fix(ocap-kernel): inject global/globalThis into SES compartment for Rolldown CJS compat

Rolldown-generated IIFE bundles include CJS helper code that uses
`var localThis = globalThis` to access intrinsics, and some bundled
libraries (e.g. lodash) detect the global object via
`typeof global == "object" && global` or `Function("return this")()`.

In a SES Compartment:
- `global` and `self` are not named bindings
- `Function("return this")()` returns undefined in strict mode

Inject `globalThis` and `global` on the compartment's own global after
construction so these patterns resolve to the compartment's global object
(which exposes all the hardened intrinsics).

Also fix the openclaw-plugin integration test to call `register.register()`
rather than treating the PluginEntry object itself as a function.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sirtimid

package.json

@@ -102,7 +102,6 @@
     "typescript": "~5.8.2",
     "typescript-eslint": "^8.29.0",
     "vite": "^8.0.6",
-    "vite-tsconfig-paths": "^6.1.1",
     "vitest": "^4.1.3",
     "vitest-fetch-mock": "^0.4.5"
   },

packages/evm-wallet-experiment/test/integration/openclaw-plugin.integration.test.ts

@@ -262,7 +262,7 @@ exec "${process.execPath}" "${ocapCliEntrypoint}" "$@"
       ]);
 
       tools = new Map<string, ToolDefinition>();
-      register({
+      register.register({
         pluginConfig: {
           ocapCliPath,
           walletKref: rootKref,

packages/ocap-kernel/src/vats/bundle-loader.ts

@@ -45,6 +45,17 @@ export function loadBundle(
     ...endowments,
     ...inescapableGlobalProperties,
   });
+  // Rolldown-generated CJS helpers use `var localThis = globalThis`, and
+  // some bundled libraries (e.g. lodash) detect the global via
+  // `typeof global == "object" && global` or `Function("return this")()`.
+  // None of these work in a SES Compartment out of the box:
+  //   - `global` / `self` are not compartment bindings
+  //   - `Function("return this")()` returns `undefined` in strict mode
+  // Inject these properties on the compartment's own global so that both
+  // patterns resolve to the compartment's global (which has all the intrinsics).
+  const cg = compartment.globalThis as Record<string, unknown>;
+  cg.globalThis = compartment.globalThis;
+  cg.global = compartment.globalThis;
   // The code declares `var __vatExports__ = (function(){...})({});`
   // We wrap it in an IIFE to capture and return the result.
   const vatExports = compartment.evaluate(

yarn.lock

@@ -3970,7 +3970,6 @@ __metadata:
     typescript: "npm:~5.8.2"
     typescript-eslint: "npm:^8.29.0"
     vite: "npm:^8.0.6"
-    vite-tsconfig-paths: "npm:^6.1.1"
     vitest: "npm:^4.1.3"
     vitest-fetch-mock: "npm:^0.4.5"
   languageName: unknown
@@ -7767,7 +7766,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"debug@npm:4, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.4, debug@npm:^4.3.6, debug@npm:^4.4.0, debug@npm:^4.4.3, debug@npm:~4.4.1":
+"debug@npm:4, debug@npm:^4.1.0, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.4, debug@npm:^4.3.6, debug@npm:^4.4.0, debug@npm:^4.4.3, debug@npm:~4.4.1":
   version: 4.4.3
   resolution: "debug@npm:4.4.3"
   dependencies:
@@ -9736,13 +9735,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"globrex@npm:^0.1.2":
-  version: 0.1.2
-  resolution: "globrex@npm:0.1.2"
-  checksum: 10/81ce62ee6f800d823d6b7da7687f841676d60ee8f51f934ddd862e4057316d26665c4edc0358d4340a923ac00a514f8b67c787e28fe693aae16350f4e60d55e9
-  languageName: node
-  linkType: hard
-
 "gopd@npm:^1.0.1, gopd@npm:^1.2.0":
   version: 1.2.0
   resolution: "gopd@npm:1.2.0"
@@ -14971,20 +14963,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tsconfck@npm:^3.0.3":
-  version: 3.1.5
-  resolution: "tsconfck@npm:3.1.5"
-  peerDependencies:
-    typescript: ^5.0.0
-  peerDependenciesMeta:
-    typescript:
-      optional: true
-  bin:
-    tsconfck: bin/tsconfck.js
-  checksum: 10/46b68f0fcec7da045490e427400c2a7fea67bdb6dae871257e8d2ec48e9dc99674214df86ff51c6d01ceb68ba9d7d806d3b69de432efa3c76b5fba160c252857
-  languageName: node
-  linkType: hard
-
 "tslib@npm:^1.9.3":
   version: 1.14.1
   resolution: "tslib@npm:1.14.1"
@@ -15695,19 +15673,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"vite-tsconfig-paths@npm:^6.1.1":
-  version: 6.1.1
-  resolution: "vite-tsconfig-paths@npm:6.1.1"
-  dependencies:
-    debug: "npm:^4.1.1"
-    globrex: "npm:^0.1.2"
-    tsconfck: "npm:^3.0.3"
-  peerDependencies:
-    vite: "*"
-  checksum: 10/f752bce4f3c5707f0df7af8a20294b1f325e26f50578b82c8262d851028616ebb1a3e73ab0789c55cf3c8da8d985e843193c0bec2cb31662c567ccdf137f1fd0
-  languageName: node
-  linkType: hard
-
 "vite@npm:^6.0.0 || ^7.0.0 || ^8.0.0, vite@npm:^8.0.6":
   version: 8.0.6
   resolution: "vite@npm:8.0.6"