;\n\treadonly ssh: {\n\t\treadonly host: string;\n\t\treadonly port: number;\n\t\treadonly user: string;\n\t};\n\treadonly tcpSlot: number;\n\treadonly zoneId: string;\n}\n\nexport interface LeaseClient {\n\t// Cached handles use keepalive; read-only runtime probes use peekLease.\n\tkeepLeaseAlive(leaseId: string): Promise<GondolinLeaseResponse>;\n\tpeekLease(leaseId: string): Promise<LeasePeekResponse>;\n\treleaseLease(leaseId: string): Promise<void>;\n\trequestLease(request: {\n\t\treadonly agentWorkspaceDir: string;\n\t\treadonly profileId: string;\n\t\treadonly scopeKey: string;\n\t\treadonly workspaceDir: string;\n\t\treadonly zoneId: string;\n\t}): Promise<GondolinLeaseResponse>;\n}\n\nfunction objectValue(value: unknown): object | undefined {\n\treturn typeof value === 'object' && value !== null ? value : undefined;\n}\n\nfunction isSshResponse(value: unknown): value is GondolinLeaseResponse['ssh'] {\n\tconst record = objectValue(value);\n\treturn (\n\t\trecord !== undefined &&\n\t\ttypeof Reflect.get(record, 'host') === 'string' &&\n\t\ttypeof Reflect.get(record, 'identityPem') === 'string' &&\n\t\ttypeof Reflect.get(record, 'knownHostsLine') === 'string' &&\n\t\ttypeof Reflect.get(record, 'port') === 'number' &&\n\t\ttypeof Reflect.get(record, 'user') === 'string'\n\t);\n}\n\nfunction isLeasePeekSshResponse(value: unknown): value is LeasePeekResponse['ssh'] {\n\tconst record = objectValue(value);\n\treturn (\n\t\trecord !== undefined &&\n\t\ttypeof Reflect.get(record, 'host') === 'string' &&\n\t\ttypeof Reflect.get(record, 'port') === 'number' &&\n\t\ttypeof Reflect.get(record, 'user') === 'string'\n\t);\n}\n\nfunction isGondolinLeaseResponse(value: unknown): value is GondolinLeaseResponse {\n\tconst record = objectValue(value);\n\treturn (\n\t\trecord !== undefined &&\n\t\ttypeof Reflect.get(record, 'leaseId') === 'string' &&\n\t\tisSshResponse(Reflect.get(record, 'ssh')) &&\n\t\ttypeof Reflect.get(record, 'tcpSlot') === 'number' &&\n\t\ttypeof Reflect.get(record, 'workdir') === 'string'\n\t);\n}\n\nfunction isLeasePeekResponse(value: unknown): value is LeasePeekResponse {\n\tconst record = objectValue(value);\n\treturn (\n\t\trecord !== undefined &&\n\t\ttypeof Reflect.get(record, 'createdAt') === 'number' &&\n\t\ttypeof Reflect.get(record, 'lastUsedAt') === 'number' &&\n\t\ttypeof Reflect.get(record, 'leaseId') === 'string' &&\n\t\ttypeof Reflect.get(record, 'profileId') === 'string' &&\n\t\ttypeof Reflect.get(record, 'scopeKey') === 'string' &&\n\t\tisLeasePeekSshResponse(Reflect.get(record, 'ssh')) &&\n\t\ttypeof Reflect.get(record, 'tcpSlot') === 'number' &&\n\t\ttypeof Reflect.get(record, 'zoneId') === 'string'\n\t);\n}\n\nasync function readJsonResponse<TValue>(\n\tresponse: Response,\n\tcontext: string,\n\tisExpectedResponse: (value: unknown) => value is TValue,\n): Promise<TValue> {\n\tif (!response.ok) {\n\t\tconst errorBody = await response.text().catch(() => '(unreadable)');\n\t\tthrow new TypeError(`${context} returned HTTP ${response.status}: ${errorBody}`);\n\t}\n\tconst payload = await response.json();\n\tif (!isExpectedResponse(payload)) {\n\t\tthrow new TypeError(\n\t\t\t`${context} returned an invalid response: ${JSON.stringify(payload).slice(0, 200)}`,\n\t\t);\n\t}\n\treturn payload;\n}\n\nexport function createLeaseClient(options: {\n\treadonly controllerUrl: string;\n\treadonly fetchImpl?: (input: string | URL | Request, init?: RequestInit) => Promise<Response>;\n}): LeaseClient {\n\tconst fetchImpl = options.fetchImpl ?? fetch;\n\tconst baseUrl = options.controllerUrl.replace(/\\/$/u, '');\n\n\treturn {\n\t\tkeepLeaseAlive: async (leaseId: string): Promise<GondolinLeaseResponse> => {\n\t\t\tconst response = await fetchImpl(`${baseUrl}/lease/${leaseId}`);\n\t\t\treturn await readJsonResponse(\n\t\t\t\tresponse,\n\t\t\t\t'Controller lease keepalive API',\n\t\t\t\tisGondolinLeaseResponse,\n\t\t\t);\n\t\t},\n\t\tpeekLease: async (leaseId: string): Promise<LeasePeekResponse> => {\n\t\t\tconst response = await fetchImpl(`${baseUrl}/lease/${leaseId}/peek`);\n\t\t\treturn await readJsonResponse(response, 'Controller lease peek API', isLeasePeekResponse);\n\t\t},\n\t\treleaseLease: async (leaseId: string): Promise<void> => {\n\t\t\tawait