Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
92 lines
2.7 KiB
TypeScript
92 lines
2.7 KiB
TypeScript
// Openshell plugin module implements cli behavior.
|
|
import {
|
|
createSshSandboxSessionFromConfigText,
|
|
runPluginCommandWithTimeout,
|
|
shellEscape,
|
|
type SshSandboxSession,
|
|
} from "openclaw/plugin-sdk/sandbox";
|
|
import type { ResolvedOpenShellPluginConfig } from "./config.js";
|
|
|
|
export {
|
|
buildExecRemoteCommand,
|
|
buildRemoteWorkdirValidationCommand,
|
|
buildValidatedExecRemoteCommand,
|
|
shellEscape,
|
|
} from "openclaw/plugin-sdk/sandbox";
|
|
|
|
export type OpenShellExecContext = {
|
|
config: ResolvedOpenShellPluginConfig;
|
|
sandboxName: string;
|
|
timeoutMs?: number;
|
|
};
|
|
|
|
export function resolveOpenShellCommand(command: string): string {
|
|
return command;
|
|
}
|
|
|
|
export function buildOpenShellBaseArgv(config: ResolvedOpenShellPluginConfig): string[] {
|
|
const argv = [resolveOpenShellCommand(config.command)];
|
|
if (config.gateway) {
|
|
argv.push("--gateway", config.gateway);
|
|
}
|
|
if (config.gatewayEndpoint) {
|
|
argv.push("--gateway-endpoint", config.gatewayEndpoint);
|
|
}
|
|
return argv;
|
|
}
|
|
|
|
export function buildRemoteCommand(argv: string[]): string {
|
|
return argv.map((entry) => shellEscape(entry)).join(" ");
|
|
}
|
|
|
|
export function applyGatewayEndpointToSshConfig(params: {
|
|
configText: string;
|
|
gatewayEndpoint?: string;
|
|
}): string {
|
|
const endpoint = params.gatewayEndpoint?.trim();
|
|
if (!endpoint) {
|
|
return params.configText;
|
|
}
|
|
return params.configText.replace(/^(\s*ProxyCommand\s+)(.*)$/m, (line, prefix, command) => {
|
|
if (!command.includes("ssh-proxy")) {
|
|
return line;
|
|
}
|
|
if (/(^|\s)--server(\s|=)|(^|\s)--gateway-endpoint(\s|=)/.test(command)) {
|
|
return line;
|
|
}
|
|
return `${prefix}${command} --server ${shellEscape(endpoint)}`;
|
|
});
|
|
}
|
|
|
|
export async function runOpenShellCli(params: {
|
|
context: OpenShellExecContext;
|
|
args: string[];
|
|
cwd?: string;
|
|
timeoutMs?: number;
|
|
}): Promise<{ code: number; stdout: string; stderr: string }> {
|
|
return await runPluginCommandWithTimeout({
|
|
argv: [...buildOpenShellBaseArgv(params.context.config), ...params.args],
|
|
cwd: params.cwd,
|
|
timeoutMs: params.timeoutMs ?? params.context.timeoutMs ?? params.context.config.timeoutMs,
|
|
env: process.env,
|
|
});
|
|
}
|
|
|
|
export async function createOpenShellSshSession(params: {
|
|
context: OpenShellExecContext;
|
|
}): Promise<SshSandboxSession> {
|
|
const result = await runOpenShellCli({
|
|
context: params.context,
|
|
args: ["sandbox", "ssh-config", params.context.sandboxName],
|
|
});
|
|
if (result.code !== 0) {
|
|
throw new Error(result.stderr.trim() || "openshell sandbox ssh-config failed");
|
|
}
|
|
return await createSshSandboxSessionFromConfigText({
|
|
configText: applyGatewayEndpointToSshConfig({
|
|
configText: result.stdout,
|
|
gatewayEndpoint: params.context.config.gatewayEndpoint,
|
|
}),
|
|
});
|
|
}
|