@openclaw/mxc-sandbox 2026.7.2-beta.3 → 2026.7.2-beta.4

package/dist/index.js

@@ -24,12 +24,12 @@ const DEFAULT_TIMEOUT_SECONDS = 120;
 const DEFAULT_DEBUG = false;
 const nonEmptyTrimmedString = (message) => z.string({ error: message }).trim().min(1, { error: message });
 const MxcPluginConfigSchema = z.strictObject({
-	mxcBinaryPath: nonEmptyTrimmedString("mxcBinaryPath must be a non-empty string").optional(),
-	containment: z.enum(MXC_CONTAINMENTS, { error: `containment must be one of ${MXC_CONTAINMENTS.join(", ")}` }).optional(),
-	network: z.enum(MXC_NETWORK_MODES, { error: `network must be one of ${MXC_NETWORK_MODES.join(", ")}` }).optional(),
-	timeoutSeconds: z.number({ error: `timeoutSeconds must be a number between 1 and ${MAX_TIMER_TIMEOUT_SECONDS}` }).min(1, { error: "timeoutSeconds must be a number >= 1" }).max(MAX_TIMER_TIMEOUT_SECONDS, { error: `timeoutSeconds must be a number <= ${MAX_TIMER_TIMEOUT_SECONDS}` }).optional(),
-	debug: z.boolean({ error: "debug must be a boolean" }).optional(),
-	mxcPolicyPaths: z.array(nonEmptyTrimmedString("mxcPolicyPaths must be an array of non-empty strings"), { error: "mxcPolicyPaths must be an array of non-empty strings" }).optional()
+	mxcBinaryPath: nonEmptyTrimmedString("mxcBinaryPath must be a non-empty string").describe("Absolute path to the MXC executor (wxc-exec.exe). When unset, the executor is discovered from the installed @microsoft/mxc-sdk.").optional(),
+	containment: z.enum(MXC_CONTAINMENTS, { error: `containment must be one of ${MXC_CONTAINMENTS.join(", ")}` }).describe("Windows containment mode. 'process' and 'processcontainer' currently both resolve to the Windows ProcessContainer sandbox.").optional(),
+	network: z.enum(MXC_NETWORK_MODES, { error: `network must be one of ${MXC_NETWORK_MODES.join(", ")}` }).describe("Outbound network policy. 'none' blocks all network; 'default' allows outbound access via the internetClient capability.").optional(),
+	timeoutSeconds: z.number({ error: `timeoutSeconds must be a number between 1 and ${MAX_TIMER_TIMEOUT_SECONDS}` }).min(1, { error: "timeoutSeconds must be a number >= 1" }).max(MAX_TIMER_TIMEOUT_SECONDS, { error: `timeoutSeconds must be a number <= ${MAX_TIMER_TIMEOUT_SECONDS}` }).describe("Per-command execution timeout in seconds. Capped to the sandbox policy baseline timeout when both are set.").optional(),
+	debug: z.boolean({ error: "debug must be a boolean" }).describe("Forward verbose debug output from the MXC SDK launcher.").optional(),
+	mxcPolicyPaths: z.array(nonEmptyTrimmedString("mxcPolicyPaths must be an array of non-empty strings"), { error: "mxcPolicyPaths must be an array of non-empty strings" }).describe("Absolute MXC policy file paths applied on top of the built-in sandbox baseline policy.").optional()
 });
 function createMxcPluginConfigSchema() {
 	return buildPluginConfigSchema(MxcPluginConfigSchema, { safeParse(value) {
@@ -348,6 +348,9 @@ const DEFAULT_SANDBOX_BASELINE = {
 		timeoutSecondsConfigured: false
 	}
 };
+function firstNonBlankEnv(...values) {
+	return values.find((value) => value?.trim());
+}
 function resolveSandboxBaseline(input = {}) {
 	const timeoutSecondsConfigured = input.process?.timeoutSeconds !== void 0;
 	const timeoutSeconds = input.process?.timeoutSeconds ?? BASELINE_TIMEOUT_SECONDS;
@@ -365,13 +368,13 @@ function resolveSandboxBaseline(input = {}) {
 	};
 }
 function resolveSandboxTempDir(env = {}) {
-	return env.TEMP ?? env.TMP ?? "C:\\Windows\\Temp";
+	return firstNonBlankEnv(env.TEMP, env.TMP) ?? "C:\\Windows\\Temp";
 }
 function resolveBaselineReadonlyPaths(env) {
-	const systemRoot = env.SystemRoot ?? env.WINDIR ?? "C:\\Windows";
+	const systemRoot = firstNonBlankEnv(env.SystemRoot, env.WINDIR) ?? "C:\\Windows";
 	return dedupeStable([
-		env.ProgramFiles ?? env.ProgramW6432 ?? "C:\\Program Files",
-		env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)",
+		firstNonBlankEnv(env.ProgramFiles, env.ProgramW6432) ?? "C:\\Program Files",
+		firstNonBlankEnv(env["ProgramFiles(x86)"]) ?? "C:\\Program Files (x86)",
 		win32.join(systemRoot, "System32"),
 		win32.join(systemRoot, "SysWOW64")
 	]);

