kobako 0.28.0-aarch64-linux → 0.29.0-aarch64-linux

data/sig/kobako/filesystem.rbs

@@ -0,0 +1,88 @@
+module Kobako
+  module Filesystem
+    type mountable = Memory | Temporary | Directory | Overlay | _Readable
+
+    type access = :read | :read_write
+
+    # What a Filesystem written in Ruby answers to be mounted. One that
+    # also answers _Listable lists its directories, and one answering
+    # _Writable takes changes too; each method it lacks is refused alone.
+    interface _Readable
+      def open: (String path, Integer flags) -> _File
+      def stat: (String path) -> _Stat
+    end
+
+    interface _Listable
+      def children: (String path) -> Array[String]
+    end
+
+    interface _Writable
+      def mkdir: (String path) -> void
+      def rmdir: (String path) -> void
+      def unlink: (String path) -> void
+      def rename: (String from, String to, directory: bool?) -> void
+    end
+
+    # A file a Filesystem written in Ruby opened; +::File+ answers it. One
+    # that also answers _WritableFile takes writes too, one answering
+    # _AppendableFile takes appends, and any file may answer _SyncableFile
+    # to flush or _ClosableFile to close.
+    interface _File
+      def pread: (Integer length, Integer offset) -> String?
+      def size: () -> Integer
+    end
+
+    interface _WritableFile
+      def pwrite: (String data, Integer offset) -> Integer
+      def truncate: (Integer length) -> void
+    end
+
+    # Writes all of +data+ at the end in one step, answering where the file
+    # then ends.
+    interface _AppendableFile
+      def append: (String data) -> Integer
+    end
+
+    interface _SyncableFile
+      def fsync: () -> void
+    end
+
+    interface _ClosableFile
+      def close: () -> void
+    end
+
+    # What a Filesystem written in Ruby's +stat+ answers, as +File::Stat+
+    # does; an +ino+ of zero names no identity. One that also answers
+    # _StatDevice names the device its +ino+ belongs to.
+    interface _Stat
+      def directory?: () -> boolish
+      def size: () -> Integer
+      def ino: () -> Integer
+    end
+
+    interface _StatDevice
+      def dev: () -> Integer
+    end
+
+    class Memory
+      # A bare <tt>"path" => contents</tt> arrives as keywords, which RBS
+      # cannot key by String; a Symbol keyword past +limit+ and +inodes+
+      # raises ArgumentError.
+      def initialize: (?Hash[String, String] files, ?limit: Integer?, ?inodes: Integer?, **String) -> void
+    end
+
+    class Temporary
+      def initialize: (?limit: Integer?, ?inodes: Integer?) -> void
+    end
+
+    class Directory
+      def initialize: (String path) -> void
+    end
+
+    class Overlay
+      def initialize: () -> void
+      def layer: (mountable filesystem, ?access: access) -> Overlay
+    end
+
+  end
+end

data/sig/kobako/guest_yielder.rbs

@@ -0,0 +1,9 @@
+module Kobako
+  # Frame-scoped guest re-entry handle the ext hands the dispatch Proc as
+  # its last argument — the production conformer of
+  # +Kobako::Transport::_GuestYielder+, answering the Yield Reply already
+  # split off the core envelope.
+  class GuestYielder
+    def call: (String args_bytes) -> [Symbol, String, String?]
+  end
+end

data/sig/kobako/pool.rbs

@@ -31,7 +31,7 @@ module Kobako
 
     def checkin: (Kobako::Sandbox sandbox) -> void
 
-    def release_capacity!: () -> void
+    def release_capacity: () -> void
 
     def monotonic_now: () -> Float
 

data/sig/kobako/runtime.rbs

@@ -2,66 +2,38 @@ module Kobako
   class Runtime
     def self.default_path: () -> String
 
+    def self.validate_mount!: (untyped at, untyped access, untyped filesystem) -> nil
+
     def self.from_path: (
       String path,
-      (Float | Integer)? timeout_seconds,
-      Integer? memory_limit,
-      Integer? stdout_limit,
-      Integer? stderr_limit,
-      Symbol profile,
-      Symbol gvl
+      timeout: (Float | Integer)?,
+      setup_timeout: (Float | Integer)?,
+      memory_limit: Integer?,
+      stdout_limit: Integer?,
+      stderr_limit: Integer?,
+      open_file_limit: Integer?,
+      profile: Symbol,
+      gvl: Symbol
     ) -> Runtime
 
-    def eval: (
-      Kobako::Transport::dispatch_proc dispatch,
-      Array[String] paths,
-      Array[Kobako::Catalog::Snippets::tuple] snippets,
-      Array[Kobako::Catalog::Flags::tuple] flags,
-      String source
-    ) -> Kobako::Runtime::Snapshot
+    type setup = [
+      Array[String],
+      Array[Kobako::Catalog::Snippets::tuple],
+      Array[Kobako::Catalog::Flags::tuple],
+      Array[Kobako::Catalog::Mount::tuple]
+    ]
+
+    def eval: (Kobako::Transport::dispatch_proc dispatch, setup setup, String source) -> Kobako::Snapshot
 
     def run: (
       Kobako::Transport::dispatch_proc dispatch,
-      Array[String] paths,
-      Array[Kobako::Catalog::Snippets::tuple] snippets,
-      Array[Kobako::Catalog::Flags::tuple] flags,
+      setup setup,
       String entrypoint,
       String payload
-    ) -> Kobako::Runtime::Snapshot
+    ) -> Kobako::Snapshot
 
     def profile: () -> Symbol
 
-    def compile: (
-      Array[String] paths,
-      Array[Kobako::Catalog::Snippets::tuple] snippets,
-      Array[Kobako::Catalog::Flags::tuple] flags
-    ) -> Array[String]?
-
-    # Frame-scoped guest re-entry handle the ext hands the dispatch Proc as
-    # its last argument — the production conformer of
-    # +Kobako::Transport::_GuestYielder+, answering the Yield Reply already
-    # split off the core envelope.
-    class GuestYielder
-      def call: (String args_bytes) -> [Symbol, String, String?]
-    end
-
-    # One invocation's result — the whole Snapshot the driver produced.
-    class Snapshot
-      def outcome: () -> [String, Kobako::Outcome::panic_fields?]
-
-      def trap_error: () -> Kobako::TrapError?
-
-      def wall_time: () -> Float
-
-      def memory_peak: () -> Integer
-
-      def stdout: () -> String
-
-      def stdout_truncated?: () -> bool
-
-      def stderr: () -> String
-
-      def stderr_truncated?: () -> bool
-    end
+    def compile: (Kobako::Context::preamble preamble) -> Array[String]?
   end
 end

data/sig/kobako/sandbox.rbs

@@ -7,14 +7,16 @@ module Kobako
 
     # Forwarded to @options via Forwardable#def_delegators.
     def timeout: () -> Float?
+    def setup_timeout: () -> Float?
     def memory_limit: () -> Integer?
     def stdout_limit: () -> Integer?
     def stderr_limit: () -> Integer?
+    def open_file_limit: () -> Integer?
     def profile: () -> Symbol
     def gvl: () -> Symbol
 
     # Every keyword beyond wasm_path forwards verbatim to
-    # SandboxOptions.new (the four caps + the profile floor).
+    # SandboxOptions.new (the caps + the profile floor).
     def initialize: (
       ?wasm_path: String?,
       **untyped options
@@ -24,6 +26,8 @@ module Kobako
 
     def install: (*untyped extensions) -> Kobako::Sandbox
 
+    def mount: (String at, Kobako::Filesystem::mountable filesystem, ?access: Kobako::Filesystem::access) ?{ (String path, Kobako::Filesystem::access access) -> boolish } -> Kobako::Sandbox
+
     def preload: (code: String, name: Symbol | String) -> Kobako::Sandbox
                | (binary: String) -> Kobako::Sandbox
 
@@ -39,6 +43,8 @@ module Kobako
 
     def new_invocation: () -> Kobako::Context
 
+    def preamble: (Array[Kobako::Catalog::Snippets::tuple] snippets) -> Kobako::Context::preamble
+
     def refuse_once_invoked!: (String verb) -> void
 
     def begin_invocation!: () -> void

data/sig/kobako/sandbox_options.rbs

@@ -1,45 +1,67 @@
 module Kobako
   class SandboxOptions < Data
     DEFAULT_TIMEOUT_SECONDS: Float
+    DEFAULT_SETUP_TIMEOUT_SECONDS: Float
     DEFAULT_MEMORY_LIMIT: Integer
     DEFAULT_OUTPUT_LIMIT: Integer
+    DEFAULT_OPEN_FILE_LIMIT: Integer
     DEFAULT_PROFILE: Symbol
     PROFILES: Array[Symbol]
     GVL_MODES: Array[Symbol]
     DEFAULT_GVL: Symbol
+    VALUE_BYTES: Integer
 
     attr_reader timeout: Float?
+    attr_reader setup_timeout: Float?
     attr_reader memory_limit: Integer?
     attr_reader stdout_limit: Integer?
     attr_reader stderr_limit: Integer?
+    attr_reader open_file_limit: Integer?
     attr_reader profile: Symbol
     attr_reader gvl: Symbol
 
     def self.new: (
       ?timeout: (Float | Integer)?,
+      ?setup_timeout: (Float | Integer)?,
       ?memory_limit: Integer?,
       ?stdout_limit: Integer?,
       ?stderr_limit: Integer?,
+      ?open_file_limit: Integer?,
       ?profile: Symbol,
       ?gvl: Symbol
     ) -> SandboxOptions
 
     def initialize: (
       ?timeout: (Float | Integer)?,
+      ?setup_timeout: (Float | Integer)?,
       ?memory_limit: Integer?,
       ?stdout_limit: Integer?,
       ?stderr_limit: Integer?,
+      ?open_file_limit: Integer?,
       ?profile: Symbol,
       ?gvl: Symbol
     ) -> void
 
+    def to_h: () -> {
+      timeout: Float?,
+      setup_timeout: Float?,
+      memory_limit: Integer?,
+      stdout_limit: Integer?,
+      stderr_limit: Integer?,
+      open_file_limit: Integer?,
+      profile: Symbol,
+      gvl: Symbol
+    }
+
+    def value_budget: () -> Integer?
+
     def enforce_floor!: (Symbol declared) -> void
 
     private
 
-    def normalize_timeout: ((Float | Integer)? timeout) -> Float?
+    def normalize_timeout: ((Float | Integer)? timeout, String name) -> Float?
 
-    def normalize_byte_limit: (Integer? limit, String name) -> Integer?
+    def normalize_limit: (Integer? limit, String name) -> Integer?
 
     def normalize_choice: (untyped value, Array[Symbol] choices, String name) -> Symbol
   end

data/sig/kobako/snapshot.rbs

@@ -0,0 +1,20 @@
+module Kobako
+  # One invocation's result — the whole Snapshot the driver produced.
+  class Snapshot
+    def outcome: () -> [String, Kobako::Outcome::panic_fields?]
+
+    def trap_error: () -> Kobako::TrapError?
+
+    def wall_time: () -> Float
+
+    def memory_peak: () -> Integer
+
+    def stdout: () -> String
+
+    def stdout_truncated?: () -> bool
+
+    def stderr: () -> String
+
+    def stderr_truncated?: () -> bool
+  end
+end

data/sig/kobako/snippet/bytecode.rbs

@@ -0,0 +1,12 @@
+module Kobako
+  module Snippet
+    class Bytecode < Data
+      KIND: Symbol
+
+      attr_reader body: String
+
+      def self.new: (body: String) -> Bytecode
+                  | (String body) -> Bytecode
+    end
+  end
+end

data/sig/kobako/transport/block_failure.rbs

@@ -0,0 +1,13 @@
+module Kobako
+  module Transport
+    class BlockFailure
+      @raised: Kobako::BlockError?
+
+      def initialize: () -> void
+
+      def remember: (Kobako::BlockError error) -> Kobako::BlockError
+
+      def fault_text: (Exception error) -> String?
+    end
+  end
+end

data/sig/kobako/transport/dispatcher.rbs

@@ -9,9 +9,9 @@ module Kobako
 
       BREAK_THROW: Symbol
 
-      OWN_FAULTS: Hash[singleton(StandardError), String]
+      BARE_FAULTS: Hash[singleton(StandardError), String]
 
-      def self.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::_GuestYielder guest_yielder) -> [bool, String, String?]
+      def self.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::BlockFailure failure, Kobako::Transport::_GuestYielder guest_yielder) -> [Symbol, String, String?]
 
       private
 
@@ -21,7 +21,7 @@ module Kobako
 
       def self.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handles, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
 
-      def self.caught_fault: (StandardError error, Kobako::Transport::Yielder? yielder) -> [String, String]
+      def self.caught_fault: (StandardError error, Kobako::Transport::BlockFailure failure) -> [String, String]
 
       def self.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, Kobako::Transport::Yielder? yielder) -> untyped
 

data/sig/kobako/transport/exposure.rbs

@@ -37,7 +37,7 @@ module Kobako
 
       def self.with_singleton: (untyped object, Set[Symbol] names) -> Set[Symbol]
 
-      def self.authored: (Module owner) -> Array[Symbol]
+      def self.authored_names:(Module owner) -> Array[Symbol]
     end
   end
 end

data/sig/kobako/transport/reflection.rbs

@@ -1,16 +1,29 @@
 module Kobako
   module Transport
     module Reflection
-      META_OWNERS: Array[Module]
       GADGET_OWNERS: Array[Module]
       CALLABLE_ALLOW: Array[Symbol]
 
       def self.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
 
+      def self.authored?: (UnboundMethod method) -> bool
+
       private
 
+      def self.ambient_copy?: (UnboundMethod method) -> bool
+
       def self.ambient_refusal: (untyped target, Symbol name) -> String?
 
+      def self.defined_refusal: (untyped target, Symbol name, Module klass) -> String?
+
+      def self.authored_for?: (untyped target, Symbol name, UnboundMethod method, Module klass) -> bool
+
+      def self.refused: (Symbol name) -> String
+
+      def self.owner_refusal: (untyped target, Symbol name, Module owner) -> String?
+
+      def self.lookup_class: (untyped target) -> Module
+
       def self.ambient_owner?: (Module owner, untyped target) -> bool
     end
   end

data/sig/kobako/transport/yielder.rbs

@@ -4,25 +4,21 @@ module Kobako
       @guest_yielder: Kobako::Transport::_GuestYielder
       @break_tag: Symbol
       @handles: Kobako::Codec::_HandleTable
+      @failure: Kobako::Transport::BlockFailure
       @active: bool
-      @raised: Kobako::BlockError?
 
-      def initialize: (Kobako::Transport::_GuestYielder guest_yielder, Symbol break_tag, Kobako::Codec::_HandleTable handles) -> void
-
-      def fault_text: (Exception error) -> String?
+      def initialize: (Kobako::Transport::_GuestYielder guest_yielder, Symbol break_tag, Kobako::Codec::_HandleTable handles, Kobako::Transport::BlockFailure failure) -> void
 
       def yield: (*untyped args) -> untyped
 
       def to_proc: () -> Proc
 
-      def invalidate!: () -> void
+      def invalidate: () -> void
 
       private
 
       def encode_args: (Array[untyped] args) -> String
 
-      def remember: (Kobako::BlockError error) -> Kobako::BlockError
-
       def decode_body: (String body) -> [untyped, bool]
 
       def restore: (untyped value, bool carried_handle) -> untyped

data/sig/kobako/transport.rbs

@@ -3,7 +3,7 @@ module Kobako
     # The guest re-entry callable a dispatch hands to a Yielder: invoked
     # with the encoded yield args, it returns the decoded Yield Reply as an
     # +[arm, body, klass]+ triple.
-    # The ext's Kobako::Runtime::GuestYielder is the production conformer;
+    # The ext's Kobako::GuestYielder is the production conformer;
     # modelled structurally so the Transport layer needs no upward
     # dependency on Runtime.
     interface _GuestYielder
@@ -14,7 +14,7 @@ module Kobako
     # side already decoded off the core envelope and answering the arm and
     # body it puts on the Reply. Named here so the producer (Context) and the
     # consumer (Runtime) cannot declare it differently.
-    type dispatch_proc = ^(String | Integer, String, bool, String, _GuestYielder) -> [bool, String, String?]
+    type dispatch_proc = ^(String | Integer, String, bool, String, _GuestYielder) -> [Symbol, String, String?]
 
     # What a dispatch resolves constant-path targets against. The
     # invocation's Kobako::Context is the production conformer, so its

metadata

@@ -1,29 +1,35 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.28.0
+  version: 0.29.0
 platform: aarch64-linux
 authors:
 - Aotokitsuruya
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-10-13 00:00:00.000000000 Z
+date: 2026-10-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: msgpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: 1.8.2
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2'
 description: kobako provides an in-process Wasm sandbox (wasmtime + mruby) with a
   MessagePack-based host/guest RPC, allowing Ruby applications to execute untrusted
   mruby scripts under capability-based Service injection.
@@ -54,7 +60,9 @@ files:
 - lib/kobako/catalog.rb
 - lib/kobako/catalog/extensions.rb
 - lib/kobako/catalog/flags.rb
+- lib/kobako/catalog/grants.rb
 - lib/kobako/catalog/handles.rb
+- lib/kobako/catalog/mount.rb
 - lib/kobako/catalog/services.rb
 - lib/kobako/catalog/snippets.rb
 - lib/kobako/codec.rb
@@ -66,11 +74,13 @@ files:
 - lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
+- lib/kobako/codec/value_budget.rb
 - lib/kobako/constant_name.rb
 - lib/kobako/context.rb
 - lib/kobako/errors.rb
 - lib/kobako/execution.rb
 - lib/kobako/extension.rb
+- lib/kobako/filesystem.rb
 - lib/kobako/handle.rb
 - lib/kobako/outcome.rb
 - lib/kobako/payload.rb
@@ -80,9 +90,10 @@ files:
 - lib/kobako/sandbox.rb
 - lib/kobako/sandbox_options.rb
 - lib/kobako/snippet.rb
-- lib/kobako/snippet/binary.rb
+- lib/kobako/snippet/bytecode.rb
 - lib/kobako/snippet/source.rb
 - lib/kobako/transport.rb
+- lib/kobako/transport/block_failure.rb
 - lib/kobako/transport/call.rb
 - lib/kobako/transport/dispatcher.rb
 - lib/kobako/transport/error.rb
@@ -99,7 +110,9 @@ files:
 - sig/kobako/catalog.rbs
 - sig/kobako/catalog/extensions.rbs
 - sig/kobako/catalog/flags.rbs
+- sig/kobako/catalog/grants.rbs
 - sig/kobako/catalog/handles.rbs
+- sig/kobako/catalog/mount.rbs
 - sig/kobako/catalog/services.rbs
 - sig/kobako/catalog/snippets.rbs
 - sig/kobako/codec.rbs
@@ -111,11 +124,14 @@ files:
 - sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
+- sig/kobako/codec/value_budget.rbs
 - sig/kobako/constant_name.rbs
 - sig/kobako/context.rbs
 - sig/kobako/errors.rbs
 - sig/kobako/execution.rbs
 - sig/kobako/extension.rbs
+- sig/kobako/filesystem.rbs
+- sig/kobako/guest_yielder.rbs
 - sig/kobako/handle.rbs
 - sig/kobako/outcome.rbs
 - sig/kobako/payload.rbs
@@ -124,10 +140,12 @@ files:
 - sig/kobako/runtime.rbs
 - sig/kobako/sandbox.rbs
 - sig/kobako/sandbox_options.rbs
+- sig/kobako/snapshot.rbs
 - sig/kobako/snippet.rbs
-- sig/kobako/snippet/binary.rbs
+- sig/kobako/snippet/bytecode.rbs
 - sig/kobako/snippet/source.rbs
 - sig/kobako/transport.rbs
+- sig/kobako/transport/block_failure.rbs
 - sig/kobako/transport/call.rbs
 - sig/kobako/transport/dispatcher.rbs
 - sig/kobako/transport/error.rbs

data/sig/kobako/snippet/binary.rbs

@@ -1,12 +0,0 @@
-module Kobako
-  module Snippet
-    class Binary < Data
-      KIND: Symbol
-
-      attr_reader body: String
-
-      def self.new: (body: String) -> Binary
-                  | (String body) -> Binary
-    end
-  end
-end