Skip to content

Feat/openshell user sandbox - #461

Open
kunal0137 wants to merge 5 commits into
SEMOSS:devfrom
kunal0137:feat/openshell-user-sandbox
Open

kunal0137 wants to merge 5 commits into
SEMOSS:devfrom
kunal0137:feat/openshell-user-sandbox

Conversation

@kunal0137

Copy link
Copy Markdown
Contributor

Description

Changes Made

How to Test

  1. Steps to reproduce/test the behavior
  2. Expected outcomes

Notes

kunal0137 and others added 3 commits October 24, 2026 00:54
…active

Every authenticated request refreshes the user's sandbox lease (at most once
a minute per session, for the session timeout). A session ending releases
its lease; the sandbox goes when the user's last session does, rather than
with whichever session happened to start it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
sessionDestroyed also fires when Tomcat stops. Treat only a logout or an idle
timeout as the session being over; otherwise keep the sandbox lease and do
not clear the insight's python variables, which live on in the user's worker.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…onIsOver

Users without a primary login keep the per-session cleanup; the expiry
slack is a named constant.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@kunal0137
kunal0137 requested a review from a team as a code owner October 24, 2026 02:51
@snyk-io

snyk-io Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

The filter records the sandbox owner on the session while the user is
logged in; session cleanup uses it, because a provider logout has already
dropped the token the owner was derived from.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant