kobako 0.22.0-x86_64-linux → 0.23.0-x86_64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fe04493f245a97166f792333938481225173e08ff78ab6d97b38c596af109e61
-  data.tar.gz: 8376c2336d0dc54bb745fd2ed58123e271a0c202a0be7a70a887dd5705d145a2
+  metadata.gz: 94da2efec86a9d423b8c780ea1a7706d6fc450530cf9af5832a6daf18305197f
+  data.tar.gz: 7f9d73c9c78ecdf000893293e676b5919f8ba9f1d452f45e57745bcd493306ca
 SHA512:
-  metadata.gz: 6f1ab4b50feb22e8d8ee1d76619c52086f404e2731007cfabe5305af13ec5b92db1942d72a09ad77d1192af238510941efecd4fb45e202ab269e4b65d50d69f5
-  data.tar.gz: a845d8ed5f0a4431d1f82e38ed51d0dc98e98d0ee00b509825918692dffdc7a02f6b33595649fd2d09952c18c41ed78e85e808bb1e94e561adadf6adee1cefce
+  metadata.gz: db2f8c214168b90111e2f182df46b2deca7aa9c9b6a6f16c1046fa2483b0870273abfb77ab67b0e30501f7fc6641718e3adc04966ce2ec829818b2578441349a
+  data.tar.gz: ba83de8d69ff3836ec2b2381df252d30390c47064c8b03e0ea58a24ef30d296d47e32d1c176cd686fc5c774b1330f16a1576e04684b5ca93e014e826da35f9dc

data/.release-please-manifest.json

@@ -1 +1 @@
-{".":"0.22.0","wasm/kobako-core":"0.14.0","wasm/kobako-mruby":"0.14.0","wasm/kobako-io":"0.14.0","wasm/kobako-json":"0.14.0","wasm/kobako-regexp":"0.14.0","wasm/kobako-baker":"0.14.0","crates/kobako-transport":"0.14.0","crates/kobako-codec":"0.14.0","crates/kobako-runtime":"0.14.0","crates/kobako-wasmtime":"0.14.0","crates/kobako":"0.14.0"}
+{".":"0.23.0","wasm/kobako-core":"0.14.0","wasm/kobako-mruby":"0.14.0","wasm/kobako-io":"0.14.0","wasm/kobako-json":"0.14.0","wasm/kobako-regexp":"0.14.0","wasm/kobako-baker":"0.14.0","crates/kobako-transport":"0.14.0","crates/kobako-codec":"0.14.0","crates/kobako-runtime":"0.14.0","crates/kobako-wasmtime":"0.14.0","crates/kobako":"0.14.0"}

data/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [0.23.0](https://github.com/elct9620/kobako/compare/v0.22.0...v0.23.0) (2026-08-28)
+
+
+### Features
+
+* **spec:** declare the boot state two invocations share, and what a callback raise costs ([d94fffc](https://github.com/elct9620/kobako/commit/d94fffc59a3142cb28e0025a0dc8c792f7282074))
+* **spec:** declare the dispatch boundary one observation at a time ([f11b280](https://github.com/elct9620/kobako/commit/f11b280ef503c20d5b75d7b1c4187d261f60ef27))
+* **spec:** declare the guest's pattern surface one observation at a time ([a477818](https://github.com/elct9620/kobako/commit/a477818f8fa505fdcd8ea1fd1051a74c0ba08155))
+* **spec:** declare the Pool's behavior where its tests can claim it ([5ec5e4b](https://github.com/elct9620/kobako/commit/5ec5e4b41f44db05520a251ff6979e71efd27866))
+* **spec:** declare the two descriptors a guest may write to, and how ([c15d09a](https://github.com/elct9620/kobako/commit/c15d09ab563947ab02bbe31129e88686fcff5c24))
+* **spec:** declare the value shapes and the generated concurrency programs ([a06ae5b](https://github.com/elct9620/kobako/commit/a06ae5b24b4615c22c2abaae08c7029218da08bd))
+* **spec:** declare what a Sandbox is built with and what each run leaves behind ([8cc6ac8](https://github.com/elct9620/kobako/commit/8cc6ac81713da7fc6ba6c89bc24da75406579aec))
+* **spec:** declare what installing an Extension composes and resolves ([3cce5a6](https://github.com/elct9620/kobako/commit/3cce5a6551ae8710df71d7520a689c13630ee111))
+* **spec:** declare what the guest's JSON surface reads, writes and refuses ([7e9e3b3](https://github.com/elct9620/kobako/commit/7e9e3b3897ae5f5dc7d6caadeb650302841aa0a6))
+* **spec:** declare what the host checks before a guest runs ([28d5d4b](https://github.com/elct9620/kobako/commit/28d5d4bac0efba2aced1b4449926bd868787bd75))
+* **spec:** declare where a host object becomes a name the guest can reach ([5d88647](https://github.com/elct9620/kobako/commit/5d88647aa922e3a7bb6915864aec700423060358))
+
+
+### Bug Fixes
+
+* **gate:** keep the rendered specifications out of the anchor corpus ([1a24c7f](https://github.com/elct9620/kobako/commit/1a24c7ff1367228998b2f21beca885ab7096a893))
+* **gate:** stop reading a sumi claim as an anchor citation ([b3c74d6](https://github.com/elct9620/kobako/commit/b3c74d6a296dfb7fa5e157ca9ba4678097bfab43))
+* **spec:** let the dispatch feature reach the test that witnesses it ([430394f](https://github.com/elct9620/kobako/commit/430394fa906bf79b8d86d28de7b03e32748516a1))
+* **transport:** keep a bound Class's class-level surface off the guest boundary ([dc00355](https://github.com/elct9620/kobako/commit/dc0035524f2a7b3eba3ec378f8f065c19a17660d))
+
 ## [0.22.0](https://github.com/elct9620/kobako/compare/v0.21.1...v0.22.0) (2026-08-06)
 
 

data/lib/kobako/catalog/handles.rb

@@ -73,15 +73,18 @@ module Kobako
 
       private
 
-      # Refuse to mint a Capability Handle for a reflective gadget:
-      # a +Binding+ / +Method+ / +UnboundMethod+ would hand the guest a
-      # callable proxy onto host reflection (a returned +Binding+ reaches
-      # +Binding#eval+). Raising here keeps the rule at the single mint
-      # point, so it holds on both the Service-return and the +#run+
-      # host→guest auto-wrap paths.
+      # Refuse to mint a Capability Handle for an object whose reachable
+      # surface is not Service behaviour: a +Binding+ / +Method+ /
+      # +UnboundMethod+ hands the guest a callable proxy onto host
+      # reflection (a returned +Binding+ reaches +Binding#eval+); a +Class+
+      # or +Module+ hands over its class-level API (+File.popen+ / +read+,
+      # +Kernel.system+), which the owner-based dispatch floor cannot see
+      # because a singleton-class owner matches no core-module list. Raising
+      # here keeps the rule at the single mint point, so it holds on both the
+      # Service-return and the +#run+ host→guest auto-wrap paths.
       def reject_unwrappable!(object)
         case object
-        when Binding, Method, UnboundMethod
+        when Binding, Method, UnboundMethod, Module
           raise SandboxError, "a #{object.class} cannot cross as a Capability Handle"
         end
       end

data/lib/kobako/transport/reflection.rb

@@ -47,17 +47,18 @@ module Kobako
       end
 
       # Guard against ambient reflection methods. A public method whose
-      # owner is a META_OWNERS or GADGET_OWNERS module is rejected, except
-      # CALLABLE_ALLOW on a gadget target (a bound lambda stays invocable).
-      # A name with no concrete public method is allowed only when the
-      # target opts into it via +respond_to?+ (dynamic +method_missing+
-      # Services), since the dangerous methods are all concretely defined
-      # and therefore never reach that branch.
+      # owner is a META_OWNERS or GADGET_OWNERS module — or a singleton
+      # class, the owner of every class-level method (+File.popen+ /
+      # +Kernel.system+, unreachable via any fixed core-module list) — is
+      # rejected, except CALLABLE_ALLOW on a gadget target (a bound lambda
+      # stays invocable). A name with no concrete public method is allowed
+      # only when the target opts into it via +respond_to?+ (dynamic
+      # +method_missing+ Services), since the dangerous methods are all
+      # concretely defined and therefore never reach that branch.
       def ambient_refusal(target, name)
         owner = target.public_method(name).owner
-        gadget = GADGET_OWNERS.include?(owner)
-        return nil unless META_OWNERS.include?(owner) || gadget
-        return nil if gadget && CALLABLE_ALLOW.include?(name)
+        return nil unless ambient_owner?(owner, target)
+        return nil if GADGET_OWNERS.include?(owner) && CALLABLE_ALLOW.include?(name)
 
         "method #{name.inspect} is not a Service method"
       rescue NameError
@@ -66,6 +67,19 @@ module Kobako
         "no public method #{name.inspect} on target"
       end
 
+      # Whether +name+'s +owner+ is ambient surface rather than Service
+      # behaviour: a core meta module, a callable gadget type, or — when
+      # +target+ is itself a Class or Module bound as a Service — the
+      # singleton class that owns its class-level API (+File.popen+ /
+      # +Kernel.system+, unreachable via any fixed core-module list). A plain
+      # object's own singleton method (+def obj.x+) stays reachable, since
+      # +target+ is not a Module there.
+      def ambient_owner?(owner, target)
+        META_OWNERS.include?(owner) ||
+          GADGET_OWNERS.include?(owner) ||
+          (target.is_a?(Module) && owner.singleton_class?)
+      end
+
       # Consult the target's opt-in narrowing predicate. A bound object may
       # define a private +respond_to_guest?(name)+ to restrict which of its
       # methods the guest reaches; a falsy answer refuses the dispatch. It

data/lib/kobako/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Kobako
-  VERSION = "0.22.0"
+  VERSION = "0.23.0"
 end

data/sig/kobako/transport/reflection.rbs

@@ -9,6 +9,8 @@ module Kobako
 
       def self?.ambient_refusal: (untyped target, Symbol name) -> String?
 
+      def self?.ambient_owner?: (Module owner, untyped target) -> bool
+
       def self?.narrowing_refusal: (untyped target, Symbol name) -> String?
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.22.0
+  version: 0.23.0
 platform: x86_64-linux
 authors:
 - Aotokitsuruya
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-08-06 00:00:00.000000000 Z
+date: 2026-08-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: msgpack