kobako 0.25.0-aarch64-linux → 0.26.0-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e6b1af77d24fb13d4d331b5ee1ede3fbd2d981f3ad8df91796de97e9e320abd2
-  data.tar.gz: e4305e4c7ad9845bf70d41b1d18f48465f82f37feff9fa85525a0443a622393b
+  metadata.gz: 0da2768b0825ee9390a7fa8b0ad607250c1e3414e2a087aa01e0a55c96d35c12
+  data.tar.gz: acfa3845f354764e12b8ede5d4c99a99da85338e7b6d4eb49c6ca57636e1e148
 SHA512:
-  metadata.gz: b4feda43682dc0448fc1898ee173adad97664095bf3d175f9b9c6d525f272be82f91bd75baba54dc22f9a5ce7124209d2dc9a080be9ed29c5bade74176735d65
-  data.tar.gz: 8e7775a4dd467b7f8d57f0158fa5667800f5296785fdcc0463380435d024ea3645b2abfd1c7499086f35009d287d2629a1b72059e2301278171491532df5d2a1
+  metadata.gz: 2f5e3091468ddc695bf76827b302964b10e310cac203f75d30d01f4548aaa2960148fef15256de3c9e512cbf3d73108fa62ad63b31653580801edef1c72b286c
+  data.tar.gz: f22415c61723f104638732c570e72ee468fb61c8d0ab4cca766a5822b6028ecaeb2e2ce6c85317390df7323c9d07f566d9f5beb5a0c7ad4931ffca416add0f92

data/.release-please-manifest.json

@@ -1 +1 @@
-{".":"0.25.0","wasm/kobako-core":"0.15.0","wasm/kobako-mruby":"0.15.0","wasm/kobako-io":"0.15.0","wasm/kobako-json":"0.15.0","wasm/kobako-regexp":"0.15.0","wasm/kobako-baker":"0.15.0","crates/kobako-transport":"0.15.0","crates/kobako-codec":"0.15.0","crates/kobako-runtime":"0.15.0","crates/kobako-wasmtime":"0.15.0","crates/kobako":"0.15.0"}
+{".":"0.26.0","wasm/kobako-core":"0.16.0","wasm/kobako-mruby":"0.16.0","wasm/kobako-io":"0.16.0","wasm/kobako-json":"0.16.0","wasm/kobako-regexp":"0.16.0","wasm/kobako-baker":"0.16.0","crates/kobako-transport":"0.16.0","crates/kobako-codec":"0.16.0","crates/kobako-runtime":"0.16.0","crates/kobako-wasmtime":"0.16.0","crates/kobako":"0.16.0"}

data/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [0.26.0](https://github.com/elct9620/kobako/compare/v0.25.0...v0.26.0) (2026-09-15)
+
+
+### ⚠ BREAKING CHANGES
+
+* **transport:** a #run argument or keyword value whose own nesting leaves the Run payload one level past the wire's 128-level bound used to reach the guest and fail there as Kobako::SandboxError "failed to decode the invocation arguments"; it is now refused by the host before the guest runs, still as Kobako::SandboxError, with a message naming the depth bound.
+* **transport:** a Service answer nesting past 128 levels used to cross the host and fail in the guest's decoder, reaching the Host App as Kobako::Transport::Error; it is now refused at the host and reaches the Host App as Kobako::ServiceError, which guest code may rescue. A yield whose arguments nest past the bound — a single yielded value already at the bound does, since the arguments travel as one list — now raises Kobako::YieldValueError inside the Service at the yield instead of failing in the guest.
+
+### Bug Fixes
+
+* **transport:** measure an entrypoint argument from the Run payload that carries it ([8f76912](https://github.com/elct9620/kobako/commit/8f76912f2290ec0d8484e8ac9a64cbb48409bf1d))
+* **transport:** refuse a Service's over-deep value before the host writes it ([5594542](https://github.com/elct9620/kobako/commit/5594542c7160ae2f052025545a20bafabd7e51df))
+
+
+### Performance Improvements
+
+* **codec:** walk into a value's members only where one could be a container ([a965136](https://github.com/elct9620/kobako/commit/a965136c989251b2ed991c2824214a017122430c))
+
 ## [0.25.0](https://github.com/elct9620/kobako/compare/v0.24.0...v0.25.0) (2026-09-14)
 
 

data/crates/kobako-runtime/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.16.0](https://github.com/elct9620/kobako/compare/kobako-runtime-v0.15.0...kobako-runtime-v0.16.0) (2026-09-15)
+
+
+### Miscellaneous Chores
+
+* **kobako-runtime:** Synchronize kobako crates versions
+
 ## [0.15.0](https://github.com/elct9620/kobako/compare/kobako-runtime-v0.14.0...kobako-runtime-v0.15.0) (2026-09-13)
 
