Expose telemetry through Rust SDK, C ABI, and .NET binding

scripts/check-dotnet-api-parity.js

@@ -206,22 +206,21 @@ function managedJsonFields(source, className) {
  });
 }
 
-// `legacyManagedOnly` lists managed JSON fields that intentionally have no Rust
-// counterpart because they are deprecated compatibility aliases. They must stay
-// serializable so legacy JSON round-trips, but the managed request path strips
-// them before the native layer sees them.
+// `managedOnly` lists managed JSON fields intentionally represented outside the
+// Rust policy builder. Compatibility aliases are stripped before native parsing;
+// telemetry is extracted by the FFI and applied through SandboxRequest.
 function compareStructFields(
  label,
  rustSource,
  rustName,
  managedSource,
  managedName,
-legacyManagedOnly = []
+managedOnly = []
 ) {
  compare(
  `${label} fields`,
  managedJsonFields(managedSource, managedName).filter(
- (field) => !legacyManagedOnly.includes(field)
+ (field) => !managedOnly.includes(field)
  ),
  rustStructFields(rustSource, rustName)
  );
@@ -312,12 +311,18 @@ for (const [
  rustSource,
  rustName,
  managedName,
-legacyManagedOnly,
+managedOnly,
 ] of [
  // `captureDenials` is an obsolete managed-only alias (MXC0001, removed in
  // 1.0). Rust only accepts it under `containment.captureDenials`, and
  // MxcSandbox.PrepareRequest strips it from the policy before serialization.
- ["sandbox policy", rustPolicy, "SandboxPolicy", "SandboxPolicy", ["captureDenials"]],
+ [
+ "sandbox policy",
+ rustPolicy,
+ "SandboxPolicy",
+ "SandboxPolicy",
+ ["captureDenials", "telemetry"],
+ ],
  ["filesystem policy", rustPolicy, "FilesystemSection", "FilesystemPolicy"],
  ["UI policy", rustPolicy, "UiSection", "UiPolicy"],
  ["network policy", rustNetworkPolicy, "NetworkSection", "NetworkPolicy"],
@@ -334,7 +339,7 @@ for (const [
  rustName,
  managedPolicy,
  managedName,
-legacyManagedOnly
+managedOnly
  );
 }
 const managedOneShot = [

sdk/dotnet/Microsoft.Mxc.Sdk.Tests/Microsoft.Mxc.Sdk.Tests.csproj

@@ -12,12 +12,53 @@
  <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
  <DefineConstants Condition="'$(MxcWithWslc)' == 'true'">$(DefineConstants);MXC_WITH_WSLC</DefineConstants>
  <DefineConstants Condition="'$(MxcWithIsolationSession)' == 'true'">$(DefineConstants);MXC_WITH_ISOLATION_SESSION</DefineConstants>
+ <MxcSrcDir>$(MSBuildProjectDirectory)/../../../src</MxcSrcDir>
+ <MxcTestCargoTargetDir>$(MxcSrcDir)/target/dotnet-test-support</MxcTestCargoTargetDir>
+ <MxcTestCargoProfileArg Condition="'$(Configuration)' == 'Release'">--release</MxcTestCargoProfileArg>
+ <MxcTestCargoProfileDir Condition="'$(Configuration)' == 'Release'">release</MxcTestCargoProfileDir>
+ <MxcTestCargoProfileDir Condition="'$(Configuration)' != 'Release'">debug</MxcTestCargoProfileDir>
+ <MxcTestCargoFeatures>test-support</MxcTestCargoFeatures>
+ <MxcTestCargoFeatures Condition="'$(MxcWithIsolationSession)' == 'true' and $([MSBuild]::IsOSPlatform('Windows'))">$(MxcTestCargoFeatures) isolation_session</MxcTestCargoFeatures>
+ <MxcTestCargoFeatures Condition="'$(MxcWithWslc)' == 'true' and $([MSBuild]::IsOSPlatform('Windows'))">$(MxcTestCargoFeatures) wslc</MxcTestCargoFeatures>
+ <MxcTestNativeFileName Condition="$([MSBuild]::IsOSPlatform('Windows'))">mxc_ffi.dll</MxcTestNativeFileName>
+ <MxcTestNativeFileName Condition="$([MSBuild]::IsOSPlatform('OSX'))">libmxc_ffi.dylib</MxcTestNativeFileName>
+ <MxcTestNativeFileName Condition="'$(MxcTestNativeFileName)' == ''">libmxc_ffi.so</MxcTestNativeFileName>
  </PropertyGroup>
 
