pypi / openshell
openshell
What changed in openshell 0.1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
5 breaking2 security21 new APIs and options3 behavior and defaults15 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initopenshell 0.146 changes
Breaking changes 5
SSH connection sharing is disabled for sandbox sessions.
Helm gateway configuration is migrated to gatewayConfig.
Protocol upgrades are refused on JSON-RPC, MCP, and GraphQL endpoints.
Enabling uninspected credentials requires a full binary scope.
Uploads stop when Git filtering fails or selects no files.
Security 2
Cached registry images are bound to verified manifest digests.
Preserves external TLS for SSH forwarding.
New APIs and options 21
The gateway adds gRPC server reflection.
Adds operator-only retrieval of provider credentials.
Adds CLI support for creating and filtering provider labels.
The Python SDK exposes sandbox status conditions.
Adds createdAtMs to the TypeScript SandboxRef.
Providers now support stable credential placeholders.
Adds watchLogs with loss-aware resume for the TypeScript SDK.
The service supports passing through bearer authorization.
Helm can make cluster-scoped RBAC optional.
Docker supports corporate proxy CA bundles.
Gateway capacity metrics are available, with optional HPA support.
Gateway OCSF events can be written to JSONL, with Helm configuration for the output.
A main restart policy is available for sandboxes.
Providers can add multiple tokens to one request.
An Oracle Cloud Infrastructure Generative AI provider profile is available.
Sandbox supervisors can export OTLP traces.
MCP request inspection can use protocol profiles selected by Tower.
The gateway supports runtime image environment overrides.
Providers can serve sandbox config files on demand.
Detach sandbox sessions with Ctrl-D.
Helm adds values for the sandbox UID and GID.
Behavior and default changes 3
The gateway runs as a user service by default when installed as a snap.
Provider environment revisions are stabilized.
Agent output is written to the container log.
Fixes and other changes 15
Broker-owned listening sockets are released.
Credential aliases are resolved after revision eviction.
Enforces consistent HTTP framing.
Kubernetes requests time out per request rather than per idle connection.
The Python client is closed when creating a Sandbox entry fails.
The TypeScript SDK preserves RPC errors for out-of-range responses.
The sandbox runtime image is refreshed on start in Kubernetes.
Sandbox uploads now apply backpressure.
Bearer scheme matching is case-insensitive.
The exec command accepts the sandbox name before --.
Helm GatewayClass overrides are improved.
Podman honors OCI image working directories.
Sandbox host identities are persisted.
Migration overwrites the generated gateway config.
Workload bytes read with a mediated CONNECT header are preserved.