microsandbox-rb 0.10.0 → 0.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d4f3171c79d1e74d8a86a8ace5b5b53a61e1bbbbf32b0e20f3c0bb183b5c9014
-  data.tar.gz: 56de5a8367c3a42ea28684410aa902336d9d965f6eac0fd581de699511b9cfe2
+  metadata.gz: 05d5b2e1200b6aff7dc7801259558a202064a01cac529ea55f2390790b7f84bb
+  data.tar.gz: d4d357393a51e2b642dd9d6fc6e899a6a92a3895bf98495a01714fbdbb76c0ed
 SHA512:
-  metadata.gz: 6db8b2a9bc3b4a1160893351efa894d5beb59ec878c9a103fb9317a32b3c879c9b6e0bebbd75ea157e75c1702b013672c78d1a0c65d925c4e210aa4e0d018f64
-  data.tar.gz: bc09f708ec77732a5fe91c96fd46cf369fd98dd0752ad380fcba821d34bb80779151886fa7c728e74d70684af1fe4bc76c53abc2ca45c0b22e9e5e5da600001e
+  metadata.gz: 994d487f8a606de2664566519ba28964fcc1053e9277b768945472dfac105d34a48479b1677d8598fde596b4d5c9f37a31970d2cf3e3a2065f98a12fdfe85322
+  data.tar.gz: c0d57191ef9fc97845c773216dd19194dbad4dd0c58f3525989d16df0c37088749fe880ccd89b53d71f9f9454c149429886de208b36cda2de4210f23b4bc05f8

data/CHANGELOG.md

@@ -6,6 +6,101 @@ All notable changes to this gem are documented here. The format is based on
 microsandbox runtime it embeds; each release notes the upstream runtime tag it
 wraps, and the README's Versioning section keeps the full gem→runtime map.
 
