@openclaw/mxc-sandbox 0.0.0 → 2026.7.2-beta.1

package/node_modules/@microsoft/mxc-sdk/dist/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * MXC SDK - TypeScript SDK for Microsoft eXecution Containers
+ *
+ * This package provides a Node.js interface for spawning sandboxed containers.
+ *
+ * @example
+ * ```typescript
+ * import { spawnSandbox, spawnSandboxWithPty, SandboxPolicy, getPlatformSupport } from '@microsoft/mxc-sdk';
+ *
+ * if (getPlatformSupport().isSupported) {
+ *   const policy: SandboxPolicy = {
+ *     version: '0.4.0-alpha',
+ *     network: { allowOutbound: true },
+ *   };
+ *
+ *   const ptyProcess = spawnSandboxWithPty('python -c "print(\'Hello from sandbox\')"', policy);
+ *   ptyProcess.onData((data) => console.log(data));
+ *   ptyProcess.onExit((event) => console.log('Exit code:', event.exitCode));
+ * }
+ * ```
+ *
+ * @packageDocumentation
+ */
+export { SandboxPolicy, SandboxingMethod, IsolationTier, ContainmentType, ContainmentTypes, ContainmentBackend, ExperimentalBackends, ContainerConfig, PlatformSupport, UiCapabilitySupport, } from './types.js';
+export { getPlatformSupport, } from './platform.js';
+export { createConfigFromPolicy, spawnSandbox, spawnSandboxAsync, spawnSandboxFromConfig, buildSandboxPayload, SandboxSpawnOptions, } from './sandbox.js';
+export { getAvailableToolsPolicy, getUserProfilePolicy, getTemporaryFilesPolicy, FilesystemPolicyResult, ToolsPolicyOptions, } from './policy.js';
+export { ErrorCode, MxcError, mxcErrorFromCode, } from './errors.js';
+export { Phase, StateAwareContainmentBackend, SandboxId, IsolationSessionUserConfig, IsolationSessionProvisionConfig, IsolationSessionStartConfig, IsolationSessionExecConfig, IsolationSessionStopConfig, IsolationSessionDeprovisionConfig, IsolationSessionProvisionMetadata, ConfigsForBackend, ProvisionConfigFor, StartConfigFor, ExecConfigFor, StopConfigFor, DeprovisionConfigFor, StateAwareMetadata, ProvisionMetadataFor, StartMetadataFor, StopMetadataFor, DeprovisionMetadataFor, ProvisionResult, StartResult, StopResult, DeprovisionResult, ExecResult, } from './state-aware-types.js';
+export { provisionSandbox, startSandbox, execInSandbox, execInSandboxAsync, stopSandbox, deprovisionSandbox, } from './state-aware.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@microsoft/mxc-sdk/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,SAAS,EACT,QAAQ,EACR,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,KAAK,EACL,4BAA4B,EAC5B,SAAS,EACT,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,iCAAiC,EACjC,iCAAiC,EACjC,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,UAAU,GACX,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,kBAAkB,GACnB,MAAM,kBAAkB,CAAC"}

package/node_modules/@microsoft/mxc-sdk/dist/index.js

@@ -0,0 +1,40 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+/**
+ * MXC SDK - TypeScript SDK for Microsoft eXecution Containers
+ *
+ * This package provides a Node.js interface for spawning sandboxed containers.
+ *
+ * @example
+ * ```typescript
+ * import { spawnSandbox, spawnSandboxWithPty, SandboxPolicy, getPlatformSupport } from '@microsoft/mxc-sdk';
+ *
+ * if (getPlatformSupport().isSupported) {
+ *   const policy: SandboxPolicy = {
+ *     version: '0.4.0-alpha',
+ *     network: { allowOutbound: true },
+ *   };
+ *
+ *   const ptyProcess = spawnSandboxWithPty('python -c "print(\'Hello from sandbox\')"', policy);
+ *   ptyProcess.onData((data) => console.log(data));
+ *   ptyProcess.onExit((event) => console.log('Exit code:', event.exitCode));
+ * }
+ * ```
+ *
+ * @packageDocumentation
+ */
+// Export types
+export { ContainmentTypes, ExperimentalBackends, } from './types.js';
+// Export platform detection functions
+export { getPlatformSupport, } from './platform.js';
+// Export sandbox spawning functions
+export { createConfigFromPolicy, spawnSandbox, spawnSandboxAsync, spawnSandboxFromConfig, buildSandboxPayload, } from './sandbox.js';
+// Export policy discovery functions
+export { getAvailableToolsPolicy, getUserProfilePolicy, getTemporaryFilesPolicy, } from './policy.js';
+// Export typed wire-format errors
+export { MxcError, mxcErrorFromCode, } from './errors.js';
+// Export state-aware lifecycle types
+export { IsolationSessionUserConfig, } from './state-aware-types.js';
+// Export state-aware lifecycle functions
+export { provisionSandbox, startSandbox, execInSandbox, execInSandboxAsync, stopSandbox, deprovisionSandbox, } from './state-aware.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@microsoft/mxc-sdk/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,eAAe;AACf,OAAO,EAKL,gBAAgB,EAEhB,oBAAoB,GAIrB,MAAM,YAAY,CAAC;AAEpB,sCAAsC;AACtC,OAAO,EACL,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,oCAAoC;AACpC,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,cAAc,CAAC;AAEtB,oCAAoC;AACpC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GAGxB,MAAM,aAAa,CAAC;AAErB,kCAAkC;AAClC,OAAO,EAEL,QAAQ,EACR,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,qCAAqC;AACrC,OAAO,EAIL,0BAA0B,GAuB3B,MAAM,wBAAwB,CAAC;AAEhC,yCAAyC;AACzC,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,kBAAkB,GACnB,MAAM,kBAAkB,CAAC"}

package/node_modules/@microsoft/mxc-sdk/dist/logger.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Appends timestamped log lines to a file.
+ * Emits console.warn if the file cannot be opened, then degrades to no-op.
+ */
+export declare class FileLogger {
+    private fd;
+    constructor(filePath: string);
+    log(level: 'info' | 'warn' | 'error', message: string, data?: Record<string, unknown>): void;
+    close(): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/node_modules/@microsoft/mxc-sdk/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,EAAE,CAAuB;gBAErB,QAAQ,EAAE,MAAM;IAW5B,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAU5F,KAAK,IAAI,IAAI;CAMd"}

package/node_modules/@microsoft/mxc-sdk/dist/logger.js

@@ -0,0 +1,45 @@
+// sdk/src/logger.ts
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import * as fs from 'fs';
+import * as path from 'path';
+/**
+ * Appends timestamped log lines to a file.
+ * Emits console.warn if the file cannot be opened, then degrades to no-op.
+ */
+export class FileLogger {
+    fd = null;
+    constructor(filePath) {
+        try {
+            const dir = path.dirname(filePath);
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            this.fd = fs.openSync(filePath, 'a');
+        }
+        catch (err) {
+            console.warn(`[mxc-sdk] Could not open log file '${filePath}': ${err}`);
+            this.fd = null;
+        }
+    }
+    log(level, message, data) {
+        if (this.fd === null)
+            return;
+        try {
+            const ts = new Date().toISOString();
+            const suffix = data ? ' ' + JSON.stringify(data) : '';
+            const line = `[${ts}] ${level.toUpperCase()} ${message}${suffix}\n`;
+            fs.writeSync(this.fd, line);
+        }
+        catch { /* never throw from logging */ }
+    }
+    close() {
+        if (this.fd !== null) {
+            try {
+                fs.closeSync(this.fd);
+            }
+            catch { /* ignore */ }
+            this.fd = null;
+        }
+    }
+}
+//# sourceMappingURL=logger.js.map

package/node_modules/@microsoft/mxc-sdk/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;GAGG;AACH,MAAM,OAAO,UAAU;IACb,EAAE,GAAkB,IAAI,CAAC;IAEjC,YAAY,QAAgB;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAgC,EAAE,OAAe,EAAE,IAA8B;QACnF,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;YAAE,OAAO;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC;YACpE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;CACF"}

package/node_modules/@microsoft/mxc-sdk/dist/platform.d.ts

@@ -0,0 +1,55 @@
+import { PlatformSupport } from './types.js';
+/**
+ * Result of querying the host's Windows build number, or `null` when the
+ * registry values are missing or unparseable.
+ */
+type WindowsBuild = {
+    major: number;
+    minor: number;
+} | null;
+/** @internal Test-only: override the Windows build lookup. */
+export declare function _setWindowsBuildQuery(fn: (() => WindowsBuild) | null): void;
+/**
+ * Get platform support information.
+ *
+ * On Windows, this also invokes `wxc-exec --probe` to populate
+ * `isolationTier`, the `isolationWarnings` array (if any), and portable UI
+ * capability facts. Linux and macOS currently do not expose native probe data,
+ * so `uiCapabilities` is omitted on those platforms. The result is cached for
+ * the lifetime of the SDK module — the underlying machine state is not
+ * expected to change at runtime.
+ *
+ * @returns Platform support details including available sandboxing methods
+ */
+export declare function getPlatformSupport(): PlatformSupport;
+/** @internal Test-only: clear the cached PlatformSupport. */
+export declare function _resetPlatformSupportCache(): void;
+/**
+ * Probe runner injection seam. Spawns `wxc-exec --probe` and returns
+ * its stdout. Replaceable in unit tests via {@link _setProbeRunner}.
+ */
+type ProbeRunner = () => string;
+/** @internal Test-only: override the probe runner. */
+export declare function _setProbeRunner(runner: ProbeRunner | null): void;
+/**
+ * Find the wxc-exec executable
+ * Searches in common locations relative to the SDK package,
+ * selecting the build matching the current machine architecture.
+ * @returns Path to wxc-exec.exe if found, null otherwise
+ */
+export declare function findWxcExecutable(): string | null;
+/**
+ * Find the lxc-exec executable on Linux
+ * Searches in common locations relative to the SDK package.
+ * @returns Path to lxc-exec if found, null otherwise
+ */
+export declare function findLxcExecutable(): string | null;
+/**
+ * Find the mxc-exec-mac executable on macOS.
+ * Searches in the SDK bin directory (npm install path) and Cargo build
+ * output directories (monorepo dev path).
+ * @returns Path to mxc-exec-mac if found, null otherwise
+ */
+export declare function findSeatbeltExecutable(): string | null;
+export {};
+//# sourceMappingURL=platform.d.ts.map

package/node_modules/@microsoft/mxc-sdk/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAKA,OAAO,EAAqC,eAAe,EAAuB,MAAM,YAAY,CAAC;AAkDrG;;;GAGG;AACH,KAAK,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC;AAwB5D,8DAA8D;AAC9D,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,CAAC,MAAM,YAAY,CAAC,GAAG,IAAI,GAAG,IAAI,CAE3E;AAsDD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAOpD;AAID,6DAA6D;AAC7D,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AAED;;;GAGG;AACH,KAAK,WAAW,GAAG,MAAM,MAAM,CAAC;AAIhC,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CAEhE;AA4MD;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAiCjD;AAmCD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAiCjD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAgCtD"}