@openclaw/mxc-sandbox 2026.7.2-beta.5 → 2026.7.2-beta.7

package/dist/index.js

@@ -12,7 +12,7 @@ import fs, { lstatSync, mkdtempSync, readFileSync, realpathSync, rmSync, statSyn
 import { createHash, randomBytes } from "node:crypto";
 import { runCommandBuffered } from "openclaw/plugin-sdk/process-runtime";
 import { removePathWithinRoot, root } from "openclaw/plugin-sdk/file-access-runtime";
-import { isPathInside } from "openclaw/plugin-sdk/security-runtime";
+import { FsSafeError, isPathInside } from "openclaw/plugin-sdk/security-runtime";
 import { fileURLToPath } from "node:url";
 import { execFileSync } from "node:child_process";
 //#region extensions/mxc/src/config.ts
@@ -198,7 +198,10 @@ var MxcFsBridge = class {
 	}
 	async readFile(params) {
 		const target = this.resolveTarget(params);
-		return await (await root(target.mount.hostRoot)).readBytes(target.mountRelativePath, { hardlinks: "reject" });
+		return await (await root(target.mount.hostRoot)).readBytes(target.mountRelativePath, {
+			hardlinks: "reject",
+			...params.maxBytes === void 0 ? {} : { maxBytes: params.maxBytes }
+		});
 	}
 	async writeFile(params) {
 		const target = this.resolveTarget(params);
@@ -206,6 +209,18 @@ var MxcFsBridge = class {
 		const buffer = Buffer.isBuffer(params.data) ? params.data : Buffer.from(params.data, params.encoding ?? "utf8");
 		await (await root(target.mount.hostRoot)).write(target.mountRelativePath, buffer, { mkdir: params.mkdir !== false });
 	}
+	async createFileExclusive(params) {
+		const target = this.resolveTarget(params);
+		this.ensureWritable(target, "create files");
+		const buffer = Buffer.isBuffer(params.data) ? params.data : Buffer.from(params.data, params.encoding ?? "utf8");
+		try {
+			await (await root(target.mount.hostRoot)).create(target.mountRelativePath, buffer, { mkdir: params.mkdir !== false });
+			return "created";
+		} catch (error) {
+			if (error instanceof FsSafeError && error.code === "already-exists") return "exists";
+			throw error;
+		}
+	}
 	async mkdirp(params) {
 		const target = this.resolveTarget(params);
 		this.ensureWritable(target, "create directories");
@@ -1210,6 +1225,7 @@ const mxcSandboxBackendManager = {
 //#endregion
 //#region extensions/mxc/src/mxc-backend-factory.ts
 function sanitizeRuntimeId(value) {
+	if (/:workspace:[a-f0-9]{32}$/i.test(value.trim())) return `openclaw-mxc-workspace-${createHash("sha256").update(value).digest("hex").slice(0, 32)}`;
 	const slug = value.toLowerCase().replace(/[^a-z0-9_.-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
 	const hash = createHash("sha256").update(value).digest("hex").slice(0, 8);
 	return `openclaw-mxc-${slug || "sandbox"}-${hash}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mxc-sandbox",
-  "version": "2026.7.2-beta.5",
+  "version": "2026.7.2-beta.7",
   "description": "OpenClaw MXC sandbox execution plugin for MXC-capable hosts",
   "repository": {
     "type": "git",
@@ -21,10 +21,10 @@
       "minHostVersion": ">=2026.6.11"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.5"
+      "pluginApi": ">=2026.7.2-beta.7"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.5",
+      "openclawVersion": "2026.7.2-beta.7",
       "bundledDist": false,
       "staticAssets": [
         {
@@ -47,7 +47,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.5"
+    "openclaw": ">=2026.7.2-beta.7"
   },
   "peerDependenciesMeta": {
     "openclaw": {