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/mxc-sandbox",
-  "version": "2026.7.2-beta.3",
+  "version": "2026.7.2-beta.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/mxc-sandbox",
-      "version": "2026.7.2-beta.3",
+      "version": "2026.7.2-beta.4",
       "dependencies": {
         "@microsoft/mxc-sdk": "0.7.0",
         "zod": "4.4.3"

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "mxc",
   "name": "MXC Sandbox Execution",
-  "description": "OS-level sandboxed tool execution via MXC for MXC-capable Windows hosts: runs commands in ProcessContainer (Windows) with configured MXC policy files.",
+  "description": "OS-level sandboxed tool execution via MXC: runs commands in a Windows ProcessContainer with configured MXC policy files.",
   "activation": {
     "onStartup": false,
     "onConfigPaths": ["plugins.entries.mxc"]
@@ -12,31 +12,70 @@
     "properties": {
       "mxcBinaryPath": {
         "type": "string",
-        "minLength": 1
+        "minLength": 1,
+        "description": "Absolute path to the MXC executor (wxc-exec.exe). When unset, the executor is discovered from the installed @microsoft/mxc-sdk."
       },
       "containment": {
         "type": "string",
-        "enum": ["process", "processcontainer"]
+        "enum": ["process", "processcontainer"],
+        "description": "Windows containment mode. 'process' and 'processcontainer' currently both resolve to the Windows ProcessContainer sandbox."
       },
       "network": {
         "type": "string",
-        "enum": ["none", "default"]
+        "enum": ["none", "default"],
+        "description": "Outbound network policy. 'none' blocks all network; 'default' allows outbound access via the internetClient capability."
       },
       "timeoutSeconds": {
         "type": "number",
         "minimum": 1,
-        "maximum": 2147000
+        "maximum": 2147000,
+        "description": "Per-command execution timeout in seconds. Capped to the sandbox policy baseline timeout when both are set."
       },
       "debug": {
-        "type": "boolean"
+        "type": "boolean",
+        "description": "Forward verbose debug output from the MXC SDK launcher."
       },
       "mxcPolicyPaths": {
         "type": "array",
         "items": {
           "type": "string",
           "minLength": 1
-        }
+        },
+        "description": "Absolute MXC policy file paths applied on top of the built-in sandbox baseline policy."
       }
     }
+  },
+  "configContracts": {
+    "dangerousFlags": [{ "path": "network", "equals": "default" }]
+  },
+  "uiHints": {
+    "mxcBinaryPath": {
+      "label": "MXC Executor Path",
+      "help": "Optional absolute path to the MXC executor (wxc-exec.exe). Leave unset to auto-discover from the installed @microsoft/mxc-sdk.",
+      "advanced": true
+    },
+    "containment": {
+      "label": "Containment Mode",
+      "help": "Windows containment mode. 'process' and 'processcontainer' currently both resolve to the Windows ProcessContainer sandbox."
+    },
+    "network": {
+      "label": "Network Policy",
+      "help": "'none' blocks all outbound network; 'default' allows outbound access via the internetClient capability, which weakens sandbox isolation."
+    },
+    "timeoutSeconds": {
+      "label": "Command Timeout (seconds)",
+      "help": "Per-command execution timeout, from 1 to 2147000 seconds. Capped to the sandbox policy baseline timeout when both are set.",
+      "advanced": true
+    },
+    "debug": {
+      "label": "Debug Logging",
+      "help": "Forward verbose debug output from the MXC SDK launcher.",
+      "advanced": true
+    },
+    "mxcPolicyPaths": {
+      "label": "MXC Policy Files",
+      "help": "Absolute MXC policy file paths applied on top of the built-in sandbox baseline policy.",
+      "advanced": true
+    }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mxc-sandbox",
-  "version": "2026.7.2-beta.3",
+  "version": "2026.7.2-beta.4",
   "description": "OpenClaw MXC sandbox execution plugin for MXC-capable hosts",
   "repository": {
     "type": "git",
@@ -21,10 +21,10 @@
       "minHostVersion": ">=2026.6.11"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.3"
+      "pluginApi": ">=2026.7.2-beta.4"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.3",
+      "openclawVersion": "2026.7.2-beta.4",
       "bundledDist": false,
       "staticAssets": [
         {
@@ -48,7 +48,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.3"
+    "openclaw": ">=2026.7.2-beta.4"
   },
   "peerDependenciesMeta": {
     "openclaw": {