kobako 0.22.0 → 0.23.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 771a65c05a0d065db98f2644a978e4f82ab0cedb453f3cb7f6e61aea936be707
-  data.tar.gz: 330ab0d4762778e9608325be5b6fc737eeb82e0ff1b4d30eeac29ff8fac9902b
+  metadata.gz: 93d285d0be6ec4330857d521ca38c6d460b8a28c8692e4c4de6fdca256077f6e
+  data.tar.gz: d1b9a96885528582f9ba801c9ca7195c4df918bd98f8d3561f234f09300ff03d
 SHA512:
-  metadata.gz: 6fd6084f9566a7f9466f8b58f308914dae445c2ee43ed4cd1ccd721db01d609b99257f404e0ff00ae6e5fb3bbac45e453afc933eb1d3b23210df709ca9914962
-  data.tar.gz: c113d2ef16f413ad41c4d97cb3d5675d4f2ac151879257ffc9f3d918a27f471667d936c7fe13120d9a78e73ab6fee041700e3bed8f3315c9d680d742213014ac
+  metadata.gz: 9f7a2c4833866242cf761ea57b2dbe6537299d3508b80a5bc8a88e680e4513f34ab364726379e7e621e795b64eea5d5bdbeab8420ebbe6a8c7c1f5466a3d7b2f
+  data.tar.gz: 2749636ef9b977a8f6009eb2d487d37a55ca50259ec29a672b8438768a97a673a4d106637c727a97adcdd09f9d53e6ce80ad3ebb0995d173f4f58281667647ce

data/.release-please-manifest.json

@@ -1 +1 @@
-{".":"0.22.0","wasm/kobako-core":"0.14.0","wasm/kobako-mruby":"0.14.0","wasm/kobako-io":"0.14.0","wasm/kobako-json":"0.14.0","wasm/kobako-regexp":"0.14.0","wasm/kobako-baker":"0.14.0","crates/kobako-transport":"0.14.0","crates/kobako-codec":"0.14.0","crates/kobako-runtime":"0.14.0","crates/kobako-wasmtime":"0.14.0","crates/kobako":"0.14.0"}
+{".":"0.23.0","wasm/kobako-core":"0.14.0","wasm/kobako-mruby":"0.14.0","wasm/kobako-io":"0.14.0","wasm/kobako-json":"0.14.0","wasm/kobako-regexp":"0.14.0","wasm/kobako-baker":"0.14.0","crates/kobako-transport":"0.14.0","crates/kobako-codec":"0.14.0","crates/kobako-runtime":"0.14.0","crates/kobako-wasmtime":"0.14.0","crates/kobako":"0.14.0"}

