Giedrius Burachas 15ad608a47 refactor(driver-mxc): embed policy mapper as a module; remove standalone crate ...

Adopt the proto-based mapper (map_to_mxc) as the single source of truth,
embedded in openshell-driver-mxc as a Windows-gated `policy_map` module.
Rewire EmbeddedPolicyMapper to call it directly on the typed SandboxPolicy,
deleting the serde_yaml proto->YAML bridge. Move the CLI to a windows-gated
example and the parity tests into the crate; delete openshell-policy-mapper.

- gate policy_map + seam Windows-only (MXC is Windows-only)
- drop serde_yaml; add dev-deps openshell-policy, clap, anyhow
- normalize mapped paths to Windows form in the seam, in one place
- docs: add driver-mxc to AGENTS.md table; correct design doc section 17 test lane

Signed-off-by: Giedrius Burachas <gburachas@nvidia.com>
(cherry picked from commit f22f9c7a25b9a651c5c5cc73f62fb01c4d6c1a8d)
Signed-off-by: Jamie King <jamiek@nvidia.com>

2026-08-26 22:06:17 +00:00

..

openshell-bootstrap

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-cli

feat(providers): expose actionable OAuth refresh failures (#2887)

2026-08-25 18:00:00 +00:00

openshell-core

feat(driver): add MXC compute driver for Windows isolation sessions

2026-08-26 22:06:16 +00:00

openshell-driver-db-credstore

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-driver-docker

fix(docker): trace standalone driver over OTLP (#2923)

2026-08-26 06:27:21 +00:00

openshell-driver-kubernetes

feat(kubernetes): export driver traces over OTLP (#2958)

2026-08-26 21:22:51 +00:00

openshell-driver-kubernetes-secrets

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-driver-mxc

refactor(driver-mxc): embed policy mapper as a module; remove standalone crate

2026-08-26 22:06:17 +00:00

openshell-driver-podman

feat(kubernetes): export driver traces over OTLP (#2958)

2026-08-26 21:22:51 +00:00

openshell-driver-vault

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-driver-vm

feat(kubernetes): export driver traces over OTLP (#2958)

2026-08-26 21:22:51 +00:00

openshell-extension-core

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-gateway-interceptors

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-ocsf

feat(network): enable Docker and Podman policy DNS and transparent TCP (#2723)

2026-08-20 19:26:53 +00:00

openshell-otel

feat(kubernetes): export driver traces over OTLP (#2958)

2026-08-26 21:22:51 +00:00

openshell-otel-test-support

feat(docker): export driver traces over OTLP (#2851)

2026-08-24 18:39:21 +00:00

openshell-policy

fix(policy): validate the applicable advisor candidate (#2850)

2026-08-21 19:05:53 +00:00

openshell-prover

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-providers

feat(provider): support for SPIFFE backed token exchange (#1970)

2026-08-24 05:42:30 +00:00

openshell-router

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-sandbox

fix(ssh): add EMFILE backoff and exit notification to SSH accept loop (#2705)

2026-08-25 21:07:10 +00:00

openshell-sdk

feat(provider): support for SPIFFE backed token exchange (#1970)

2026-08-24 05:42:30 +00:00

openshell-server

feat(kubernetes): export driver traces over OTLP (#2958)

2026-08-26 21:22:51 +00:00

openshell-server-macros

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-supervisor-middleware

feat(supervisor): expose sandbox name to middleware request context (#2771)

2026-08-21 18:50:13 +00:00

openshell-supervisor-middleware-builtins

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00

openshell-supervisor-network

fix(supervisor): log unmatched L7 route denials (#2916)

2026-08-26 21:29:56 +00:00

openshell-supervisor-process

fix(ssh): add EMFILE backoff and exit notification to SSH accept loop (#2705)

2026-08-25 21:07:10 +00:00

openshell-tui

feat(tui): show persisted guidance on rejected policy chunks (#2908)

2026-08-25 18:37:36 +00:00

openshell-vfio

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00