langbot-plugin 0.4.2b1__tar.gz → 0.4.2b2__tar.gz

{langbot_plugin-0.4.2b1 → langbot_plugin-0.4.2b2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: langbot-plugin
-Version: 0.4.2b1
+Version: 0.4.2b2
 Summary: This package contains the SDK, CLI for building plugins for LangBot, plus the runtime for hosting LangBot plugins
 Project-URL: Homepage, https://langbot.app
 Project-URL: Repository, https://github.com/langbot-app/langbot-plugin-sdk

{langbot_plugin-0.4.2b1 → langbot_plugin-0.4.2b2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "langbot-plugin"
-version = "0.4.2b1"
+version = "0.4.2b2"
 description = "This package contains the SDK, CLI for building plugins for LangBot, plus the runtime for hosting LangBot plugins"
 readme = "README.md"
 authors = [

{langbot_plugin-0.4.2b1 → langbot_plugin-0.4.2b2}/src/langbot_plugin/box/nsjail_backend.py

@@ -116,6 +116,19 @@ class NsjailBackend(BaseSandboxBackend):
         for d in (root_dir, workspace_dir, tmp_dir, home_dir):
             d.mkdir(parents=True, exist_ok=True)
 
+        # When a host_path is mounted into the sandbox it becomes the nsjail
+        # bind-mount source (see _build_mounts). nsjail requires the source to
+        # already exist on the host, otherwise the bind-mount fails and the
+        # command exits 255 with no stdout/stderr. The per-session loop above
+        # never creates host_path (it lives outside session_dir), so ensure it
+        # exists here. Read-only mounts intentionally are NOT auto-created: a
+        # missing read-only source is a caller error that should surface.
+        if (
+            spec.host_path is not None
+            and spec.host_path_mode == BoxHostMountMode.READ_WRITE
+        ):
+            os.makedirs(spec.host_path, exist_ok=True)
+
         # If host_path is specified, we will use it directly instead of the
         # per-session workspace when building nsjail args (see _build_mounts).
         meta = {

{langbot_plugin-0.4.2b1 → langbot_plugin-0.4.2b2}/tests/box/test_nsjail_backend.py

@@ -93,20 +93,62 @@ async def test_start_session_creates_directories(backend, tmp_base):
 @pytest.mark.anyio
 async def test_start_session_with_host_path(backend, tmp_base):
     tmp_base.mkdir(parents=True, exist_ok=True)
+    host_path = str(tmp_base / 'rw_host')
     spec = BoxSpec(
         session_id='sess2',
         cmd='ls',
-        host_path='/some/path',
+        host_path=host_path,
         host_path_mode=BoxHostMountMode.READ_WRITE,
         mount_path='/project',
     )
 
     info = await backend.start_session(spec)
-    assert info.host_path == '/some/path'
+    assert info.host_path == host_path
     assert info.host_path_mode == BoxHostMountMode.READ_WRITE
     assert info.mount_path == '/project'
 
 
+@pytest.mark.anyio
+async def test_start_session_creates_missing_rw_host_path(backend, tmp_base):
+    """Regression: a read-write host_path that does not yet exist must be
+    created by start_session, otherwise nsjail's --bindmount source is missing
+    and the command exits 255 with no output (SaaS MCP shared-workspace bug)."""
+    tmp_base.mkdir(parents=True, exist_ok=True)
+    host_path = tmp_base / 'never_created' / 'workspace'
+    assert not host_path.exists()
+
+    spec = BoxSpec(
+        session_id='sess-mkdir',
+        cmd='ls',
+        host_path=str(host_path),
+        host_path_mode=BoxHostMountMode.READ_WRITE,
+        mount_path='/workspace',
+    )
+
+    await backend.start_session(spec)
+    assert host_path.is_dir()
+
+
+@pytest.mark.anyio
+async def test_start_session_does_not_create_ro_host_path(backend, tmp_base):
+    """A missing read-only host_path is a caller error and must NOT be silently
+    created — it should surface rather than mount an empty dir."""
+    tmp_base.mkdir(parents=True, exist_ok=True)
+    host_path = tmp_base / 'ro_missing'
+    assert not host_path.exists()
+
+    spec = BoxSpec(
+        session_id='sess-ro',
+        cmd='ls',
+        host_path=str(host_path),
+        host_path_mode=BoxHostMountMode.READ_ONLY,
+        mount_path='/project',
+    )
+
+    await backend.start_session(spec)
+    assert not host_path.exists()
+
+
 # ── stop_session ──────────────────────────────────────────────────────
 
 @pytest.mark.anyio