ask-sandbox-providers 0.1.3 → 0.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bb95b1b00d2c4ed3bb7e3e9a98f77d9035b8c3cc5e990b47870e3edec87f4ea8
-  data.tar.gz: 64781ff4c3f4e8020d759cdef227a05b9f4a21f0b36a6bbb6776aca8849310f5
+  metadata.gz: 3a0d6fd353895bba424a5a181ccf55e6c0da0273dc9a411f65db972830c99516
+  data.tar.gz: 84eb48ca0657db9cf00232559e4ab977fe31c1bb7c530881f59e1f9b0ef70bd1
 SHA512:
-  metadata.gz: a14deb3e21c8ae4f73b65fd20d5f5eb6176ea871f6184fc18ecf826285ea1c150fa2f22fdf3a03d33e4602f817c7401f1e2da976a1b0fee6e451d880a39e5278
-  data.tar.gz: 3a1480416aa824fc853bdb6da60d278cad5699c6e8571d3d0bcd2bd5626f07a24b3664f884f7c7ac9166eaede264bfb954b2a8e1839a93bd9a566d819e9de9aa
+  metadata.gz: c7145f2991c6989fbdd58c70fe301a66a05d2848fe0244059c6d082c7cb75e36089271f1ef02b8d903c538945f6db813b8efbe498513b778663ba5c07623f154
+  data.tar.gz: bd310ad9bb7a8f5ff51e03911856d96348fc4091b824f09e53eca3b3eb32ec0c062e3a1850c0d810caa4399c324771be057ee1d8cfceb9f98d70b965bae8ef2c

data/CHANGELOG.md

@@ -1,3 +1,24 @@
+## [0.1.4] — 2026-08-03
+
+### Changed
+
+- **Commands run in the caller's working directory by default** (was: a
+  fresh temp dir). The shell tools (Write, Edit, ...) operate relative to
+  the process CWD, so a sandboxed command that couldn't see a file the file
+  tools had just created — `ruby hello.rb` after writing it with Write
+  failed with `LoadError` — now works like a real terminal. Pass `workdir:`
+  to pin a specific directory (e.g. an empty temp dir for hermetic runs).
+
+## [0.1.3] — 2026-08-03
+
+### Fixed
+
+- **`rlimit_nproc` default raised from 200 to 1024.** nproc limits the
+  *user's* total process count, not the sandbox's — 200 is easily exceeded
+  on a busy dev machine, which made every fork inside a sandboxed command
+  fail with `Resource temporarily unavailable` (EAGAIN). 1024 still guards
+  against fork bombs without breaking normal use.
+
 ## [0.1.2] - 2026-06-25
 
 ### Changed

data/README.md

@@ -33,7 +33,7 @@ Ask::Sandbox.provider = Ask::Sandbox::Docker.new(image: "ruby:3.4-alpine", memor
 
 | Provider | Isolation | Requirement |
 |---|---|---|
-| `Ask::Sandbox::Local` (default) | Subprocess with rlimits (CPU, memory, processes, file size), temp directory, sanitized environment | None, stdlib only |
+| `Ask::Sandbox::Local` (default) | Subprocess with rlimits (CPU, memory, processes, file size), caller's working directory (or `workdir:`), sanitized environment | None, stdlib only |
 | `Ask::Sandbox::Docker` | Container with read-only rootfs, no capabilities, no network | Docker daemon |
 | `Ask::Sandbox::Daytona` | Remote sandbox via the Daytona API | `daytona` gem, API key |
 | `Ask::Sandbox::Cloudflare` | Cloudflare Workers sandbox via a proxy Worker | Deployed proxy Worker URL |

data/lib/ask/sandbox/local.rb

@@ -1,8 +1,5 @@
 # frozen_string_literal: true
 
-require "tmpdir"
-require "fileutils"
-
 module Ask
   module Sandbox
     # Executes commands in a local subprocess with resource limits.
@@ -41,13 +38,10 @@ module Ask
         argv = build_argv(command)
         child_env = build_environment(env)
 
-        if workdir
-          execute_in_dir(argv, child_env, workdir, timeout, stdin)
-        else
-          Dir.mktmpdir("ask_sandbox") do |dir|
-            execute_in_dir(argv, child_env, dir, timeout, stdin)
-          end
-        end
+        # Default to the caller's working directory so shell commands see the
+        # files the file tools (Write, Edit, ...) just created — like a real
+        # terminal. Pass workdir: to pin a specific directory instead.
+        execute_in_dir(argv, child_env, workdir || Dir.pwd, timeout, stdin)
       end
 
       private

data/lib/ask/sandbox/version.rb

@@ -2,6 +2,6 @@
 
 module Ask
   module Sandbox
-    VERSION = "0.1.3"
+    VERSION = "0.1.4"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ask-sandbox-providers
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.4
 platform: ruby
 authors:
 - Kaka Ruto