mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-29 17:35:13 +00:00
ba06376c79
Harden the Codex app-server native execution bridge for OpenClaw sandboxed runs. The change keeps core sandbox policy in OpenClaw while exposing the process, filesystem, and HTTP relay behavior Codex needs inside a scoped exec server. The large exec-server/test files were split into focused modules before landing, and the PR was rebased onto current main with focused tests, Testbox changed checks, CI, and Codex autoreview green. Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
62 lines
1.6 KiB
TypeScript
62 lines
1.6 KiB
TypeScript
export type {
|
|
CreateSandboxBackendParams,
|
|
RemoteShellSandboxHandle,
|
|
RunSshSandboxCommandParams,
|
|
SandboxBackendCommandParams,
|
|
SandboxBackendCommandResult,
|
|
SandboxBackendExecSpec,
|
|
SandboxBackendFactory,
|
|
SandboxFsBridge,
|
|
SandboxFsStat,
|
|
SandboxBackendHandle,
|
|
SandboxBackendId,
|
|
SandboxBackendManager,
|
|
SandboxBackendRegistration,
|
|
SandboxBackendRuntimeInfo,
|
|
SandboxContext,
|
|
SandboxResolvedPath,
|
|
SandboxSshConfig,
|
|
SshSandboxSession,
|
|
SshSandboxSettings,
|
|
} from "../agents/sandbox.js";
|
|
export type { OpenClawConfig } from "../config/config.js";
|
|
|
|
export {
|
|
buildExecRemoteCommand,
|
|
buildRemoteCommand,
|
|
buildSshSandboxArgv,
|
|
createRemoteShellSandboxFsBridge,
|
|
createWritableRenameTargetResolver,
|
|
createSshSandboxSessionFromConfigText,
|
|
createSshSandboxSessionFromSettings,
|
|
disposeSshSandboxSession,
|
|
getSandboxBackendFactory,
|
|
getSandboxBackendManager,
|
|
isToolAllowed,
|
|
registerSandboxBackend,
|
|
requireSandboxBackendFactory,
|
|
resolveSandboxRuntimeStatus,
|
|
resolveWritableRenameTargets,
|
|
resolveWritableRenameTargetsForBridge,
|
|
runSshSandboxCommand,
|
|
sanitizeEnvVars,
|
|
shellEscape,
|
|
uploadDirectoryToSshTarget,
|
|
} from "../agents/sandbox.js";
|
|
|
|
export {
|
|
runPluginCommandWithTimeout,
|
|
type PluginCommandRunOptions,
|
|
type PluginCommandRunResult,
|
|
} from "./run-command.js";
|
|
export { resolvePreferredOpenClawTmpDir } from "../infra/tmp-openclaw-dir.js";
|
|
export {
|
|
tempWorkspace,
|
|
tempWorkspaceSync,
|
|
type TempWorkspace,
|
|
type TempWorkspaceOptions,
|
|
type TempWorkspaceSync,
|
|
withTempWorkspace,
|
|
withTempWorkspaceSync,
|
|
} from "../infra/private-temp-workspace.js";
|