@openclaw/mxc-sandbox 2026.9.1 → 2026.9.2

package/dist/index.js

@@ -131,6 +131,12 @@ function resolveMxcBinaryPath(configOverride) {
 	return found;
 }
 //#endregion
+//#region extensions/mxc/src/path-comparison.ts
+function normalizeMxcPathForComparison(value) {
+	const resolved = path.resolve(value);
+	return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+//#endregion
 //#region extensions/mxc/src/workspace-skill-mounts.ts
 const MATERIALIZED_SANDBOX_SKILLS_WORKSPACE_PARTS = [".openclaw", "sandbox-skills"];
 function containerJoin(root, ...parts) {
@@ -299,7 +305,7 @@ function resolveWorkspaceMounts(sandbox) {
 		containerRoot,
 		writable: false
 	}];
-	if (sandbox.workspaceAccess === "ro" && normalizePathForComparison$1(agentWorkspaceDir) !== normalizePathForComparison$1(workspaceDir)) mounts.push({
+	if (sandbox.workspaceAccess === "ro" && normalizeMxcPathForComparison(agentWorkspaceDir) !== normalizeMxcPathForComparison(workspaceDir)) mounts.push({
 		hostRoot: agentWorkspaceDir,
 		containerRoot: agentWorkspaceDir,
 		writable: false
@@ -324,7 +330,7 @@ function normalizeMxcProtectedSkillMount(mount) {
 function dedupeAndSortMounts(mounts) {
 	const deduped = /* @__PURE__ */ new Map();
 	for (const mount of mounts) {
-		const key = `${normalizePathForComparison$1(mount.hostRoot)}::${normalizePathForComparison$1(mount.containerRoot)}`;
+		const key = `${normalizeMxcPathForComparison(mount.hostRoot)}::${normalizeMxcPathForComparison(mount.containerRoot)}`;
 		if (!deduped.has(key)) deduped.set(key, mount);
 	}
 	return [...deduped.values()].toSorted((left, right) => {
@@ -338,11 +344,7 @@ function resolveRelativeParentPath(relativePath) {
 	return parent === "." || parent === "" ? null : parent;
 }
 function isSameMountRoot(first, second) {
-	return normalizePathForComparison$1(first) === normalizePathForComparison$1(second);
-}
-function normalizePathForComparison$1(value) {
-	const resolved = path.resolve(value);
-	return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+	return normalizeMxcPathForComparison(first) === normalizeMxcPathForComparison(second);
 }
 //#endregion
 //#region extensions/mxc/src/sandbox-baseline.ts
@@ -646,7 +648,7 @@ function resolveWorkspaceReadwritePathSpecs(workspace) {
 function resolveWorkspaceReadonlyPathSpecs(workspace) {
 	if (workspace.workspaceAccess === "rw") return [];
 	const readonlyPathSpecs = [requiredFilesystemPath(workspace.workspaceDir)];
-	if (workspace.workspaceAccess === "ro" && normalizePathForComparison(workspace.agentWorkspaceDir) !== normalizePathForComparison(workspace.workspaceDir)) readonlyPathSpecs.push(requiredFilesystemPath(workspace.agentWorkspaceDir));
+	if (workspace.workspaceAccess === "ro" && normalizeMxcPathForComparison(workspace.agentWorkspaceDir) !== normalizeMxcPathForComparison(workspace.workspaceDir)) readonlyPathSpecs.push(requiredFilesystemPath(workspace.agentWorkspaceDir));
 	return readonlyPathSpecs;
 }
 function resolveBaselineReadonlyPathSpecs(baseline, context) {
@@ -656,9 +658,9 @@ function resolveMxcProtectedSkillPolicyPaths(context) {
 	const deduped = /* @__PURE__ */ new Map();
 	for (const mount of resolveMxcProtectedSkillMounts(context)) {
 		const hostPath = path.resolve(mount.hostPath);
-		deduped.set(normalizePathForComparison(hostPath), hostPath);
+		deduped.set(normalizeMxcPathForComparison(hostPath), hostPath);
 		const containerPath = path.resolve(mount.containerPath);
-		deduped.set(normalizePathForComparison(containerPath), containerPath);
+		deduped.set(normalizeMxcPathForComparison(containerPath), containerPath);
 	}
 	return [...deduped.values()];
 }
@@ -676,7 +678,7 @@ function resolveMxcProtectedSkillMounts(context) {
 function resolveExistingFilesystemPaths(pathSpecs, accessLabel) {
 	const deduped = /* @__PURE__ */ new Map();
 	for (const pathSpec of pathSpecs) {
-		const key = normalizePathForComparison(pathSpec.path);
+		const key = normalizeMxcPathForComparison(pathSpec.path);
 		const existing = deduped.get(key);
 		if (existing) {
 			existing.required ||= pathSpec.required;
@@ -740,14 +742,10 @@ function assertNoMxcReadwriteReadonlyOverlap(params) {
 	for (const readwritePath of params.readwritePaths) for (const readonlyPath of params.readonlyPaths) if (pathsOverlap(readwritePath, readonlyPath)) throw new Error(`MXC readwrite path ${readwritePath} overlaps read-only path ${readonlyPath}. Windows MXC cannot safely enforce nested read-only overlays under writable paths.`);
 }
 function pathsOverlap(first, second) {
-	const left = normalizePathForComparison(first);
-	const right = normalizePathForComparison(second);
+	const left = normalizeMxcPathForComparison(first);
+	const right = normalizeMxcPathForComparison(second);
 	return isPathInside(left, right) || isPathInside(right, left);
 }
-function normalizePathForComparison(value) {
-	const resolved = path.resolve(value);
-	return process.platform === "win32" ? resolved.toLowerCase() : resolved;
-}
 function hostPathExists(candidatePath) {
 	try {
 		statSync(candidatePath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mxc-sandbox",
-  "version": "2026.9.1",
+  "version": "2026.9.2",
   "description": "OpenClaw MXC sandbox execution plugin for MXC-capable hosts",
   "repository": {
     "type": "git",
@@ -21,10 +21,10 @@
       "minHostVersion": ">=2026.6.11"
     },
     "compat": {
-      "pluginApi": ">=2026.9.1"
+      "pluginApi": ">=2026.9.2"
     },
     "build": {
-      "openclawVersion": "2026.9.1",
+      "openclawVersion": "2026.9.2",
       "bundledDist": false,
       "staticAssets": [
         {
@@ -47,7 +47,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.1"
+    "openclaw": ">=2026.9.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {