kobako 0.25.0 → 0.26.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a91b58cc6bac93dda7c202271315e49d20edd866905f506d74ad5a102ca7ba1f
-  data.tar.gz: 0205b45a1aad4a5e85be647f977d58385f4706bfbe0b02456571f73bb815f4e0
+  metadata.gz: c0c1c827c03774c7feb9dcb7ff38a4e070203a94abff75c0f76c37f95368ac46
+  data.tar.gz: 696243ed20eb3354c2f8f545be8a52844a84a5cde353d6a177acba4d5378d017
 SHA512:
-  metadata.gz: 96b6103795bd339b1f02e792064036d0b689a519dbcd5f875c3a72c14ce77cf36c5970d51178ac780835713077673e2679db4ffb71c77b03389e69c6c6e776a2
-  data.tar.gz: 3a3c370d95055acb91d4481785474ec26170d4ec8088730dfdcbc45edd825e3d54e99160370382e5387f490a677e9ad55c5fd74659b9bcc24a315481eb9c68ee
+  metadata.gz: b0628a560a80d649b8b8a40731d688253466b574cd88456fc69900815bb18444a50958364b8a8d8c99ef19244ad0c90ca7730cbde07d41d90a304a035377a23f
+  data.tar.gz: 8e2ca842efc9529f06840463db63e85823de7dbaac7b91613f6bf198a96e3b012cb36c589ca64d9603a11add54574458d4116e801694c3d0f27cbb99c2403ca4

data/.release-please-manifest.json

@@ -1 +1 @@
-{".":"0.25.0","wasm/kobako-core":"0.15.0","wasm/kobako-mruby":"0.15.0","wasm/kobako-io":"0.15.0","wasm/kobako-json":"0.15.0","wasm/kobako-regexp":"0.15.0","wasm/kobako-baker":"0.15.0","crates/kobako-transport":"0.15.0","crates/kobako-codec":"0.15.0","crates/kobako-runtime":"0.15.0","crates/kobako-wasmtime":"0.15.0","crates/kobako":"0.15.0"}
+{".":"0.26.0","wasm/kobako-core":"0.16.0","wasm/kobako-mruby":"0.16.0","wasm/kobako-io":"0.16.0","wasm/kobako-json":"0.16.0","wasm/kobako-regexp":"0.16.0","wasm/kobako-baker":"0.16.0","crates/kobako-transport":"0.16.0","crates/kobako-codec":"0.16.0","crates/kobako-runtime":"0.16.0","crates/kobako-wasmtime":"0.16.0","crates/kobako":"0.16.0"}

data/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [0.26.0](https://github.com/elct9620/kobako/compare/v0.25.0...v0.26.0) (2026-09-15)
+
+
+### ⚠ BREAKING CHANGES
+
+* **transport:** a #run argument or keyword value whose own nesting leaves the Run payload one level past the wire's 128-level bound used to reach the guest and fail there as Kobako::SandboxError "failed to decode the invocation arguments"; it is now refused by the host before the guest runs, still as Kobako::SandboxError, with a message naming the depth bound.
+* **transport:** a Service answer nesting past 128 levels used to cross the host and fail in the guest's decoder, reaching the Host App as Kobako::Transport::Error; it is now refused at the host and reaches the Host App as Kobako::ServiceError, which guest code may rescue. A yield whose arguments nest past the bound — a single yielded value already at the bound does, since the arguments travel as one list — now raises Kobako::YieldValueError inside the Service at the yield instead of failing in the guest.
+
+### Bug Fixes
+
+* **transport:** measure an entrypoint argument from the Run payload that carries it ([8f76912](https://github.com/elct9620/kobako/commit/8f76912f2290ec0d8484e8ac9a64cbb48409bf1d))
+* **transport:** refuse a Service's over-deep value before the host writes it ([5594542](https://github.com/elct9620/kobako/commit/5594542c7160ae2f052025545a20bafabd7e51df))
+
+
+### Performance Improvements
+
+* **codec:** walk into a value's members only where one could be a container ([a965136](https://github.com/elct9620/kobako/commit/a965136c989251b2ed991c2824214a017122430c))
+
 ## [0.25.0](https://github.com/elct9620/kobako/compare/v0.24.0...v0.25.0) (2026-09-14)
 
 

data/Cargo.lock

@@ -858,7 +858,7 @@ checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
 
 [[package]]
 name = "kobako"
-version = "0.25.0"
+version = "0.26.0"
 dependencies = [
  "kobako-runtime",
  "kobako-transport",
@@ -869,18 +869,18 @@ dependencies = [
 
 [[package]]
 name = "kobako-runtime"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "kobako-transport",
 ]
 
 [[package]]
 name = "kobako-transport"
-version = "0.15.0"
+version = "0.16.0"
 
 [[package]]
 name = "kobako-wasmtime"
-version = "0.15.0"
+version = "0.16.0"
 dependencies = [
  "kobako-runtime",
  "kobako-transport",

data/crates/kobako-runtime/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.16.0](https://github.com/elct9620/kobako/compare/kobako-runtime-v0.15.0...kobako-runtime-v0.16.0) (2026-09-15)
+
+
+### Miscellaneous Chores
+
+* **kobako-runtime:** Synchronize kobako crates versions
+
 ## [0.15.0](https://github.com/elct9620/kobako/compare/kobako-runtime-v0.14.0...kobako-runtime-v0.15.0) (2026-09-13)
 
 

data/crates/kobako-runtime/Cargo.toml

@@ -13,7 +13,7 @@
 
 [package]
 name = "kobako-runtime"
-version = "0.15.0"
+version = "0.16.0"
 edition = "2021"
 description = "Engine-neutral host runtime contract for embedding kobako Wasm guests."
 license = "Apache-2.0"
@@ -27,4 +27,4 @@ categories = ["wasm", "virtualization"]
 # in-tree builds (and the Ruby gem, which ships both crates) resolving
 # locally.
 [dependencies]
-kobako-transport = { version = "0.15.0", path = "../kobako-transport" }
+kobako-transport = { version = "0.16.0", path = "../kobako-transport" }

data/crates/kobako-runtime/README.md

@@ -26,7 +26,7 @@ map the neutral types onto their own language surface.
 
 ```toml
 [dependencies]
-kobako-runtime = "0.15.0" # x-release-please-version
+kobako-runtime = "0.16.0" # x-release-please-version
 ```
 
 ## License

data/crates/kobako-transport/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.16.0](https://github.com/elct9620/kobako/compare/kobako-transport-v0.15.0...kobako-transport-v0.16.0) (2026-09-15)
+
+
+### Miscellaneous Chores
+
+* **kobako-transport:** Synchronize kobako crates versions
+
 ## [0.15.0](https://github.com/elct9620/kobako/compare/kobako-transport-v0.14.0...kobako-transport-v0.15.0) (2026-09-13)
 
 

data/crates/kobako-transport/Cargo.toml

@@ -12,7 +12,7 @@
 
 [package]
 name = "kobako-transport"
-version = "0.15.0"
+version = "0.16.0"
 edition = "2021"
 description = "The kobako core envelope — the fixed host↔guest wire frame every assembly shares."
 license = "Apache-2.0"

data/crates/kobako-transport/README.md

@@ -35,7 +35,7 @@ the golden vectors in this crate are derived from that document.
 
 ```toml
 [dependencies]
-kobako-transport = "0.15.0" # x-release-please-version
+kobako-transport = "0.16.0" # x-release-please-version
 ```
 
 ## License

data/crates/kobako-wasmtime/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.16.0](https://github.com/elct9620/kobako/compare/kobako-wasmtime-v0.15.0...kobako-wasmtime-v0.16.0) (2026-09-15)
+
+
+### Miscellaneous Chores
+
+* **kobako-wasmtime:** Synchronize kobako crates versions
+
 ## [0.15.0](https://github.com/elct9620/kobako/compare/kobako-wasmtime-v0.14.0...kobako-wasmtime-v0.15.0) (2026-09-13)
 
 

data/crates/kobako-wasmtime/Cargo.toml

@@ -15,7 +15,7 @@
 
 [package]
 name = "kobako-wasmtime"
-version = "0.15.0"
+version = "0.16.0"
 edition = "2021"
 description = "wasmtime implementation of the kobako host runtime contract."
 license = "Apache-2.0"
@@ -28,10 +28,10 @@ categories = ["wasm", "virtualization"]
 # The engine-neutral contract this crate implements. The version pin
 # rides the linked release group; the path keeps in-tree builds (and
 # the Ruby gem, which ships both crates) resolving locally.
-kobako-runtime = { version = "0.15.0", path = "../kobako-runtime" }
+kobako-runtime = { version = "0.16.0", path = "../kobako-runtime" }
 # The fixed tier: the core envelope this driver shuttles and the ABI
 # values it drives the exports against.
-kobako-transport = { version = "0.15.0", path = "../kobako-transport" }
+kobako-transport = { version = "0.16.0", path = "../kobako-transport" }
 # wasmtime — host-side embedder for kobako.wasm. We disable default-features
 # and opt back in only what kobako needs: a Cranelift-backed runtime that can
 # compile a pre-built wasm32-wasip1 module on the host triple, plus the `wat`

