@openclaw/openshell-sandbox 2026.8.1-beta.2 → 2026.8.1-beta.3

package/dist/index.js

@@ -1,5 +1,5 @@
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
-import { buildRemoteWorkdirValidationCommand, buildValidatedExecRemoteCommand, createRemoteShellSandboxFsBridge, createSshSandboxSessionFromConfigText, createWritableRenameTargetResolver, disposeSshSandboxSession, registerSandboxBackend, resolvePreferredOpenClawTmpDir, runPluginCommandWithTimeout, runSshSandboxCommand, sanitizeEnvVars, shellEscape, withTempWorkspace } from "openclaw/plugin-sdk/sandbox";
+import { buildRemoteCommand, buildRemoteWorkdirValidationCommand, buildValidatedExecRemoteCommand, createRemoteShellSandboxFsBridge, createSshSandboxSessionFromConfigText, createWritableRenameTargetResolver, disposeSshSandboxSession, registerSandboxBackend, resolvePreferredOpenClawTmpDir, runPluginCommandWithTimeout, runSshSandboxCommand, sanitizeEnvVars, shellEscape, withTempWorkspace } from "openclaw/plugin-sdk/sandbox";
 import { createHash } from "node:crypto";
 import fsPromises from "node:fs/promises";
 import path from "node:path";
@@ -8,8 +8,8 @@ import { buildPluginConfigSchema } from "openclaw/plugin-sdk/core";
 import { formatPluginConfigIssue, mapPluginConfigIssues } from "openclaw/plugin-sdk/extension-shared";
 import { MAX_TIMER_TIMEOUT_SECONDS } from "openclaw/plugin-sdk/number-runtime";
 import { z } from "zod";
-import { root } from "openclaw/plugin-sdk/file-access-runtime";
-import { FsSafeError, isPathInside, movePathWithCopyFallback } from "openclaw/plugin-sdk/security-runtime";
+import { isPathInside, root } from "openclaw/plugin-sdk/file-access-runtime";
+import { FsSafeError, movePathWithCopyFallback } from "openclaw/plugin-sdk/security-runtime";
 import pLimit from "p-limit";
 //#region extensions/openshell/src/cli.ts
 function buildOpenShellBaseArgv(config) {
@@ -19,9 +19,6 @@ function buildOpenShellBaseArgv(config) {
 	if (config.workspace) argv.push("--workspace", config.workspace);
 	return argv;
 }
-function buildRemoteCommand(argv) {
-	return argv.map((entry) => shellEscape(entry)).join(" ");
-}
 function applyGatewayEndpointToSshConfig(params) {
 	const endpoint = params.gatewayEndpoint?.trim();
 	if (!endpoint) return params.configText;
@@ -854,69 +851,25 @@ async function createOpenShellSandboxBackend(params) {
 		config: params.pluginConfig,
 		sandboxName
 	};
-	const impl = new OpenShellSandboxBackendImpl({
+	return new OpenShellSandboxBackendImpl({
 		createParams: params.createParams,
 		execContext,
 		legacyRuntimeAdopted: resolvedSandboxName.legacyRuntimeAdopted,
 		remoteWorkspaceDir: params.pluginConfig.remoteWorkspaceDir,
 		remoteAgentWorkspaceDir: params.pluginConfig.remoteAgentWorkspaceDir
-	});
-	return {
-		id: "openshell",
-		runtimeId: sandboxName,
-		runtimeLabel: sandboxName,
-		workdir: params.pluginConfig.remoteWorkspaceDir,
-		env: params.createParams.cfg.docker.env,
-		mode: params.pluginConfig.mode,
-		configLabel: params.pluginConfig.from,
-		configLabelKind: "Source",
-		workdirValidation: "backend",
-		validateWorkdir: async (workdir) => await impl.validateWorkdir(workdir),
-		discardPreparedWorkdir: (workdir) => impl.discardPreparedWorkdir(workdir),
-		workdirRoots: [params.pluginConfig.remoteWorkspaceDir, params.pluginConfig.remoteAgentWorkspaceDir],
-		buildExecSpec: async ({ command, workdir, env, usePty }) => {
-			const pending = await impl.prepareExec({
-				command,
-				workdir,
-				env,
-				usePty
-			});
-			return {
-				argv: pending.argv,