  <ItemGroup>
  <PackageReference Include="xunit.v3" Version="4.0.0" />
  </ItemGroup>
 
+ <Target Name="BuildMxcTestSupportNativeLibrary"
+ AfterTargets="Build"
+ Condition="'$(DesignTimeBuild)' != 'true'">
+ <Exec Command="rustc -vV"
+ WorkingDirectory="$(MxcSrcDir)"
+ ConsoleToMSBuild="true"
+ StandardOutputImportance="low">
+ <Output TaskParameter="ConsoleOutput" ItemName="MxcTestRustcVersion" />
+ </Exec>
+ <ItemGroup>
+ <MxcTestRustcHostLine Include="@(MxcTestRustcVersion)"
+ Condition="$([MSBuild]::ValueOrDefault('%(Identity)', '').StartsWith('host: '))" />
+ </ItemGroup>
+ <PropertyGroup>
+ <MxcTestRustcHostLine>@(MxcTestRustcHostLine)</MxcTestRustcHostLine>
+ </PropertyGroup>
+ <Error Condition="'$(MxcTestRustcHostLine)' == ''"
+ Text="mxc: 'rustc -vV' reported no host triple, so the isolated test-support build cannot be pinned to this host. Ensure the Rust toolchain is installed and on PATH." />
+ <PropertyGroup>
+ <MxcTestRustHostTriple>$(MxcTestRustcHostLine.Replace('host: ', '').Trim())</MxcTestRustHostTriple>
+ <MxcTestNativeOutput>$(MxcTestCargoTargetDir)/$(MxcTestRustHostTriple)/$(MxcTestCargoProfileDir)/$(MxcTestNativeFileName)</MxcTestNativeOutput>
+ </PropertyGroup>
+ <Message Importance="high" Text="mxc: building isolated test-support native library for $(MxcTestRustHostTriple)" />
+ <Exec Command="cargo build -p mxc_ffi --features &quot;$(MxcTestCargoFeatures)&quot; --target $(MxcTestRustHostTriple) $(MxcTestCargoProfileArg) --target-dir &quot;$(MxcTestCargoTargetDir)&quot;" WorkingDirectory="$(MxcSrcDir)" />
+ <Error Condition="!Exists('$(MxcTestNativeOutput)')"
+ Text="The test-support native build did not produce $(MxcTestNativeOutput)." />
+ <Copy SourceFiles="$(MxcTestNativeOutput)"
+ DestinationFolder="$(TargetDir)" />
+ </Target>
+
  <ItemGroup>
  <ProjectReference Include="..\Microsoft.Mxc.Sdk\Microsoft.Mxc.Sdk.csproj" />
  </ItemGroup>

sdk/dotnet/Microsoft.Mxc.Sdk.Tests/MxcSandboxTests.cs

@@ -827,6 +827,23 @@ public void SerializeRequest_StripsLegacyCaptureDenialsFromThePolicy()
  .GetString());
  }
 
+ [Fact]
+ public void SerializeRequest_PreservesTelemetryWhenMigratingLegacyCaptureDenials()
+ {
+ var policy = CreateLegacyCaptureDenialsPolicy(
+ new CaptureDenialsPolicy(),
+ "0.9.0-alpha");
+ policy.Telemetry = new TelemetrySettings { Enabled = true };
+ var request = new SandboxRequest(policy, "echo hi");
+
+ using var doc = JsonDocument.Parse(MxcSandbox.SerializeRequest(request));
+ var serializedPolicy = doc.RootElement.GetProperty("policy");
+
+ Assert.True(
+ serializedPolicy.GetProperty("telemetry").GetProperty("enabled").GetBoolean());
+ Assert.False(serializedPolicy.TryGetProperty("captureDenials", out _));
+ }
+
  private static SandboxPolicy CreateLegacyCaptureDenialsPolicy(
  CaptureDenialsPolicy captureDenials,
  string version = "0.8.0-alpha")