30346f9788
Qualify non-shared sandbox identities by resolved workspace while preserving shared runtime names. Existing non-shared runtimes reset once under the new identity. Related: #51363 Co-authored-by: Tayoun <39609208+tayoun@users.noreply.github.com>
@openclaw/openshell-sandbox
Official NVIDIA OpenShell sandbox backend for OpenClaw.
This plugin lets OpenClaw use OpenShell-managed sandboxes with mirrored local workspaces and SSH command execution.
Configuring an OpenShell workspace requires OpenShell v0.0.88 or newer. The
plugin supports OpenShell control-plane workspaces through
plugins.entries.openshell.config.workspace; this is separate from OpenClaw's
local/remote filesystem workspace mode. The setting applies to the whole plugin
instance, not individual agents or sessions. When unset, the plugin preserves
the OpenShell CLI's ambient OPENSHELL_WORKSPACE selection, or its default
fallback when no ambient selection exists.
Install
openclaw plugins install @openclaw/openshell-sandbox
Restart the Gateway after installing or updating the plugin.
Configure
Use the OpenShell docs for credentials, workspace mirroring, runtime selection, and troubleshooting:
Package
- Plugin id:
openshell - Package:
@openclaw/openshell-sandbox - Minimum OpenClaw host:
2026.5.12-beta.1