fix(windows): restore MXC MSVC builds (NVIDIA#3488)

* fix(windows): restore MXC MSVC builds

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(windows): satisfy MXC policy mapper lint

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* test(windows): permit legacy TLS compatibility case

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

---------

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

Author: drew

crates/openshell-driver-mxc/Cargo.toml

@@ -15,6 +15,7 @@ name = "openshell_driver_mxc"
 
 [dependencies]
 openshell-core = { path = "../openshell-core", default-features = false }
+openshell-policy = { path = "../openshell-policy" }
 # OCSF builders + emit target used by the Windows ETW audit consumer. OS-agnostic
 # crate (no windows deps), so safe to depend on from all targets; only the
 # windows-gated `etw_consumer` module actually uses it.
@@ -39,9 +40,6 @@ windows = { workspace = true }
 tokio = { workspace = true }
 # tempfile is not a workspace dependency; 3.27 is already resolved in Cargo.lock.
 tempfile = "3"
-# Used by Windows-only integration tests to parse policy YAML into the typed
-# proto. Inert on non-Windows.
-openshell-policy = { path = "../openshell-policy" }
 # Needed by the real-wxc integration test (wxc_exec_real.rs) which builds
 # --config-base64 payloads without going through the async WxcExecInvoker.
 # base64 and serde_json are already [dependencies] but dev-dependency resolution

crates/openshell-driver-mxc/src/grpc.rs

@@ -67,14 +67,14 @@ impl ComputeDriver for ComputeDriverService {
         request: Request<GetSandboxRequest>,
     ) -> Result<Response<GetSandboxResponse>, Status> {
         let req = request.into_inner();
-        if req.sandbox_name.is_empty() {
-            return Err(Status::invalid_argument("sandbox_name is required"));
+        if req.name.is_empty() {
+            return Err(Status::invalid_argument("name is required"));
         }
         let sandbox = self
             .backend
-            .get_sandbox(&req.sandbox_name)
+            .get_sandbox(&req.name)
             .await
-            .ok_or_else(|| Status::not_found(format!("sandbox {} not found", req.sandbox_name)))?;
+            .ok_or_else(|| Status::not_found(format!("sandbox {} not found", req.name)))?;
         if !req.sandbox_id.is_empty() && req.sandbox_id != sandbox.id {
             return Err(Status::failed_precondition(
                 "sandbox_id did not match the fetched sandbox",
@@ -110,10 +110,10 @@ impl ComputeDriver for ComputeDriverService {
         request: Request<StopSandboxRequest>,
     ) -> Result<Response<StopSandboxResponse>, Status> {
         let req = request.into_inner();
-        if req.sandbox_name.is_empty() {
-            return Err(Status::invalid_argument("sandbox_name is required"));
+        if req.name.is_empty() {
+            return Err(Status::invalid_argument("name is required"));
         }
-        self.backend.stop_sandbox(&req.sandbox_name).await?;
+        self.backend.stop_sandbox(&req.name).await?;
         Ok(Response::new(StopSandboxResponse {}))
     }
 
@@ -134,12 +134,12 @@ impl ComputeDriver for ComputeDriverService {
         if req.sandbox_id.is_empty() {
             return Err(Status::invalid_argument("sandbox_id is required"));
         }
-        if req.sandbox_name.is_empty() {
-            return Err(Status::invalid_argument("sandbox_name is required"));
+        if req.name.is_empty() {
+            return Err(Status::invalid_argument("name is required"));
         }
         let deleted = self
             .backend
-            .delete_sandbox(&req.sandbox_id, &req.sandbox_name)
+            .delete_sandbox(&req.sandbox_id, &req.name)
             .await?;
         Ok(Response::new(DeleteSandboxResponse { deleted }))
     }

crates/openshell-driver-mxc/src/policy_map/map.rs

@@ -524,10 +524,7 @@ fn report_endpoint_l7_losses(endpoint: &NetworkEndpoint, path: &str, items: &mut
             items,
             &format!("{path}.tls"),
             severity,
-            &format!(
-                "MXC has no OpenShell TLS inspection mode equivalent for '{}'.",
-                tls
-            ),
+            &format!("MXC has no OpenShell TLS inspection mode equivalent for '{tls}'."),
             "TLS inspection mode",
             "MXC network policy is host-level only.",
         );
@@ -563,7 +560,7 @@ fn report_endpoint_l7_losses(endpoint: &NetworkEndpoint, path: &str, items: &mut
             items,
             &format!("{path}.access"),
             "error",
-            &format!("MXC has no access preset equivalent for '{}'.", access),
+            &format!("MXC has no access preset equivalent for '{access}'."),
             "REST/WebSocket/GraphQL access preset",
             "MXC cannot enforce method or operation-level access.",
         );

crates/openshell-driver-mxc/tests/policy_mapper_matrix.rs

@@ -452,6 +452,7 @@ fn b_tls_skip_warning() {
 
 /// endpoint.tls = "full" (any non-skip) → "error".
 #[test]
+#[allow(deprecated)]
 fn b_tls_non_skip_error() {
     let policy = net_policy(
         "r",