2 Commits

Author	SHA1	Message	Date
Paul Campbell	9f8d81bd1a	improve(mxc): document sandbox config options and flag network access as dangerous (#110256) ... Add configContracts.dangerousFlags for network="default", per-field uiHints, and configSchema/Zod field descriptions to the MXC sandbox plugin manifest. Only network is flagged dangerous; containment "process" and "processcontainer" currently resolve to the same Windows ProcessContainer. Align the manifest description with the plugin entry and update the config schema test for the new timeout description. Copilot-Session: c299e8bd-b71c-4bb4-94a9-9c248543102a Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>	2026-07-21 08:59:51 +09:00
Paul Campbell	008f04a656	feat(mxc): add Windows MXC sandbox backend (#97086) ... * feat(mxc): add Windows MXC sandbox backend Add the official MXC sandbox plugin package with Windows ProcessContainer execution, plugin-owned MXC SDK dependency packaging, host-backed filesystem bridge support, and configured MXC policy file loading via mxcPolicyPaths. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(mxc): preserve Windows binary override paths * fix: remove stray sandbox barrel export Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9ea19539-b8ca-44fb-93bd-b8496e3deb2c * fix(mxc): address sandbox review feedback Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(mxc): satisfy test type checks Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(mxc): clarify protected skill enforcement Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * test(mxc): align fail-closed expectations Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(mxc): satisfy extension lint Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(plugin-sdk): narrow fs-safe remove surface Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(mxc): repair rebased CI failures * fix(scripts): declare shrinkwrap override normalizer --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Gio Della-Libera <235387111+giodl73-repo@users.noreply.github.com> Co-authored-by: Dallin Romney <dallinromney@gmail.com>	2026-07-12 23:07:25 -07:00