data/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [0.23.0](https://github.com/elct9620/kobako/compare/v0.22.0...v0.23.0) (2026-08-28)
+
+
+### Features
+
+* **spec:** declare the boot state two invocations share, and what a callback raise costs ([d94fffc](https://github.com/elct9620/kobako/commit/d94fffc59a3142cb28e0025a0dc8c792f7282074))
+* **spec:** declare the dispatch boundary one observation at a time ([f11b280](https://github.com/elct9620/kobako/commit/f11b280ef503c20d5b75d7b1c4187d261f60ef27))
+* **spec:** declare the guest's pattern surface one observation at a time ([a477818](https://github.com/elct9620/kobako/commit/a477818f8fa505fdcd8ea1fd1051a74c0ba08155))
+* **spec:** declare the Pool's behavior where its tests can claim it ([5ec5e4b](https://github.com/elct9620/kobako/commit/5ec5e4b41f44db05520a251ff6979e71efd27866))
+* **spec:** declare the two descriptors a guest may write to, and how ([c15d09a](https://github.com/elct9620/kobako/commit/c15d09ab563947ab02bbe31129e88686fcff5c24))
+* **spec:** declare the value shapes and the generated concurrency programs ([a06ae5b](https://github.com/elct9620/kobako/commit/a06ae5b24b4615c22c2abaae08c7029218da08bd))
+* **spec:** declare what a Sandbox is built with and what each run leaves behind ([8cc6ac8](https://github.com/elct9620/kobako/commit/8cc6ac81713da7fc6ba6c89bc24da75406579aec))
+* **spec:** declare what installing an Extension composes and resolves ([3cce5a6](https://github.com/elct9620/kobako/commit/3cce5a6551ae8710df71d7520a689c13630ee111))
+* **spec:** declare what the guest's JSON surface reads, writes and refuses ([7e9e3b3](https://github.com/elct9620/kobako/commit/7e9e3b3897ae5f5dc7d6caadeb650302841aa0a6))
+* **spec:** declare what the host checks before a guest runs ([28d5d4b](https://github.com/elct9620/kobako/commit/28d5d4bac0efba2aced1b4449926bd868787bd75))
+* **spec:** declare where a host object becomes a name the guest can reach ([5d88647](https://github.com/elct9620/kobako/commit/5d88647aa922e3a7bb6915864aec700423060358))
+
+
+### Bug Fixes
+
+* **gate:** keep the rendered specifications out of the anchor corpus ([1a24c7f](https://github.com/elct9620/kobako/commit/1a24c7ff1367228998b2f21beca885ab7096a893))
+* **gate:** stop reading a sumi claim as an anchor citation ([b3c74d6](https://github.com/elct9620/kobako/commit/b3c74d6a296dfb7fa5e157ca9ba4678097bfab43))
+* **spec:** let the dispatch feature reach the test that witnesses it ([430394f](https://github.com/elct9620/kobako/commit/430394fa906bf79b8d86d28de7b03e32748516a1))
+* **transport:** keep a bound Class's class-level surface off the guest boundary ([dc00355](https://github.com/elct9620/kobako/commit/dc0035524f2a7b3eba3ec378f8f065c19a17660d))
+
 ## [0.22.0](https://github.com/elct9620/kobako/compare/v0.21.1...v0.22.0) (2026-08-06)
 
 

data/Cargo.lock

@@ -858,7 +858,7 @@ checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
 
 [[package]]
 name = "kobako"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "kobako-runtime",
  "kobako-transport",
@@ -1152,18 +1152,18 @@ checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
 
 [[package]]
 name = "rb-sys"
-version = "0.9.128"
+version = "0.9.130"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "45ca28513560e56cfb79a62b1fce363c73af170a182024ce880c77ee9429920a"
+checksum = "02faf625bb10ba893e3ae620f19c9fb1b5f8fcae0fe4eb86bb3f2230fad75edb"
 dependencies = [
  "rb-sys-build",
 ]
 
 [[package]]
 name = "rb-sys-build"
-version = "0.9.128"
+version = "0.9.130"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce04b2c55eff3a21aaa623fcc655d94373238e72cac6b3e1a3641ff31649f99a"
+checksum = "05be6f9c86fe5482808162826f6c047d093b3670582296c770de1d94f8066694"
 dependencies = [
  "bindgen",
  "lazy_static",

data/ext/kobako/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "kobako"
-version = "0.22.0"
+version = "0.23.0"
 edition = "2021"
 authors = ["Aotokitsuruya <contact@aotoki.me>"]
 license = "Apache-2.0"