 

data/crates/kobako-runtime/README.md

@@ -26,7 +26,7 @@ map the neutral types onto their own language surface.
 
 ```toml
 [dependencies]
-kobako-runtime = "0.15.0" # x-release-please-version
+kobako-runtime = "0.16.0" # x-release-please-version
 ```
 
 ## License

data/crates/kobako-transport/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.16.0](https://github.com/elct9620/kobako/compare/kobako-transport-v0.15.0...kobako-transport-v0.16.0) (2026-09-15)
+
+
+### Miscellaneous Chores
+
+* **kobako-transport:** Synchronize kobako crates versions
+
 ## [0.15.0](https://github.com/elct9620/kobako/compare/kobako-transport-v0.14.0...kobako-transport-v0.15.0) (2026-09-13)
 
 

data/crates/kobako-transport/README.md

@@ -35,7 +35,7 @@ the golden vectors in this crate are derived from that document.
 
 ```toml
 [dependencies]
-kobako-transport = "0.15.0" # x-release-please-version
+kobako-transport = "0.16.0" # x-release-please-version
 ```
 
 ## License

data/crates/kobako-wasmtime/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.16.0](https://github.com/elct9620/kobako/compare/kobako-wasmtime-v0.15.0...kobako-wasmtime-v0.16.0) (2026-09-15)
+
+
+### Miscellaneous Chores
+
+* **kobako-wasmtime:** Synchronize kobako crates versions
+
 ## [0.15.0](https://github.com/elct9620/kobako/compare/kobako-wasmtime-v0.14.0...kobako-wasmtime-v0.15.0) (2026-09-13)
 
 

data/crates/kobako-wasmtime/README.md

@@ -24,7 +24,7 @@ SDK consumes the same surface.
 
 ```toml
 [dependencies]
-kobako-wasmtime = "0.15.0" # x-release-please-version
+kobako-wasmtime = "0.16.0" # x-release-please-version
 ```
 
 ## License

data/lib/kobako/codec/encoder.rb

@@ -31,23 +31,14 @@ module Kobako
       # same error: an integer outside i64..u64 (+RangeError+) and any
       # packer-internal +NoMethodError+.
       #
-      # A value that nests without bound — a reference cycle necessarily
-      # does — exhausts the packer's own recursion instead, which Ruby
-      # reports outside +StandardError+. Mapping it keeps an unwritable
-      # value a wire violation the dispatch boundary can answer, rather than
-      # one that escapes every caller's rescue and traps the invocation.
-      #
-      # The refusal is spent once per thread: a thread that has absorbed one
-      # such overflow aborts on the next instead of raising, and a Hash cycle
-      # never reaches Ruby at all — the packer walks a Hash through C frames
-      # that carry no stack guard. Bounding the walk before the packer is
-      # handed the value is what would make the refusal repeatable.
+      # The caller bounds +value+'s nesting first (Nesting): the packer takes
+      # no depth limit and walks a list or map in frames that carry no stack
+      # guard, so a value nesting without end — a reference cycle necessarily
+      # does — exhausts the machine stack instead of raising.
       def self.encode(value)
         FACTORY.dump(value)
       rescue ::RangeError, ::NoMethodError => e
         raise UnsupportedTypeError, e.message
-      rescue ::SystemStackError
-        raise InvalidTypeError, "value nests deeper than this host can write (a reference cycle necessarily does)"
       end
     end
   end

data/lib/kobako/codec/handle_walk.rb

@@ -95,7 +95,7 @@ module Kobako
         return unless depth > MAX_NESTING_DEPTH
 
         raise Kobako::SandboxError,
-              "a #run argument nests deeper than #{MAX_NESTING_DEPTH} levels and " \
+              "a #run argument nests deeper than #{MAX_NESTING_DEPTH} levels within the Run payload and " \
               "cannot cross the sandbox boundary (possible reference cycle)"
       end
 

data/lib/kobako/codec/nesting.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require_relative "error"
+
+module Kobako
+  module Codec
+    # The structural nesting bound
+    # ({docs/wire/payload-msgpack.md}[link:../../../docs/wire/payload-msgpack.md]
+    # § Structural Nesting Depth), checked before a value reaches the
+    # packer. The packer takes no depth limit and walks a list or map in
+    # frames that carry no stack guard, so a value it cannot finish — a
+    # reference cycle necessarily is one — must be refused before it is
+    # handed over.
+    module Nesting
+      # Raise InvalidTypeError when +value+ nests past MAX_NESTING_DEPTH; a
+      # value nested exactly to the bound passes.
+      def self.assert_within_bound!(value, depth = 0)
+        case value
+        when ::Array then assert_members_within_bound!(value, depth)
+        when ::Hash
+          assert_members_within_bound!(value.keys, depth)
+          assert_members_within_bound!(value.values, depth)
+        end
+      end
+
+      # Measure the members of one container at +depth+, each sitting one
+      # level deeper. A member is matched by class rather than asked about
+      # itself — it may be a BasicObject — and only one that could be a
+      # container is walked into.
+      def self.assert_members_within_bound!(members, depth)
+        return if members.empty?
+        if depth >= MAX_NESTING_DEPTH
+          raise InvalidTypeError,
+                "value nests deeper than #{MAX_NESTING_DEPTH} levels (a reference cycle necessarily does)"
+        end
+        return unless members.any?(::Enumerable)
+
+        members.grep(::Enumerable) { |member| assert_within_bound!(member, depth + 1) }
+      end
+      private_class_method :assert_members_within_bound!
+    end
+  end
+end

data/lib/kobako/codec.rb

@@ -3,6 +3,7 @@
 require_relative "codec/error"
 require_relative "codec/utils"
 require_relative "codec/handle_walk"
+require_relative "codec/nesting"
 require_relative "codec/state"
 require_relative "codec/ext_types"
 require_relative "codec/encoder"
@@ -29,8 +30,9 @@ module Kobako
   module Codec
     # The maximum structural nesting depth the wire represents (the
     # MessagePack ecosystem's bound), shared with the guest +kobako_codec+
-    # so both sides cap identically. The host→guest wrap walk refuses a
-    # +#run+ argument nesting past it — a reference cycle necessarily does.
+    # so both sides cap identically. The host refuses a value nesting past
+    # it — a reference cycle necessarily does — before handing it to the
+    # packer.
     MAX_NESTING_DEPTH = 128
 
     # Bracket a decode and return the block's result together with whether

data/lib/kobako/transport/dispatcher.rb

@@ -236,6 +236,7 @@ module Kobako
       # known, instead of falling to the boundary's codec floor and reporting
       # as an exchange that produced no Service outcome.
       def encode_ok(value, handler)
+        Kobako::Codec::Nesting.assert_within_bound!(value)
         Kobako::Codec::Encoder.encode(value)
       rescue Kobako::Codec::UnsupportedTypeError
         encode_ok(wrap_as_handle(value, handler), handler)

data/lib/kobako/transport/run.rb

@@ -54,10 +54,13 @@ module Kobako
       # invocation's table, sharing the same allocator the guest→host
       # return path uses. A wrapped leaf rides as ext 0x01 in its
       # original position (docs/wire/payload-msgpack.md § ext 0x01).
+      # The walk starts one level down, since +args+ and +kwargs+ ride
+      # inside the payload document the wire's nesting bound is counted
+      # from.
       def payload(handler)
         Payload::Arguments.new(
-          args: Codec::HandleWalk.deep_wrap(args, handler),
-          kwargs: Codec::HandleWalk.deep_wrap(kwargs, handler)
+          args: Codec::HandleWalk.deep_wrap(args, handler, 1),
+          kwargs: Codec::HandleWalk.deep_wrap(kwargs, handler, 1)
         ).encode
       end
 

data/lib/kobako/transport/yielder.rb

@@ -94,11 +94,13 @@ module Kobako
 
       private
 
-      # Encode what the Service is yielding. A value outside the wire type
-      # set fails here, before the guest is re-entered, and is restated so
-      # the Service reads a refusal of its own argument rather than a codec
-      # class it never named.
+      # Encode what the Service is yielding. Arguments outside the wire
+      # type set, or nesting past the wire's bound as one list, fail here,
+      # before the guest is re-entered, and are restated so the Service
+      # reads a refusal of its own argument rather than a codec class it
+      # never named.
       def encode_args(args)
+        Kobako::Codec::Nesting.assert_within_bound!(args)
         Kobako::Codec::Encoder.encode(args)
       rescue Kobako::Codec::Error => e
         raise YieldValueError, "Service yielded a value the block cannot receive: #{e.message}"

data/lib/kobako/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Kobako
-  VERSION = "0.25.0"
+  VERSION = "0.26.0"
 end

data/sig/kobako/codec/nesting.rbs

@@ -0,0 +1,9 @@
+module Kobako
+  module Codec
+    module Nesting
+      def self.assert_within_bound!: (untyped value, ?Integer depth) -> void
+
+      def self.assert_members_within_bound!: (Array[untyped] members, Integer depth) -> void
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.25.0
+  version: 0.26.0
 platform: aarch64-linux
 authors:
 - Aotokitsuruya
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-09-14 00:00:00.000000000 Z
+date: 2026-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: msgpack
@@ -62,6 +62,7 @@ files:
 - lib/kobako/codec/error.rb
 - lib/kobako/codec/ext_types.rb
 - lib/kobako/codec/handle_walk.rb
+- lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
 - lib/kobako/context.rb
@@ -105,6 +106,7 @@ files:
 - sig/kobako/codec/error.rbs
 - sig/kobako/codec/ext_types.rbs
 - sig/kobako/codec/handle_walk.rbs
+- sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
 - sig/kobako/context.rbs