data/crates/kobako-wasmtime/README.md

@@ -24,7 +24,7 @@ SDK consumes the same surface.
 
 ```toml
 [dependencies]
-kobako-wasmtime = "0.15.0" # x-release-please-version
+kobako-wasmtime = "0.16.0" # x-release-please-version
 ```
 
 ## License

data/ext/kobako/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "kobako"
-version = "0.25.0"
+version = "0.26.0"
 edition = "2021"
 authors = ["Aotokitsuruya <contact@aotoki.me>"]
 license = "Apache-2.0"

data/lib/kobako/codec/encoder.rb

@@ -31,23 +31,14 @@ module Kobako
       # same error: an integer outside i64..u64 (+RangeError+) and any
       # packer-internal +NoMethodError+.
       #
-      # A value that nests without bound — a reference cycle necessarily
-      # does — exhausts the packer's own recursion instead, which Ruby
-      # reports outside +StandardError+. Mapping it keeps an unwritable
-      # value a wire violation the dispatch boundary can answer, rather than
-      # one that escapes every caller's rescue and traps the invocation.
-      #
-      # The refusal is spent once per thread: a thread that has absorbed one
-      # such overflow aborts on the next instead of raising, and a Hash cycle
-      # never reaches Ruby at all — the packer walks a Hash through C frames
-      # that carry no stack guard. Bounding the walk before the packer is
-      # handed the value is what would make the refusal repeatable.
+      # The caller bounds +value+'s nesting first (Nesting): the packer takes
+      # no depth limit and walks a list or map in frames that carry no stack
+      # guard, so a value nesting without end — a reference cycle necessarily
+      # does — exhausts the machine stack instead of raising.
       def self.encode(value)
         FACTORY.dump(value)
       rescue ::RangeError, ::NoMethodError => e
         raise UnsupportedTypeError, e.message
-      rescue ::SystemStackError
-        raise InvalidTypeError, "value nests deeper than this host can write (a reference cycle necessarily does)"
       end
     end
   end

data/lib/kobako/codec/handle_walk.rb

@@ -95,7 +95,7 @@ module Kobako
         return unless depth > MAX_NESTING_DEPTH
 
         raise Kobako::SandboxError,
-              "a #run argument nests deeper than #{MAX_NESTING_DEPTH} levels and " \
+              "a #run argument nests deeper than #{MAX_NESTING_DEPTH} levels within the Run payload and " \
               "cannot cross the sandbox boundary (possible reference cycle)"
       end
 

data/lib/kobako/codec/nesting.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require_relative "error"
+
+module Kobako
+  module Codec
+    # The structural nesting bound
+    # ({docs/wire/payload-msgpack.md}[link:../../../docs/wire/payload-msgpack.md]
+    # § Structural Nesting Depth), checked before a value reaches the
+    # packer. The packer takes no depth limit and walks a list or map in
+    # frames that carry no stack guard, so a value it cannot finish — a
+    # reference cycle necessarily is one — must be refused before it is
+    # handed over.
+    module Nesting
+      # Raise InvalidTypeError when +value+ nests past MAX_NESTING_DEPTH; a
+      # value nested exactly to the bound passes.
+      def self.assert_within_bound!(value, depth = 0)
+        case value
+        when ::Array then assert_members_within_bound!(value, depth)
+        when ::Hash
+          assert_members_within_bound!(value.keys, depth)
+          assert_members_within_bound!(value.values, depth)
+        end
+      end
+
+      # Measure the members of one container at +depth+, each sitting one
+      # level deeper. A member is matched by class rather than asked about
+      # itself — it may be a BasicObject — and only one that could be a
+      # container is walked into.
+      def self.assert_members_within_bound!(members, depth)
+        return if members.empty?
+        if depth >= MAX_NESTING_DEPTH
+          raise InvalidTypeError,
+                "value nests deeper than #{MAX_NESTING_DEPTH} levels (a reference cycle necessarily does)"
+        end
+        return unless members.any?(::Enumerable)
+
+        members.grep(::Enumerable) { |member| assert_within_bound!(member, depth + 1) }
+      end
+      private_class_method :assert_members_within_bound!
+    end
+  end
+end

data/lib/kobako/codec.rb

@@ -3,6 +3,7 @@
 require_relative "codec/error"
 require_relative "codec/utils"
 require_relative "codec/handle_walk"
+require_relative "codec/nesting"
 require_relative "codec/state"
 require_relative "codec/ext_types"
 require_relative "codec/encoder"
@@ -29,8 +30,9 @@ module Kobako
   module Codec
     # The maximum structural nesting depth the wire represents (the
     # MessagePack ecosystem's bound), shared with the guest +kobako_codec+
-    # so both sides cap identically. The host→guest wrap walk refuses a
-    # +#run+ argument nesting past it — a reference cycle necessarily does.
+    # so both sides cap identically. The host refuses a value nesting past
+    # it — a reference cycle necessarily does — before handing it to the
+    # packer.
     MAX_NESTING_DEPTH = 128
 
     # Bracket a decode and return the block's result together with whether

data/lib/kobako/transport/dispatcher.rb

@@ -236,6 +236,7 @@ module Kobako
       # known, instead of falling to the boundary's codec floor and reporting
       # as an exchange that produced no Service outcome.
       def encode_ok(value, handler)
+        Kobako::Codec::Nesting.assert_within_bound!(value)
         Kobako::Codec::Encoder.encode(value)
       rescue Kobako::Codec::UnsupportedTypeError
         encode_ok(wrap_as_handle(value, handler), handler)

data/lib/kobako/transport/run.rb

@@ -54,10 +54,13 @@ module Kobako
       # invocation's table, sharing the same allocator the guest→host
       # return path uses. A wrapped leaf rides as ext 0x01 in its
       # original position (docs/wire/payload-msgpack.md § ext 0x01).
+      # The walk starts one level down, since +args+ and +kwargs+ ride
+      # inside the payload document the wire's nesting bound is counted
+      # from.
       def payload(handler)
         Payload::Arguments.new(
-          args: Codec::HandleWalk.deep_wrap(args, handler),
-          kwargs: Codec::HandleWalk.deep_wrap(kwargs, handler)
+          args: Codec::HandleWalk.deep_wrap(args, handler, 1),
+          kwargs: Codec::HandleWalk.deep_wrap(kwargs, handler, 1)
         ).encode
       end
 

data/lib/kobako/transport/yielder.rb

@@ -94,11 +94,13 @@ module Kobako
 
       private
 
-      # Encode what the Service is yielding. A value outside the wire type
-      # set fails here, before the guest is re-entered, and is restated so
-      # the Service reads a refusal of its own argument rather than a codec
-      # class it never named.
+      # Encode what the Service is yielding. Arguments outside the wire
+      # type set, or nesting past the wire's bound as one list, fail here,
+      # before the guest is re-entered, and are restated so the Service
+      # reads a refusal of its own argument rather than a codec class it
+      # never named.
       def encode_args(args)
+        Kobako::Codec::Nesting.assert_within_bound!(args)
         Kobako::Codec::Encoder.encode(args)
       rescue Kobako::Codec::Error => e
         raise YieldValueError, "Service yielded a value the block cannot receive: #{e.message}"

data/lib/kobako/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Kobako
-  VERSION = "0.25.0"
+  VERSION = "0.26.0"
 end

data/sig/kobako/codec/nesting.rbs

@@ -0,0 +1,9 @@
+module Kobako
+  module Codec
+    module Nesting
+      def self.assert_within_bound!: (untyped value, ?Integer depth) -> void
+
+      def self.assert_members_within_bound!: (Array[untyped] members, Integer depth) -> void
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.25.0
+  version: 0.26.0
 platform: ruby
 authors:
 - Aotokitsuruya
@@ -117,6 +117,7 @@ files:
 - lib/kobako/codec/error.rb
 - lib/kobako/codec/ext_types.rb
 - lib/kobako/codec/handle_walk.rb
+- lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
 - lib/kobako/context.rb
@@ -160,6 +161,7 @@ files:
 - sig/kobako/codec/error.rbs
 - sig/kobako/codec/ext_types.rbs
 - sig/kobako/codec/handle_walk.rbs
+- sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
 - sig/kobako/context.rbs