data/lib/kobako/catalog/handles.rb

@@ -73,15 +73,18 @@ module Kobako
 
       private
 
-      # Refuse to mint a Capability Handle for a reflective gadget:
-      # a +Binding+ / +Method+ / +UnboundMethod+ would hand the guest a
-      # callable proxy onto host reflection (a returned +Binding+ reaches
-      # +Binding#eval+). Raising here keeps the rule at the single mint
-      # point, so it holds on both the Service-return and the +#run+
-      # host→guest auto-wrap paths.
+      # Refuse to mint a Capability Handle for an object whose reachable
+      # surface is not Service behaviour: a +Binding+ / +Method+ /
+      # +UnboundMethod+ hands the guest a callable proxy onto host
+      # reflection (a returned +Binding+ reaches +Binding#eval+); a +Class+
+      # or +Module+ hands over its class-level API (+File.popen+ / +read+,
+      # +Kernel.system+), which the owner-based dispatch floor cannot see
+      # because a singleton-class owner matches no core-module list. Raising
+      # here keeps the rule at the single mint point, so it holds on both the
+      # Service-return and the +#run+ host→guest auto-wrap paths.
       def reject_unwrappable!(object)
         case object
-        when Binding, Method, UnboundMethod
+        when Binding, Method, UnboundMethod, Module
           raise SandboxError, "a #{object.class} cannot cross as a Capability Handle"
         end
       end

data/lib/kobako/transport/reflection.rb

@@ -47,17 +47,18 @@ module Kobako
       end
 
       # Guard against ambient reflection methods. A public method whose
-      # owner is a META_OWNERS or GADGET_OWNERS module is rejected, except
-      # CALLABLE_ALLOW on a gadget target (a bound lambda stays invocable).
-      # A name with no concrete public method is allowed only when the
-      # target opts into it via +respond_to?+ (dynamic +method_missing+
-      # Services), since the dangerous methods are all concretely defined
-      # and therefore never reach that branch.
+      # owner is a META_OWNERS or GADGET_OWNERS module — or a singleton
+      # class, the owner of every class-level method (+File.popen+ /
+      # +Kernel.system+, unreachable via any fixed core-module list) — is
+      # rejected, except CALLABLE_ALLOW on a gadget target (a bound lambda
+      # stays invocable). A name with no concrete public method is allowed
+      # only when the target opts into it via +respond_to?+ (dynamic
+      # +method_missing+ Services), since the dangerous methods are all
+      # concretely defined and therefore never reach that branch.
       def ambient_refusal(target, name)
         owner = target.public_method(name).owner
-        gadget = GADGET_OWNERS.include?(owner)
-        return nil unless META_OWNERS.include?(owner) || gadget
-        return nil if gadget && CALLABLE_ALLOW.include?(name)
+        return nil unless ambient_owner?(owner, target)
+        return nil if GADGET_OWNERS.include?(owner) && CALLABLE_ALLOW.include?(name)
 
         "method #{name.inspect} is not a Service method"
       rescue NameError
@@ -66,6 +67,19 @@ module Kobako
         "no public method #{name.inspect} on target"
       end
 
+      # Whether +name+'s +owner+ is ambient surface rather than Service
+      # behaviour: a core meta module, a callable gadget type, or — when
+      # +target+ is itself a Class or Module bound as a Service — the
+      # singleton class that owns its class-level API (+File.popen+ /
+      # +Kernel.system+, unreachable via any fixed core-module list). A plain
+      # object's own singleton method (+def obj.x+) stays reachable, since
+      # +target+ is not a Module there.
+      def ambient_owner?(owner, target)
+        META_OWNERS.include?(owner) ||
+          GADGET_OWNERS.include?(owner) ||
+          (target.is_a?(Module) && owner.singleton_class?)
+      end
+
       # Consult the target's opt-in narrowing predicate. A bound object may
       # define a private +respond_to_guest?(name)+ to restrict which of its
       # methods the guest reaches; a falsy answer refuses the dispatch. It

data/lib/kobako/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Kobako
-  VERSION = "0.22.0"
+  VERSION = "0.23.0"
 end

data/sig/kobako/transport/reflection.rbs

@@ -9,6 +9,8 @@ module Kobako
 
       def self?.ambient_refusal: (untyped target, Symbol name) -> String?
 
+      def self?.ambient_owner?: (Module owner, untyped target) -> bool
+
       def self?.narrowing_refusal: (untyped target, Symbol name) -> String?
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.22.0
+  version: 0.23.0
 platform: ruby
 authors:
 - Aotokitsuruya