-				env: buildOpenShellSshExecEnv(),
-				stdinMode: "pipe-open",
-				finalizeToken: pending.token
-			};
-		},
-		finalizeExec: async ({ token }) => {
-			await impl.finalizeExec(token);
-		},
-		runShellCommand: async (command) => await impl.runRemoteShellScript(command),
-		createFsBridge: ({ sandbox }) => params.pluginConfig.mode === "remote" ? createRemoteShellSandboxFsBridge({
-			sandbox,
-			runtime: impl.asHandle()
-		}) : createOpenShellFsBridge({
-			sandbox,
-			backend: impl.asHandle()
-		}),
-		remoteWorkspaceDir: params.pluginConfig.remoteWorkspaceDir,
-		remoteAgentWorkspaceDir: params.pluginConfig.remoteAgentWorkspaceDir,
-		runRemoteShellScript: async (command) => await impl.runRemoteShellScript(command),
-		mkdirpRemotePath: async (remotePath, signal) => await impl.mkdirpRemotePath(remotePath, signal),
-		removeRemotePath: async (remotePath, removeParams) => await impl.removeRemotePath(remotePath, removeParams),
-		renameRemotePath: async (fromRemotePath, toRemotePath, signal) => await impl.renameRemotePath(fromRemotePath, toRemotePath, signal),
-		syncLocalPathToRemote: async (localPath, remotePath) => await impl.syncLocalPathToRemote(localPath, remotePath)
-	};
+	}).asHandle();
 }
 var OpenShellSandboxBackendImpl = class {
 	constructor(params) {
 		this.params = params;
+		this.handle = null;
 		this.ensurePromise = null;
 		this.preparedRemoteWorkspaceForNextExec = null;
 		this.remoteSeedPending = false;
 	}
 	asHandle() {
-		return {
+		if (this.handle) return this.handle;
+		const handle = {
 			id: "openshell",
 			runtimeId: this.params.execContext.sandboxName,
 			runtimeLabel: this.params.execContext.sandboxName,
@@ -951,10 +904,10 @@ var OpenShellSandboxBackendImpl = class {
 			runShellCommand: async (command) => await this.runRemoteShellScript(command),
 			createFsBridge: ({ sandbox }) => this.params.execContext.config.mode === "remote" ? createRemoteShellSandboxFsBridge({
 				sandbox,
-				runtime: this.asHandle()
+				runtime: handle
 			}) : createOpenShellFsBridge({
 				sandbox,
-				backend: this.asHandle()
+				backend: handle
 			}),
 			runRemoteShellScript: async (command) => await this.runRemoteShellScript(command),
 			mkdirpRemotePath: async (remotePath, signal) => await this.mkdirpRemotePath(remotePath, signal),
@@ -962,6 +915,8 @@ var OpenShellSandboxBackendImpl = class {
 			renameRemotePath: async (fromRemotePath, toRemotePath, signal) => await this.renameRemotePath(fromRemotePath, toRemotePath, signal),
 			syncLocalPathToRemote: async (localPath, remotePath) => await this.syncLocalPathToRemote(localPath, remotePath)
 		};
+		this.handle = handle;
+		return handle;
 	}
 	async prepareExec(params) {
 		const remoteWorkdir = params.workdir ?? this.params.remoteWorkspaceDir;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/openshell-sandbox",
-  "version": "2026.8.1-beta.2",
+  "version": "2026.8.1-beta.3",
   "description": "OpenClaw sandbox backend for the NVIDIA OpenShell CLI with mirrored local workspaces and SSH command execution.",
   "repository": {
     "type": "git",
@@ -21,10 +21,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.8.1-beta.2"
+      "pluginApi": ">=2026.8.1-beta.3"
     },
     "build": {
-      "openclawVersion": "2026.8.1-beta.2",
+      "openclawVersion": "2026.8.1-beta.3",
       "bundledDist": false
     },
     "release": {
@@ -41,7 +41,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.8.1-beta.2"
+    "openclaw": ">=2026.8.1-beta.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {