@openclaw/mxc-sandbox 2026.8.1-beta.2 → 2026.8.1-beta.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +3 -4
- package/package.json +4 -4
package/dist/index.js
CHANGED
|
@@ -10,9 +10,9 @@ import { createWritableRenameTargetResolver, registerSandboxBackend, resolvePref
|
|
|
10
10
|
import * as fs$1 from "node:fs";
|
|
11
11
|
import fs, { lstatSync, mkdtempSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
|
|
12
12
|
import { createHash, randomBytes } from "node:crypto";
|
|
13
|
+
import { isPathInside, removePathWithinRoot, root } from "openclaw/plugin-sdk/file-access-runtime";
|
|
13
14
|
import { runCommandBuffered } from "openclaw/plugin-sdk/process-runtime";
|
|
14
|
-
import {
|
|
15
|
-
import { FsSafeError, isPathInside } from "openclaw/plugin-sdk/security-runtime";
|
|
15
|
+
import { FsSafeError } from "openclaw/plugin-sdk/security-runtime";
|
|
16
16
|
import { fileURLToPath } from "node:url";
|
|
17
17
|
import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
|
|
18
18
|
import { execFileSync } from "node:child_process";
|
|
@@ -1014,8 +1014,7 @@ function createSandboxTempDir(hostEnv) {
|
|
|
1014
1014
|
function assertWorkdirInsideWorkspace(workspaceDir, workdir) {
|
|
1015
1015
|
const workspace = realpathForExistingPath(workspaceDir, "sandbox workspace");
|
|
1016
1016
|
const candidate = realpathForPotentialPath(workdir);
|
|
1017
|
-
|
|
1018
|
-
if (relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative)) return candidate;
|
|
1017
|
+
if (isPathInside(workspace, candidate)) return candidate;
|
|
1019
1018
|
throw new Error(`MXC sandbox workdir ${workdir} is outside the sandbox workspace ${workspaceDir}. Use a workdir inside the sandbox workspace.`);
|
|
1020
1019
|
}
|
|
1021
1020
|
function resolveWorkdirInsideWorkspace(workspaceDir, workdir) {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@openclaw/mxc-sandbox",
|
|
3
|
-
"version": "2026.8.1-beta.
|
|
3
|
+
"version": "2026.8.1-beta.3",
|
|
4
4
|
"description": "OpenClaw MXC sandbox execution plugin for MXC-capable hosts",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
@@ -21,10 +21,10 @@
|
|
|
21
21
|
"minHostVersion": ">=2026.6.11"
|
|
22
22
|
},
|
|
23
23
|
"compat": {
|
|
24
|
-
"pluginApi": ">=2026.8.1-beta.
|
|
24
|
+
"pluginApi": ">=2026.8.1-beta.3"
|
|
25
25
|
},
|
|
26
26
|
"build": {
|
|
27
|
-
"openclawVersion": "2026.8.1-beta.
|
|
27
|
+
"openclawVersion": "2026.8.1-beta.3",
|
|
28
28
|
"bundledDist": false,
|
|
29
29
|
"staticAssets": [
|
|
30
30
|
{
|
|
@@ -47,7 +47,7 @@
|
|
|
47
47
|
"README.md"
|
|
48
48
|
],
|
|
49
49
|
"peerDependencies": {
|
|
50
|
-
"openclaw": ">=2026.8.1-beta.
|
|
50
|
+
"openclaw": ">=2026.8.1-beta.3"
|
|
51
51
|
},
|
|
52
52
|
"peerDependenciesMeta": {
|
|
53
53
|
"openclaw": {
|