Paul Campbell 008f04a656 feat(mxc): add Windows MXC sandbox backend (#97086) ...

* feat(mxc): add Windows MXC sandbox backend

Add the official MXC sandbox plugin package with Windows ProcessContainer execution, plugin-owned MXC SDK dependency packaging, host-backed filesystem bridge support, and configured MXC policy file loading via mxcPolicyPaths.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix(mxc): preserve Windows binary override paths

* fix: remove stray sandbox barrel export

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9ea19539-b8ca-44fb-93bd-b8496e3deb2c

* fix(mxc): address sandbox review feedback

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): satisfy test type checks

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): clarify protected skill enforcement

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* test(mxc): align fail-closed expectations

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): satisfy extension lint

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(plugin-sdk): narrow fs-safe remove surface

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): repair rebased CI failures

* fix(scripts): declare shrinkwrap override normalizer

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Gio Della-Libera <235387111+giodl73-repo@users.noreply.github.com>
Co-authored-by: Dallin Romney <dallinromney@gmail.com>

2026-07-12 23:07:25 -07:00

..

e2e/qa-lab

fix(release): keep source-ref packaging self-contained (#105360)

2026-07-12 13:45:24 +01:00

fixtures

feat(sessions): reopen history around search hits

2026-07-13 10:27:29 +05:30

helpers

fix(gateway): make hot reload transactional (#105289)

2026-07-12 18:16:15 -07:00

mocks

…

plugins

fix(tests): relocate provider auth-literal parity test outside core source (#104995)

2026-07-12 06:20:30 +01:00

scripts

feat(mxc): add Windows MXC sandbox backend (#97086)

2026-07-12 23:07:25 -07:00

tsconfig

chore(tooling): enforce indexed access in core tests (#105375)

2026-07-12 14:29:52 +01:00

vitest

refactor(infra): consolidate retry scheduling (#105789)

2026-07-12 19:58:55 -07:00

AGENTS.md

…

appcast.test.ts

feat(tooling): enforce indexed access checks in root tests (#105223)

2026-07-12 10:42:07 +01:00

architecture-smells.test.ts

…

bundled-provider-auth-literal-parity.test.ts

test(plugins): move auth parity integration coverage (#104974)

2026-07-11 21:55:33 -07:00

CLAUDE.md

…

clawrouter-managed-gateway.e2e.test.ts

test(e2e): stabilize ClawRouter log assertions (#103536)

2026-07-10 10:11:30 +01:00

cli-json-stdout.e2e.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

extension-import-boundaries.test.ts

…

extension-package-tsc-boundary.test.ts

…

extension-test-boundary.test.ts

feat(tooling): enforce indexed access checks in root tests (#105223)

2026-07-12 10:42:07 +01:00

external-script-modules.d.ts

fix(updater): scope restart log audits to managed checkout (#105030)

2026-07-12 11:21:00 +01:00

gateway.multi.e2e.test.ts

…

git-hooks-pre-commit.test.ts

…

global-setup.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

huggingface-local-app-openclaw.e2e.test.ts

chore(cli): cover HF local app flow (#100887)

2026-07-06 15:25:30 +02:00

image-generation.infer-cli.live.test.ts

…

image-generation.runtime.live.test.ts

…

mcp-show-redact.e2e.test.ts

fix(mcp): keep server config private in groups (#103502)

2026-07-10 08:09:48 +01:00

non-isolated-runner.ts

test(agents): isolate full-suite shared state (#104682)

2026-07-11 13:28:21 -07:00

npm-publish-plan.test.ts

ci(release): add plugin npm artifact preflight (#103759)

2026-07-10 09:39:10 -07:00

official-channel-catalog.test.ts

…

openclaw-launcher.e2e.test.ts

fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065)

2026-07-13 13:59:00 +08:00

openclaw-npm-postpublish-verify.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

openclaw-npm-prepublish-verify.test.ts

feat(release): preflight all extended-stable npm packages (#101757)

2026-07-08 08:01:00 -07:00

openclaw-npm-release-check.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

openclaw-prepack.test.ts

fix(release): allow explicit non-publish changelog packing

2026-07-11 16:32:59 +08:00

package-manager-config.test.ts

fix(release): ship Crabbox lease helper

2026-07-12 03:49:10 +02:00

package-scripts.test.ts

fix: run ts-topology entrypoint on Windows (#105397)

2026-07-12 17:26:04 -07:00

plugin-clawhub-release.test.ts

fix(clawhub): retry transient package reads (#105388)

2026-07-12 15:25:55 +02:00

plugin-extension-import-boundary.test.ts

…

plugin-npm-package-manifest.test.ts

fix(release): keep plugin pack output machine-readable

2026-07-11 17:47:06 +08:00

plugin-npm-release.test.ts

feat: publish plugins with extended-stable releases (#100448)

2026-07-05 16:16:26 -07:00

plugin-npm-runtime-build.test.ts

fix(msteams): emit native cjs runtime entrypoints (#102366)

2026-07-11 23:48:05 -07:00

qa-convex-credential-payload-validation.test.ts

fix(qa): use valid Convex module filename

2026-07-07 15:04:53 -05:00

release-check.test.ts

feat: sidebar update card (web + macOS) with app-first mac update flow and Sparkle beta track (#104171)

2026-07-11 00:34:10 -07:00

setup-home-isolation.test.ts

…

setup-openclaw-runtime.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

setup.env.ts

fix(test): unit-fast tests inherit live host config (#100221)

2026-07-05 10:06:53 -07:00

setup.extensions.ts

…

setup.shared.ts

…

setup.ts

…

stable-release-closeout.test.ts

fix(release): keep validation evidence immutable across reruns (#103906)

2026-07-10 20:16:19 +01:00

test-env.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

test-env.ts

feat(tooling): enforce indexed access checks in root tests (#105223)

2026-07-12 10:42:07 +01:00

test-helper-extension-import-boundary.test.ts

…

tsconfig.json

…

ui.presenter-next-run.test.ts

feat: refactor the Control UI architecture

2026-07-04 23:19:38 +01:00

vitest-boundary-config.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

vitest-light-paths.test.ts

…

vitest-performance-config.test.ts

…

vitest-projects-config.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

vitest-scoped-config.test.ts

refactor(infra): consolidate retry scheduling (#105789)

2026-07-12 19:58:55 -07:00

vitest-ui-package-config.test.ts

chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

2026-07-11 06:15:41 -07:00

vitest-unit-config.test.ts

…

vitest-unit-fast-config.test.ts

refactor: flip sessions and transcripts to sqlite storage (#98236)

2026-07-11 14:50:37 -07:00

vitest-unit-paths.test.ts

test: fix changed-run routing, dedupe gateway package lanes, repair force-rerun triggers (#104287)

2026-07-11 00:58:14 -07:00

web-provider-boundary.test.ts

…