fix(box): repair sdk runtime entrypoints and nsjail session parity

Author: huanghuoguoguo

pyproject.toml

@@ -9,6 +9,7 @@ authors = [
 requires-python = ">=3.10"
 dependencies = [
     "aiofiles>=24.1.0",
+    "aiohttp>=3.9.0",
     "dotenv>=0.9.9",
     "httpx>=0.28.1",
     "jinja2>=3.1.6",

src/langbot_plugin/box/nsjail_backend.py

@@ -151,7 +151,7 @@ async def start_session(self, spec: BoxSpec) -> BoxSessionInfo:
             cpus=spec.cpus,
             memory_mb=spec.memory_mb,
             pids_limit=spec.pids_limit,
-            read_only_rootfs=True,  # always true for nsjail
+            read_only_rootfs=spec.read_only_rootfs,
             created_at=now,
             last_used_at=now,
         )
@@ -233,7 +233,7 @@ async def start_managed_process(
             cpus=session.cpus,
             memory_mb=session.memory_mb,
             pids_limit=session.pids_limit,
-            read_only_rootfs=True,
+            read_only_rootfs=session.read_only_rootfs,
         )
 
         args = self._build_nsjail_args(session, pseudo_spec, session_dir)

src/langbot_plugin/box/server.py

@@ -251,14 +251,14 @@ async def new_connection_callback(connection: Connection) -> None:
             await runner.cleanup()
 
 
-def main() -> None:
+def main(argv: list[str] | None = None) -> None:
     parser = argparse.ArgumentParser(description='LangBot Box Runtime Service')
     parser.add_argument('--host', default='0.0.0.0', help='Bind address')
     parser.add_argument('--port', type=int, default=5410, help='Bind port (ws relay)')
     parser.add_argument(
         '--mode', choices=['stdio', 'ws'], default='stdio', help='Control channel transport (default: stdio)'
     )
-    args = parser.parse_args()
+    args = parser.parse_args(argv)
 
     configure_process_logging(stream=sys.stderr)
     asyncio.run(_run_server(args.host, args.port, args.mode))

src/langbot_plugin/cli/__init__.py

@@ -158,7 +158,7 @@ def main():
             runtime_app.main(args)
         case "box":
             from langbot_plugin.box.server import main as box_main
-            box_main()
+            box_main(sys.argv[2:])
         case _:
             cli_print("unknown_command", args.command)
             sys.exit(1)