fetchImpl(`${baseUrl}/lease/${leaseId}`, {\n\t\t\t\tmethod: 'DELETE',\n\t\t\t});\n\t\t},\n\t\trequestLease: async (request): Promise<GondolinLeaseResponse> => {\n\t\t\tconst response = await fetchImpl(`${baseUrl}/lease`, {\n\t\t\t\tbody: JSON.stringify(request),\n\t\t\t\theaders: {\n\t\t\t\t\t'content-type': 'application/json',\n\t\t\t\t},\n\t\t\t\tmethod: 'POST',\n\t\t\t});\n\t\t\tif (!response.ok) {\n\t\t\t\tconst errorBody = await response.text().catch(() => '(unreadable)');\n\t\t\t\tthrow new TypeError(`Controller lease API returned HTTP ${response.status}: ${errorBody}`);\n\t\t\t}\n\t\t\tconst payload = await response.json();\n\t\t\tif (!isGondolinLeaseResponse(payload)) {\n\t\t\t\tthrow new TypeError(\n\t\t\t\t\t`Controller returned an invalid lease response: ${JSON.stringify(payload).slice(0, 200)}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn payload;\n\t\t},\n\t};\n}\n","import type { GondolinLeaseResponse, LeaseClient } from '../controller-lease-client.js';\n\nexport function isGondolinLeaseResponse(value: unknown): value is GondolinLeaseResponse {\n\treturn (\n\t\ttypeof value === 'object' &&\n\t\tvalue !== null &&\n\t\ttypeof (value as { leaseId?: unknown }).leaseId === 'string' &&\n\t\ttypeof (value as { tcpSlot?: unknown }).tcpSlot === 'number' &&\n\t\ttypeof (value as { workdir?: unknown }).workdir === 'string' &&\n\t\ttypeof (value as { ssh?: unknown }).ssh === 'object' &&\n\t\t(value as { ssh?: unknown }).ssh !== null\n\t);\n}\n\nexport interface FsBridgeLeaseContext {\n\treadonly remoteAgentWorkspaceDir: string;\n\treadonly remoteWorkspaceDir: string;\n\treadonly runRemoteShellScript: (params: {\n\t\treadonly allowFailure?: boolean;\n\t\treadonly args?: string[];\n\t\treadonly script: string;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly stdin?: Buffer | string;\n\t}) => Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n}\n\nexport interface GondolinFsBridge {\n\tmkdirp(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\treadFile(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<Buffer>;\n\tremove(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly force?: boolean;\n\t\treadonly recursive?: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n\trename(params: {\n\t\treadonly cwd?: string;\n\t\treadonly from: string;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly to: string;\n\t}): Promise<void>;\n\tresolvePath(params: { readonly cwd?: string; readonly filePath: string }): {\n\t\treadonly containerPath: string;\n\t\treadonly relativePath: string;\n\t};\n\tstat(params: {\n\t\treadonly cwd?: string;\n\t\treadonly filePath: string;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<{\n\t\treadonly mtimeMs: number;\n\t\treadonly size: number;\n\t\treadonly type: 'directory' | 'file' | 'other';\n\t} | null>;\n\twriteFile(params: {\n\t\treadonly cwd?: string;\n\t\treadonly data: Buffer | string;\n\t\treadonly encoding?: BufferEncoding;\n\t\treadonly filePath: string;\n\t\treadonly mkdir?: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void>;\n}\n\nexport interface CreateBackendDependencies {\n\treadonly buildExecSpec: (params: {\n\t\treadonly command: string;\n\t\treadonly env: Record<string, string>;\n\t\treadonly ssh: GondolinLeaseResponse['ssh'];\n\t\treadonly usePty: boolean;\n\t\treadonly workdir: string;\n\t}) => Promise<{\n\t\treadonly argv: string[];\n\t\treadonly env: Record<string, string>;\n\t\treadonly finalizeToken?: unknown;\n\t\treadonly stdinMode: 'pipe-open' | 'pipe-closed';\n\t}>;\n\treadonly createFsBridgeBuilder?: (\n\t\tleaseContext: FsBridgeLeaseContext,\n\t) => (params: { readonly sandbox: unknown }) => GondolinFsBridge;\n\treadonly createLeaseClient?: (options: { readonly controllerUrl: string }) => LeaseClient;\n\treadonly runRemoteShellScript: (params: {\n\t\treadonly allowFailure?: boolean;\n\t\treadonly script: string;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly ssh: GondolinLeaseResponse['ssh'];\n\t\treadonly stdin?: Buffer | string;\n\t}) => Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n}\n\nexport interface GondolinSandboxBackendHandle {\n\treadonly configLabel?: string;\n\treadonly configLabelKind?: string;\n\tcreateFsBridge?: (params: { readonly sandbox: unknown }) => GondolinFsBridge;\n\tenv?: Record<string, string>;\n\treadonly id: string;\n\treadonly runtimeId: string;\n\treadonly runtimeLabel: string;\n\treadonly workdir: string;\n\tbuildExecSpec(params: {\n\t\treadonly command: string;\n\t\treadonly env: Record<string, string>;\n\t\treadonly usePty: boolean;\n\t\treadonly workdir?: string;\n\t}): Promise<{\n\t\treadonly argv: string[];\n\t\treadonly env: Record<string, string>;\n\t\treadonly finalizeToken?: unknown;\n\t\treadonly stdinMode: 'pipe-open' | 'pipe-closed';\n\t}>;\n\tfinalizeExec?: (params: {\n\t\treadonly exitCode: number | null;\n\t\treadonly status: 'completed' | 'failed';\n\t\treadonly timedOut: boolean;\n\t\treadonly token?: unknown;\n\t}) => Promise<void>;\n\trunShellCommand(params: { readonly script: string }): Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n}\n\nexport interface CachedScopeEntry {\n\treadonly handle: GondolinSandboxBackendHandle;\n\treadonly lease: GondolinLeaseResponse;\n}\n","export function buildShellScriptWithArgs(script: string, args?: readonly string[]): string {\n\tif (!args || args.length === 0) {\n\t\treturn script;\n\t}\n\n\tconst escapedArgs = args.map((arg) => `'${arg.replace(/'/g, \"'\\\\''\")}'`).join(' ');\n\treturn `set -- ${escapedArgs}; ${script}`;\n}\n","import { createLeaseClient, type GondolinLeaseResponse } from '../controller-lease-client.js';\nimport {\n\ttype CachedScopeEntry,\n\ttype CreateBackendDependencies,\n\ttype FsBridgeLeaseContext,\n\ttype GondolinSandboxBackendHandle,\n\tisGondolinLeaseResponse,\n} from './sandbox-backend-contract.js';\nimport { buildShellScriptWithArgs } from './sandbox-shell-script.js';\n\nfunction scopeCacheKey(params: {\n\treadonly agentWorkspaceDir: string;\n\treadonly profileId: string;\n\treadonly scopeKey: string;\n\treadonly workspaceDir: string;\n\treadonly zoneId: string;\n}): string {\n\treturn [\n\t\tparams.zoneId,\n\t\tparams.scopeKey,\n\t\tparams.profileId,\n\t\tparams.agentWorkspaceDir,\n\t\tparams.workspaceDir,\n\t].join('\\0');\n}\n\nexport function createGondolinSandboxBackendFactory(\n\toptions: {\n\t\treadonly controllerUrl: string;\n\t\treadonly profileId?: string;\n\t\treadonly zoneId: string;\n\t},\n\tdependencies: CreateBackendDependencies,\n): (params: {\n\treadonly agentWorkspaceDir: string;\n\treadonly cfg: {\n\t\treadonly docker?: {\n\t\t\treadonly env?: Record<string, string>;\n\t\t};\n\t};\n\treadonly scopeKey: string;\n\treadonly sessionKey: string;\n\treadonly workspaceDir: string;\n}) => Promise<GondolinSandboxBackendHandle> {\n\tconst scopeCache = new Map<string, CachedScopeEntry>();\n\n\treturn async (params) => {\n\t\tconst profileId = options.profileId ?? 'standard';\n\t\tconst cacheKey = scopeCacheKey({\n\t\t\tagentWorkspaceDir: params.agentWorkspaceDir,\n\t\t\tprofileId,\n\t\t\tscopeKey: params.scopeKey,\n\t\t\tworkspaceDir: params.workspaceDir,\n\t\t\tzoneId: options.zoneId,\n\t\t});\n\t\tconst leaseClient =\n\t\t\tdependencies.createLeaseClient?.({\n\t\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\t}) ?? createLeaseClient({ controllerUrl: options.controllerUrl });\n\t\tconst cachedEntry = scopeCache.get(cacheKey);\n\t\tif (cachedEntry) {\n\t\t\ttry {\n\t\t\t\tawait leaseClient.keepLeaseAlive(cachedEntry.lease.leaseId);\n\t\t\t\treturn cachedEntry.handle;\n\t\t\t} catch {\n\t\t\t\tscopeCache.delete(cacheKey);\n\t\t\t}\n\t\t}\n\t\tconst leaseResponse = await leaseClient.requestLease({\n\t\t\tagentWorkspaceDir: params.agentWorkspaceDir,\n\t\t\tprofileId,\n\t\t\tscopeKey: params.scopeKey,\n\t\t\tworkspaceDir: params.workspaceDir,\n\t\t\tzoneId: options.zoneId,\n\t\t});\n\t\tif (!isGondolinLeaseResponse(leaseResponse)) {\n\t\t\tthrow new TypeError('Controller lease API returned an unexpected response.');\n\t\t}\n\n\t\tconst lease = leaseResponse;\n\t\tconst handle = createSandboxBackendHandle({\n\t\t\tcfg: params.cfg,\n\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\tcreateFsBridgeBuilder: dependencies.createFsBridgeBuilder,\n\t\t\tlease,\n\t\t\trunRemoteShellScript: dependencies.runRemoteShellScript,\n\t\t\tbuildExecSpec: dependencies.buildExecSpec,\n\t\t\tscopeKey: params.scopeKey,\n\t\t\tzoneId: options.zoneId,\n\t\t});\n\t\tscopeCache.set(cacheKey, { handle, lease });\n\t\treturn handle;\n\t};\n}\n\nfunction createSandboxBackendHandle(options: {\n\treadonly buildExecSpec: CreateBackendDependencies['buildExecSpec'];\n\treadonly cfg: {\n\t\treadonly docker?: {\n\t\t\treadonly env?: Record<string, string>;\n\t\t};\n\t};\n\treadonly controllerUrl: string;\n\treadonly createFsBridgeBuilder?: CreateBackendDependencies['createFsBridgeBuilder'];\n\treadonly lease: GondolinLeaseResponse;\n\treadonly runRemoteShellScript: CreateBackendDependencies['runRemoteShellScript'];\n\treadonly scopeKey: string;\n\treadonly zoneId: string;\n}): GondolinSandboxBackendHandle {\n\tconst boundRunRemoteShellScript: FsBridgeLeaseContext['runRemoteShellScript'] = async (\n\t\tshellParams,\n\t) =>\n\t\tawait options.runRemoteShellScript({\n\t\t\t...(shellParams.allowFailure !== undefined ? { allowFailure: shellParams.allowFailure } : {}),\n\t\t\tscript: buildShellScriptWithArgs(shellParams.script, shellParams.args),\n\t\t\t...(shellParams.signal !== undefined ? { signal: shellParams.signal } : {}),\n\t\t\tssh: options.lease.ssh,\n\t\t\t...(shellParams.stdin !== undefined ? { stdin: shellParams.stdin } : {}),\n\t\t});\n\n\tconst createFsBridge = options.createFsBridgeBuilder?.({\n\t\tremoteAgentWorkspaceDir: options.lease.workdir,\n\t\tremoteWorkspaceDir: options.lease.workdir,\n\t\trunRemoteShellScript: boundRunRemoteShellScript,\n\t});\n\n\treturn {\n\t\t...(createFsBridge ? { createFsBridge } : {}),\n\t\t...(options.cfg.docker?.env ? { env: options.cfg.docker.env } : {}),\n\t\tconfigLabel: `${options.controllerUrl} (${options.zoneId})`,\n\t\tconfigLabelKind: 'VM',\n\t\tid: 'gondolin',\n\t\truntimeId: options.lease.leaseId,\n\t\truntimeLabel: options.lease.leaseId,\n\t\tworkdir: options.lease.workdir,\n\t\tbuildExecSpec: async (execParams) =>\n\t\t\tawait options.buildExecSpec({\n\t\t\t\tcommand: execParams.command,\n\t\t\t\tenv: execParams.env,\n\t\t\t\tssh: options.lease.ssh,\n\t\t\t\tusePty: execParams.usePty,\n\t\t\t\tworkdir: execParams.workdir ?? options.lease.workdir,\n\t\t\t}),\n\t\tfinalizeExec: async (finalizeParams) => {\n\t\t\tif (\n\t\t\t\tfinalizeParams.token &&\n\t\t\t\ttypeof finalizeParams.token === 'object' &&\n\t\t\t\t'dispose' in finalizeParams.token\n\t\t\t) {\n\t\t\t\tawait (finalizeParams.token as { dispose: () => Promise<void> }).dispose();\n\t\t\t}\n\t\t},\n\t\trunShellCommand: async (commandParams) =>\n\t\t\tawait options.runRemoteShellScript({\n\t\t\t\tscript: commandParams.script,\n\t\t\t\tssh: options.lease.ssh,\n\t\t\t}),\n\t} satisfies GondolinSandboxBackendHandle;\n}\n","import { createLeaseClient } from '../controller-lease-client.js';\nimport type { CreateBackendDependencies } from './sandbox-backend-contract.js';\n\nexport function createGondolinSandboxBackendManager(\n\toptions: {\n\t\treadonly controllerUrl: string;\n\t\treadonly zoneId: string;\n\t},\n\tdependencies: CreateBackendDependencies,\n): {\n\tdescribeRuntime: (params: {\n\t\treadonly entry: { readonly containerName: string };\n\t}) => Promise<{ readonly configLabelMatch: boolean; readonly running: boolean }>;\n\tremoveRuntime: (params: { readonly entry: { readonly containerName: string } }) => Promise<void>;\n} {\n\treturn {\n\t\tdescribeRuntime: async (params) => {\n\t\t\tconst leaseClient =\n\t\t\t\tdependencies.createLeaseClient?.({\n\t\t\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\t\t}) ?? createLeaseClient({ controllerUrl: options.controllerUrl });\n\t\t\ttry {\n\t\t\t\tconst leaseStatus = await leaseClient.peekLease(params.entry.containerName);\n\t\t\t\treturn { configLabelMatch: true, running: leaseStatus !== null };\n\t\t\t} catch {\n\t\t\t\treturn { configLabelMatch: false, running: false };\n\t\t\t}\n\t\t},\n\t\tremoveRuntime: async (params) => {\n\t\t\tconst leaseClient =\n\t\t\t\tdependencies.createLeaseClient?.({\n\t\t\t\t\tcontrollerUrl: options.controllerUrl,\n\t\t\t\t}) ?? createLeaseClient({ controllerUrl: options.controllerUrl });\n\t\t\tawait leaseClient.releaseLease(params.entry.containerName);\n\t\t},\n\t};\n}\n","export interface ResolvedGondolinPluginConfig {\n\treadonly controllerUrl: string;\n\treadonly profileId?: string;\n\treadonly zoneId: string;\n}\n\nexport function resolveGondolinPluginConfig(\n\tconfig: Record<string, unknown>,\n): ResolvedGondolinPluginConfig {\n\tif (typeof config.controllerUrl !== 'string' || typeof config.zoneId !== 'string') {\n\t\tthrow new Error('Gondolin plugin config requires controllerUrl and zoneId.');\n\t}\n\n\treturn {\n\t\tcontrollerUrl: config.controllerUrl,\n\t\t...(typeof config.profileId === 'string' ? { profileId: config.profileId } : {}),\n\t\tzoneId: config.zoneId,\n\t};\n}\n","import type { SshHelpers, SshSandboxSession } from './openclaw-sandbox-sdk-contract.js';\nimport type {\n\tCreateBackendDependencies,\n\tFsBridgeLeaseContext,\n\tGondolinFsBridge,\n} from './sandbox-backend-factory.js';\n\nexport function createBackendDeps(ssh: SshHelpers): {\n\treadonly buildExecSpec: CreateBackendDependencies['buildExecSpec'];\n\treadonly createFsBridgeBuilder: (\n\t\tleaseContext: FsBridgeLeaseContext,\n\t) => (params: { readonly sandbox: unknown }) => GondolinFsBridge;\n\treadonly runRemoteShellScript: CreateBackendDependencies['runRemoteShellScript'];\n} {\n\treturn {\n\t\tbuildExecSpec: async ({ command, env, ssh: sshCreds, usePty, workdir }) => {\n\t\t\tconst session = await ssh.createSshSandboxSessionFromSettings({\n\t\t\t\tcommand: 'ssh',\n\t\t\t\tidentityData: sshCreds.identityPem,\n\t\t\t\tstrictHostKeyChecking: false,\n\t\t\t\ttarget: `${sshCreds.user}@${sshCreds.host}:${sshCreds.port}`,\n\t\t\t\tupdateHostKeys: false,\n\t\t\t\tworkspaceRoot: workdir,\n\t\t\t});\n\t\t\tconst disposeSshSandboxSession = ssh.disposeSshSandboxSession;\n\t\t\treturn {\n\t\t\t\targv: ssh.buildSshSandboxArgv({\n\t\t\t\t\tremoteCommand: ssh.buildExecRemoteCommand({\n\t\t\t\t\t\tcommand,\n\t\t\t\t\t\tenv,\n\t\t\t\t\t\tworkdir,\n\t\t\t\t\t}),\n\t\t\t\t\tsession,\n\t\t\t\t\ttty: usePty,\n\t\t\t\t}),\n\t\t\t\tenv: ssh.sanitizeEnvVars(process.env).allowed,\n\t\t\t\tfinalizeToken: {\n\t\t\t\t\tdispose: async (): Promise<void> => {\n\t\t\t\t\t\tif (disposeSshSandboxSession) {\n\t\t\t\t\t\t\tawait disposeSshSandboxSession(session);\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\tsession,\n\t\t\t\t},\n\t\t\t\tstdinMode: 'pipe-open' as const,\n\t\t\t};\n\t\t},\n\t\tcreateFsBridgeBuilder:\n\t\t\t(leaseContext: FsBridgeLeaseContext) =>\n\t\t\t(params: { readonly sandbox: unknown }): GondolinFsBridge =>\n\t\t\t\tssh.createRemoteShellSandboxFsBridge({\n\t\t\t\t\tsandbox: params.sandbox,\n\t\t\t\t\truntime: {\n\t\t\t\t\t\tremoteAgentWorkspaceDir: leaseContext.remoteAgentWorkspaceDir,\n\t\t\t\t\t\tremoteWorkspaceDir: leaseContext.remoteWorkspaceDir,\n\t\t\t\t\t\trunRemoteShellScript: leaseContext.runRemoteShellScript,\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\trunRemoteShellScript: async ({ allowFailure, script, signal, ssh: sshCreds, stdin }) => {\n\t\t\tconst session = await ssh.createSshSandboxSessionFromSettings({\n\t\t\t\tcommand: 'ssh',\n\t\t\t\tidentityData: sshCreds.identityPem,\n\t\t\t\tstrictHostKeyChecking: false,\n\t\t\t\ttarget: `${sshCreds.user}@${sshCreds.host}:${sshCreds.port}`,\n\t\t\t\tupdateHostKeys: false,\n\t\t\t\tworkspaceRoot: '/work',\n\t\t\t});\n\t\t\treturn await ssh.runSshSandboxCommand({\n\t\t\t\t...(allowFailure !== undefined ? { allowFailure } : {}),\n\t\t\t\tremoteCommand: ssh.buildRemoteCommand(['/bin/sh', '-c', script, 'gondolin-sandbox-fs']),\n\t\t\t\tsession,\n\t\t\t\t...(signal !== undefined ? { signal } : {}),\n\t\t\t\t...(stdin !== undefined ? { stdin } : {}),\n\t\t\t});\n\t\t},\n\t};\n}\n\nexport type { SshHelpers, SshSandboxSession };\n","export interface SshSandboxSession {\n\treadonly command: string;\n\treadonly configPath: string;\n\treadonly host: string;\n}\n\nexport interface SshHelpers {\n\treadonly buildExecRemoteCommand: (params: {\n\t\treadonly command: string;\n\t\treadonly env: Record<string, string>;\n\t\treadonly workdir?: string;\n\t}) => string;\n\treadonly buildRemoteCommand: (argv: readonly string[]) => string;\n\treadonly buildSshSandboxArgv: (params: {\n\t\treadonly remoteCommand: string;\n\t\treadonly session: SshSandboxSession;\n\t\treadonly tty?: boolean;\n\t}) => string[];\n\treadonly createRemoteShellSandboxFsBridge: (params: {\n\t\treadonly runtime: {\n\t\t\treadonly remoteAgentWorkspaceDir: string;\n\t\t\treadonly remoteWorkspaceDir: string;\n\t\t\treadonly runRemoteShellScript: (shellParams: {\n\t\t\t\treadonly allowFailure?: boolean;\n\t\t\t\treadonly args?: string[];\n\t\t\t\treadonly script: string;\n\t\t\t\treadonly signal?: AbortSignal;\n\t\t\t\treadonly stdin?: Buffer | string;\n\t\t\t}) => Promise<{\n\t\t\t\treadonly code: number;\n\t\t\t\treadonly stderr: Buffer;\n\t\t\t\treadonly stdout: Buffer;\n\t\t\t}>;\n\t\t};\n\t\treadonly sandbox: unknown;\n\t}) => import('./sandbox-backend-factory.js').GondolinFsBridge;\n\treadonly createSshSandboxSessionFromSettings: (settings: {\n\t\treadonly command: string;\n\t\treadonly identityData?: string;\n\t\treadonly strictHostKeyChecking: boolean;\n\t\treadonly target: string;\n\t\treadonly updateHostKeys: boolean;\n\t\treadonly workspaceRoot: string;\n\t}) => Promise<SshSandboxSession>;\n\treadonly disposeSshSandboxSession?: (session: SshSandboxSession) => Promise<void>;\n\treadonly runSshSandboxCommand: (params: {\n\t\treadonly allowFailure?: boolean;\n\t\treadonly remoteCommand: string;\n\t\treadonly session: SshSandboxSession;\n\t\treadonly signal?: AbortSignal;\n\t\treadonly stdin?: Buffer | string;\n\t}) => Promise<{\n\t\treadonly code: number;\n\t\treadonly stderr: Buffer;\n\t\treadonly stdout: Buffer;\n\t}>;\n\treadonly sanitizeEnvVars: (env: NodeJS.ProcessEnv) => {\n\t\treadonly allowed: Record<string, string>;\n\t};\n}\n\nexport function assertSdkShape(value: unknown): asserts value is SshHelpers & {\n\tregisterSandboxBackend: (\n\t\tid: string,\n\t\tregistration: {\n\t\t\tfactory: ReturnType<\n\t\t\t\ttypeof import('./sandbox-backend-factory.js').createGondolinSandboxBackendFactory\n\t\t\t>;\n\t\t\tmanager?: ReturnType<\n\t\t\t\ttypeof import('./sandbox-backend-factory.js').createGondolinSandboxBackendManager\n\t\t\t>;\n\t\t},\n\t) => void;\n} {\n\tif (typeof value !== 'object' || value === null) {\n\t\tthrow new TypeError('OpenClaw SDK module is not an object');\n\t}\n\n\tfor (const exportName of [\n\t\t'buildExecRemoteCommand',\n\t\t'buildRemoteCommand',\n\t\t'buildSshSandboxArgv',\n\t\t'createRemoteShellSandboxFsBridge',\n\t\t'createSshSandboxSessionFromSettings',\n\t\t'runSshSandboxCommand',\n\t\t'sanitizeEnvVars',\n\t\t'registerSandboxBackend',\n\t] as const) {\n\t\tif (typeof (value as Record<string, unknown>)[exportName] !== 'function') {\n\t\t\tthrow new TypeError(`OpenClaw SDK missing required export: ${exportName}`);\n\t\t}\n\t}\n}\n","import { resolveGondolinPluginConfig } from './gondolin-plugin-config.js';\nimport { createBackendDeps } from './openclaw-backend-dependencies.js';\nimport {\n\tassertSdkShape,\n\ttype SshHelpers,\n\ttype SshSandboxSession,\n} from './openclaw-sandbox-sdk-contract.js';\nimport {\n\tcreateGondolinSandboxBackendFactory,\n\tcreateGondolinSandboxBackendManager,\n} from './sandbox-backend-factory.js';\n\nconst plugin = {\n\tid: 'gondolin',\n\tname: 'Gondolin VM Sandbox',\n\tdescription: 'Sandbox backend powered by Gondolin micro-VMs.',\n\n\tregister(api: {\n\t\treadonly pluginConfig: Record<string, unknown>;\n\t\treadonly registrationMode: string;\n\t}): void {\n\t\tif (api.registrationMode !== 'full') {\n\t\t\treturn;\n\t\t}\n\n\t\tconst pluginConfig = resolveGondolinPluginConfig(api.pluginConfig);\n\t\tconst sdkPath = '/opt/openclaw-sdk/sandbox.js';\n\t\tconst sdkPromise = import(sdkPath).then((sdkRaw: Record<string, unknown>) => {\n\t\t\tassertSdkShape(sdkRaw);\n\n\t\t\tconst sshHelpers: SshHelpers = {\n\t\t\t\tbuildExecRemoteCommand: sdkRaw.buildExecRemoteCommand,\n\t\t\t\tbuildRemoteCommand: sdkRaw.buildRemoteCommand,\n\t\t\t\tbuildSshSandboxArgv: sdkRaw.buildSshSandboxArgv,\n\t\t\t\tcreateRemoteShellSandboxFsBridge: sdkRaw.createRemoteShellSandboxFsBridge,\n\t\t\t\tcreateSshSandboxSessionFromSettings: sdkRaw.createSshSandboxSessionFromSettings,\n\t\t\t\t...(typeof sdkRaw.disposeSshSandboxSession === 'function'\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tdisposeSshSandboxSession: sdkRaw.disposeSshSandboxSession as (\n\t\t\t\t\t\t\t\tsession: SshSandboxSession,\n\t\t\t\t\t\t\t) => Promise<void>,\n\t\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t\trunSshSandboxCommand: sdkRaw.runSshSandboxCommand,\n\t\t\t\tsanitizeEnvVars: sdkRaw.sanitizeEnvVars,\n\t\t\t};\n\n\t\t\tconst backendDependencies = createBackendDeps(sshHelpers);\n\t\t\tsdkRaw.registerSandboxBackend('gondolin', {\n\t\t\t\tfactory: createGondolinSandboxBackendFactory(pluginConfig, backendDependencies),\n\t\t\t\tmanager: createGondolinSandboxBackendManager(pluginConfig, backendDependencies),\n\t\t\t});\n\t\t});\n\n\t\tsdkPromise.catch((error: unknown) => {\n\t\t\tconst message = error instanceof Error ? error.message : JSON.stringify(error);\n\t\t\tprocess.stderr.write(`[gondolin] failed to load OpenClaw SDK: ${message}\\n`);\n\t\t});\n\t},\n};\n\nexport default plugin;\n\nexport { createBackendDeps };\nexport type { SshHelpers };\n","export * from './sandbox-backend-factory.js';\nexport * from './gondolin-plugin-config.js';\nexport * from './controller-lease-client.js';\nexport * from './openclaw-plugin-registration.js';\nexport { default } from './openclaw-plugin-registration.js';\n\nexport const OPENCLAW_GONDOLIN_PLUGIN_PACKAGE_NAME = '@agent-vm/openclaw-agent-vm-plugin';\n"],"mappings":";AA0CA,SAAS,YAAY,OAAoC;AACxD,QAAO,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ;;AAG9D,SAAS,cAAc,OAAuD;CAC7E,MAAM,SAAS,YAAY,MAAM;AACjC,QACC,WAAW,UACX,OAAO,QAAQ,IAAI,QAAQ,OAAO,KAAK,YACvC,OAAO,QAAQ,IAAI,QAAQ,cAAc,KAAK,YAC9C,OAAO,QAAQ,IAAI,QAAQ,iBAAiB,KAAK,YACjD,OAAO,QAAQ,IAAI,QAAQ,OAAO,KAAK,YACvC,OAAO,QAAQ,IAAI,QAAQ,OAAO,KAAK;;AAIzC,SAAS,uBAAuB,OAAmD;CAClF,MAAM,SAAS,YAAY,MAAM;AACjC,QACC,WAAW,UACX,OAAO,QAAQ,IAAI,QAAQ,OAAO,KAAK,YACvC,OAAO,QAAQ,IAAI,QAAQ,OAAO,KAAK,YACvC,OAAO,QAAQ,IAAI,QAAQ,OAAO,KAAK;;AAIzC,SAASA,0BAAwB,OAAgD;CAChF,MAAM,SAAS,YAAY,MAAM;AACjC,QACC,WAAW,UACX,OAAO,QAAQ,IAAI,QAAQ,UAAU,KAAK,YAC1C,cAAc,QAAQ,IAAI,QAAQ,MAAM,CAAC,IACzC,OAAO,QAAQ,IAAI,QAAQ,UAAU,KAAK,YAC1C,OAAO,QAAQ,IAAI,QAAQ,UAAU,KAAK;;AAI5C,SAAS,oBAAoB,OAA4C;CACxE,MAAM,SAAS,YAAY,MAAM;AACjC,QACC,WAAW,UACX,OAAO,QAAQ,IAAI,QAAQ,YAAY,KAAK,YAC5C,OAAO,QAAQ,IAAI,QAAQ,aAAa,KAAK,YAC7C,OAAO,QAAQ,IAAI,QAAQ,UAAU,KAAK,YAC1C,OAAO,QAAQ,IAAI,QAAQ,YAAY,KAAK,YAC5C,OAAO,QAAQ,IAAI,QAAQ,WAAW,KAAK,YAC3C,uBAAuB,QAAQ,IAAI,QAAQ,MAAM,CAAC,IAClD,OAAO,QAAQ,IAAI,QAAQ,UAAU,KAAK,YAC1C,OAAO,QAAQ,IAAI,QAAQ,SAAS,KAAK;;AAI3C,eAAe,iBACd,UACA,SACA,oBACkB;AAClB,KAAI,CAAC,SAAS,IAAI;EACjB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,eAAe;AACnE,QAAM,IAAI,UAAU,GAAG,QAAQ,iBAAiB,SAAS,OAAO,IAAI,YAAY;;CAEjF,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,KAAI,CAAC,mBAAmB,QAAQ,CAC/B,OAAM,IAAI,UACT,GAAG,QAAQ,iCAAiC,KAAK,UAAU,QAAQ,CAAC,MAAM,GAAG,IAAI,GACjF;AAEF,QAAO;;AAGR,SAAgB,kBAAkB,SAGlB;CACf,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,UAAU,QAAQ,cAAc,QAAQ,QAAQ,GAAG;AAEzD,QAAO;EACN,gBAAgB,OAAO,YAAoD;AAE1E,UAAO,MAAM,iBADI,MAAM,UAAU,GAAG,QAAQ,SAAS,UAAU,EAG9D,kCACAA,0BACA;;EAEF,WAAW,OAAO,YAAgD;AAEjE,UAAO,MAAM,iBADI,MAAM,UAAU,GAAG,QAAQ,SAAS,QAAQ,OAAO,EAC5B,6BAA6B,oBAAoB;;EAE1F,cAAc,OAAO,YAAmC;AACvD,SAAM,UAAU,GAAG,QAAQ,SAAS,WAAW,EAC9C,QAAQ,UACR,CAAC;;EAEH,cAAc,OAAO,YAA4C;GAChE,MAAM,WAAW,MAAM,UAAU,GAAG,QAAQ,SAAS;IACpD,MAAM,KAAK,UAAU,QAAQ;IAC7B,SAAS,EACR,gBAAgB,oBAChB;IACD,QAAQ;IACR,CAAC;AACF,OAAI,CAAC,SAAS,IAAI;IACjB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,eAAe;AACnE,UAAM,IAAI,UAAU,sCAAsC,SAAS,OAAO,IAAI,YAAY;;GAE3F,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,OAAI,CAACA,0BAAwB,QAAQ,CACpC,OAAM,IAAI,UACT,kDAAkD,KAAK,UAAU,QAAQ,CAAC,MAAM,GAAG,IAAI,GACvF;AAEF,UAAO;;EAER;;;;;AC3JF,SAAgB,wBAAwB,OAAgD;AACvF,QACC,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAAgC,YAAY,YACpD,OAAQ,MAA4B,QAAQ,YAC3C,MAA4B,QAAQ;;;;;ACVvC,SAAgB,yBAAyB,QAAgB,MAAkC;AAC1F,KAAI,CAAC,QAAQ,KAAK,WAAW,EAC5B,QAAO;AAIR,QAAO,UADa,KAAK,KAAK,QAAQ,IAAI,IAAI,QAAQ,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CACrD,IAAI;;;;;ACIlC,SAAS,cAAc,QAMZ;AACV,QAAO;EACN,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,CAAC,KAAK,KAAK;;AAGb,SAAgB,oCACf,SAKA,cAW2C;CAC3C,MAAM,6BAAa,IAAI,KAA+B;AAEtD,QAAO,OAAO,WAAW;EACxB,MAAM,YAAY,QAAQ,aAAa;EACvC,MAAM,WAAW,cAAc;GAC9B,mBAAmB,OAAO;GAC1B;GACA,UAAU,OAAO;GACjB,cAAc,OAAO;GACrB,QAAQ,QAAQ;GAChB,CAAC;EACF,MAAM,cACL,aAAa,oBAAoB,EAChC,eAAe,QAAQ,eACvB,CAAC,IAAI,kBAAkB,EAAE,eAAe,QAAQ,eAAe,CAAC;EAClE,MAAM,cAAc,WAAW,IAAI,SAAS;AAC5C,MAAI,YACH,KAAI;AACH,SAAM,YAAY,eAAe,YAAY,MAAM,QAAQ;AAC3D,UAAO,YAAY;UACZ;AACP,cAAW,OAAO,SAAS;;EAG7B,MAAM,gBAAgB,MAAM,YAAY,aAAa;GACpD,mBAAmB,OAAO;GAC1B;GACA,UAAU,OAAO;GACjB,cAAc,OAAO;GACrB,QAAQ,QAAQ;GAChB,CAAC;AACF,MAAI,CAAC,wBAAwB,cAAc,CAC1C,OAAM,IAAI,UAAU,wDAAwD;EAG7E,MAAM,QAAQ;EACd,MAAM,SAAS,2BAA2B;GACzC,KAAK,OAAO;GACZ,eAAe,QAAQ;GACvB,uBAAuB,aAAa;GACpC;GACA,sBAAsB,aAAa;GACnC,eAAe,aAAa;GAC5B,UAAU,OAAO;GACjB,QAAQ,QAAQ;GAChB,CAAC;AACF,aAAW,IAAI,UAAU;GAAE;GAAQ;GAAO,CAAC;AAC3C,SAAO;;;AAIT,SAAS,2BAA2B,SAaH;CAChC,MAAMC,4BAA0E,OAC/E,gBAEA,MAAM,QAAQ,qBAAqB;EAClC,GAAI,YAAY,iBAAiB,SAAY,EAAE,cAAc,YAAY,cAAc,GAAG,EAAE;EAC5F,QAAQ,yBAAyB,YAAY,QAAQ,YAAY,KAAK;EACtE,GAAI,YAAY,WAAW,SAAY,EAAE,QAAQ,YAAY,QAAQ,GAAG,EAAE;EAC1E,KAAK,QAAQ,MAAM;EACnB,GAAI,YAAY,UAAU,SAAY,EAAE,OAAO,YAAY,OAAO,GAAG,EAAE;EACvE,CAAC;CAEH,MAAM,iBAAiB,QAAQ,wBAAwB;EACtD,yBAAyB,QAAQ,MAAM;EACvC,oBAAoB,QAAQ,MAAM;EAClC,sBAAsB;EACtB,CAAC;AAEF,QAAO;EACN,GAAI,iBAAiB,EAAE,gBAAgB,GAAG,EAAE;EAC5C,GAAI,QAAQ,IAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,GAAG,EAAE;EAClE,aAAa,GAAG,QAAQ,cAAc,IAAI,QAAQ,OAAO;EACzD,iBAAiB;EACjB,IAAI;EACJ,WAAW,QAAQ,MAAM;EACzB,cAAc,QAAQ,MAAM;EAC5B,SAAS,QAAQ,MAAM;EACvB,eAAe,OAAO,eACrB,MAAM,QAAQ,cAAc;GAC3B,SAAS,WAAW;GACpB,KAAK,WAAW;GAChB,KAAK,QAAQ,MAAM;GACnB,QAAQ,WAAW;GACnB,SAAS,WAAW,WAAW,QAAQ,MAAM;GAC7C,CAAC;EACH,cAAc,OAAO,mBAAmB;AACvC,OACC,eAAe,SACf,OAAO,eAAe,UAAU,YAChC,aAAa,eAAe,MAE5B,OAAO,eAAe,MAA2C,SAAS;;EAG5E,iBAAiB,OAAO,kBACvB,MAAM,QAAQ,qBAAqB;GAClC,QAAQ,cAAc;GACtB,KAAK,QAAQ,MAAM;GACnB,CAAC;EACH;;;;;AC1JF,SAAgB,oCACf,SAIA,cAMC;AACD,QAAO;EACN,iBAAiB,OAAO,WAAW;GAClC,MAAM,cACL,aAAa,oBAAoB,EAChC,eAAe,QAAQ,eACvB,CAAC,IAAI,kBAAkB,EAAE,eAAe,QAAQ,eAAe,CAAC;AAClE,OAAI;AAEH,WAAO;KAAE,kBAAkB;KAAM,SADb,MAAM,YAAY,UAAU,OAAO,MAAM,cAAc,KACjB;KAAM;WACzD;AACP,WAAO;KAAE,kBAAkB;KAAO,SAAS;KAAO;;;EAGpD,eAAe,OAAO,WAAW;AAKhC,UAHC,aAAa,oBAAoB,EAChC,eAAe,QAAQ,eACvB,CAAC,IAAI,kBAAkB,EAAE,eAAe,QAAQ,eAAe,CAAC,EAChD,aAAa,OAAO,MAAM,cAAc;;EAE3D;;;;;AC7BF,SAAgB,4BACf,QAC+B;AAC/B,KAAI,OAAO,OAAO,kBAAkB,YAAY,OAAO,OAAO,WAAW,SACxE,OAAM,IAAI,MAAM,4DAA4D;AAG7E,QAAO;EACN,eAAe,OAAO;EACtB,GAAI,OAAO,OAAO,cAAc,WAAW,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;EAC/E,QAAQ,OAAO;EACf;;;;;ACVF,SAAgB,kBAAkB,KAMhC;AACD,QAAO;EACN,eAAe,OAAO,EAAE,SAAS,KAAK,KAAK,UAAU,QAAQ,cAAc;GAC1E,MAAM,UAAU,MAAM,IAAI,oCAAoC;IAC7D,SAAS;IACT,cAAc,SAAS;IACvB,uBAAuB;IACvB,QAAQ,GAAG,SAAS,KAAK,GAAG,SAAS,KAAK,GAAG,SAAS;IACtD,gBAAgB;IAChB,eAAe;IACf,CAAC;GACF,MAAM,2BAA2B,IAAI;AACrC,UAAO;IACN,MAAM,IAAI,oBAAoB;KAC7B,eAAe,IAAI,uBAAuB;MACzC;MACA;MACA;MACA,CAAC;KACF;KACA,KAAK;KACL,CAAC;IACF,KAAK,IAAI,gBAAgB,QAAQ,IAAI,CAAC;IACtC,eAAe;KACd,SAAS,YAA2B;AACnC,UAAI,yBACH,OAAM,yBAAyB,QAAQ;;KAGzC;KACA;IACD,WAAW;IACX;;EAEF,wBACE,kBACA,WACA,IAAI,iCAAiC;GACpC,SAAS,OAAO;GAChB,SAAS;IACR,yBAAyB,aAAa;IACtC,oBAAoB,aAAa;IACjC,sBAAsB,aAAa;IACnC;GACD,CAAC;EACJ,sBAAsB,OAAO,EAAE,cAAc,QAAQ,QAAQ,KAAK,UAAU,YAAY;GACvF,MAAM,UAAU,MAAM,IAAI,oCAAoC;IAC7D,SAAS;IACT,cAAc,SAAS;IACvB,uBAAuB;IACvB,QAAQ,GAAG,SAAS,KAAK,GAAG,SAAS,KAAK,GAAG,SAAS;IACtD,gBAAgB;IAChB,eAAe;IACf,CAAC;AACF,UAAO,MAAM,IAAI,qBAAqB;IACrC,GAAI,iBAAiB,SAAY,EAAE,cAAc,GAAG,EAAE;IACtD,eAAe,IAAI,mBAAmB;KAAC;KAAW;KAAM;KAAQ;KAAsB,CAAC;IACvF;IACA,GAAI,WAAW,SAAY,EAAE,QAAQ,GAAG,EAAE;IAC1C,GAAI,UAAU,SAAY,EAAE,OAAO,GAAG,EAAE;IACxC,CAAC;;EAEH;;;;;ACdF,SAAgB,eAAe,OAY7B;AACD,KAAI,OAAO,UAAU,YAAY,UAAU,KAC1C,OAAM,IAAI,UAAU,uCAAuC;AAG5D,MAAK,MAAM,cAAc;EACxB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CACA,KAAI,OAAQ,MAAkC,gBAAgB,WAC7D,OAAM,IAAI,UAAU,yCAAyC,aAAa;;;;;AC7E7E,MAAM,SAAS;CACd,IAAI;CACJ,MAAM;CACN,aAAa;CAEb,SAAS,KAGA;AACR,MAAI,IAAI,qBAAqB,OAC5B;EAGD,MAAM,eAAe,4BAA4B,IAAI,aAAa;AA6BlE,EA3BmB,OADH,gCACmB,MAAM,WAAoC;AAC5E,kBAAe,OAAO;GAmBtB,MAAM,sBAAsB,kBAjBG;IAC9B,wBAAwB,OAAO;IAC/B,oBAAoB,OAAO;IAC3B,qBAAqB,OAAO;IAC5B,kCAAkC,OAAO;IACzC,qCAAqC,OAAO;IAC5C,GAAI,OAAO,OAAO,6BAA6B,aAC5C,EACA,0BAA0B,OAAO,0BAGjC,GACA,EAAE;IACL,sBAAsB,OAAO;IAC7B,iBAAiB,OAAO;IACxB,CAEwD;AACzD,UAAO,uBAAuB,YAAY;IACzC,SAAS,oCAAoC,cAAc,oBAAoB;IAC/E,SAAS,oCAAoC,cAAc,oBAAoB;IAC/E,CAAC;IACD,CAES,OAAO,UAAmB;GACpC,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,KAAK,UAAU,MAAM;AAC9E,WAAQ,OAAO,MAAM,2CAA2C,QAAQ,IAAI;IAC3E;;CAEH;AAED,2CAAe;;;;ACvDf,MAAa,wCAAwC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-vm/openclaw-agent-vm-plugin",
-  "version": "0.0.30",
+  "version": "0.0.32",
   "description": "OpenClaw sandbox-backend plugin that delegates execution to a Gondolin-managed VM.",
   "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
   "bugs": {
@@ -29,7 +29,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agent-vm/gondolin-adapter": "0.0.30"
+    "@agent-vm/gondolin-adapter": "0.0.32"
   },
   "scripts": {
     "build": "tsdown && cp openclaw.plugin.json sdk-validate.mjs dist/",