+## [0.11.0] - 2026-07-27
+
+Adopts upstream runtime **`v0.6.6` → `v0.6.7`** and mirrors its breaking SDK
+surface, keeping parity with the Python/Node SDKs (which ship the same renames
+without compatibility aliases). The bundled runtime also carries the fix for
+**GHSA-4vq3-cjpp-v7fg** (`msb copy` symlink traversal: a sandboxed workload
+could make a later CLI copy-out overwrite an arbitrary host file — the SDK
+`fs`/`copy_to_host` paths were not affected).
+
+### Breaking
+
+- **Network presets `public_only`/`non_local` are removed** (upstream #1198),
+  replaced by composable **profiles** `:public` / `:private` / `:host`:
+  `network: [:public, :private]`, single-profile sugar `network: :public`, or
+  `NetworkPolicy.from_profiles(:public, :host)`. Any non-empty profile set
+  automatically allows gateway DNS. The replacements are rule-for-rule
+  equivalent (`public_only` ≡ `[:public]`, which is still the default policy;
+  `non_local` ≡ `[:public, :private]`); the removed spellings (and
+  `NetworkPolicy.public_only`/`.non_local`) now raise an `ArgumentError` with
+  that migration guidance. `network: :none`/`:allow_all` (and their aliases)
+  and `network: :default` keep working unchanged. In the Hash form,
+  `profiles:` composes with `rules:`/`default_egress:`/`default_ingress:`/deny
+  lists; explicit `rules:` are evaluated **before** the profile expansion
+  (matching the upstream CLI), so a narrower override such as
+  `Rule.deny_dns` wins over a profile's allows under first-match-wins.
+- **`Snapshot.create` is re-keyed by the snapshot's own name** (upstream
+  #1118): `Snapshot.create(name, from_sandbox:, dest_dir:, labels:, force:,
+  record_integrity:, resumable:)` — the positional argument is now the
+  snapshot name (was: the source sandbox), `from_sandbox:` is required, and
+  `path:` is replaced by `dest_dir:`, a **parent directory** (the artifact
+  always lands at `dest_dir/<name>`). `record_integrity:` is now a no-op
+  (schema-1 descriptors always record integrity); `resumable:` is accepted and
+  raises `UnsupportedError` until VM pause/resume lands upstream.
+- **`Snapshot.export`/`Snapshot.import` are renamed `Snapshot.save`/
+  `Snapshot.load`** (same parameters), matching the Python/Node rename.
+- **`SandboxHandle#snapshot_to` is removed** (deleted upstream). Use
+  `Snapshot.create(name, from_sandbox: handle_name, dest_dir: dir)` for
+  explicit placement.
+- **`SnapshotVerifyReport#not_recorded?` is removed** and `#status` is always
+  `:verified`: integrity is now mandatory at snapshot-create time, so the
+  "not recorded" outcome no longer exists (a mismatch raises
+  `SnapshotIntegrityError` as before).
+- **`SnapshotInfo#size_bytes`/`#format`/`#fstype` are now nilable** — nil for
+  the new checkpoint-state snapshots (file-state snapshots, the only kind
+  producible today, still populate all three).
+
+### Added
+
+- **Structured root disk** (upstream #1165) — `Sandbox.create(root_disk:)`
+  configures the OCI sandbox's writable layer: an Integer (managed ext4 upper
+  size cap in MiB, the old `oci_upper_size:` meaning), or a `RootDisk` factory
+  Hash: `RootDisk.managed(8192)`, `RootDisk.tmpfs(2048)` (RAM-backed, pristine
+  rootfs on every boot; size ≤ sandbox memory; not snapshot/patchable), or
+  `RootDisk.disk("./scratch.img", format:, fstype:)` (user-supplied image
+  attached writable; never created/resized/deleted by the runtime).
+  `oci_upper_size:` remains as a deprecated alias (warns; conflicts with
+  `root_disk:`).
+- **`Image.load` / `Image.save`** (upstream #1151/#1174) — move OCI images in
+  and out of the local cache as `docker save`-style or OCI Image Layout
+  archives: `Image.load("./app.tar", tag: "app:dev")` (pass `"-"` to read
+  stdin; returns the loaded `ImageInfo`s) and
+  `Image.save("alpine:latest", output_path: "./alpine.tar", format: :docker)`.
+- **`Rule.allow_dns` / `Rule.deny_dns`** — the gateway-DNS rule pair the
+  profiles expand to (egress → group `:host`, udp+tcp, port 53), for use in
+  custom policies (`deny_dns` upstream #1198).
+- **Snapshot descriptor metadata** on `SnapshotInfo`: `#scope` (`:disk` /
+  `:resumable`), `#state_kind` (`"file"`/`"checkpoint"`), `#checkpoint_id`,
+  `#checkpoint_manifest_digest`, and the index columns `#locality`,
+  `#availability`, `#migration_state`, `#migration_error_code`.
+- **`SnapshotMigrationError`** — raised when the automatic v0.6.6→v0.6.7
+  snapshot-descriptor migration is blocked and needs repair (new core
+  `SnapshotMigration` variant, upstream #1200).
+- **`follow_root_symlinks:` volume flag** — per-mount opt-out of the runtime's
+  new default-on mount-root symlink protection (upstream #1149; bind/named
+  mounts only). The Rust SDK exposes the same switch; Python/Node defer it.
+
+### Changed
+
+- **Snapshot artifacts migrate on first use** (upstream #1200): the runtime
+  rewrites each v0.6.6 `manifest.json` descriptor to the v0.6.7
+  `snapshot.json` (keeping the old file as `.manifest.json.legacy`) at backend
+  connect, after which gems ≤ 0.10.x can no longer read those artifacts —
+  rolling back requires the upstream `msb self downgrade` tooling.
+- **Bind/named mount roots refuse symlinked roots by default** (upstream
+  #1149) — opt out per mount with `follow_root_symlinks: true`.
+- **DNS rebind protection is fail-closed for unspecified addresses** (upstream
+  #1198): `0.0.0.0`/`::` no longer classify as `public`, so a `public`-profile
+  sandbox can't be steered to them via DNS answers.
+- `ModificationPlan` change/conflict entries for the managed upper now report
+  `field: "root_disk_size"` (was `"oci_upper_size"`) — the runtime's canonical
+  field name, passed through verbatim as always.
+- Duplicate secret placeholders across secret entries are now allowed
+  (upstream #1178); snapshotting a tmpfs or disk-image root disk fails with a
+  purposeful `InvalidConfigError` (upstream #1169).
+
 ## [0.10.0] - 2026-07-09
 
 Ruby bindings for the additive `v0.6.6` SDK surface (upstream #1099 / #1128),

data/Cargo.lock

@@ -1552,24 +1552,6 @@ version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "66b7e2430c6dff6a955451e2cfc438f09cea1965a9d6f87f7e3b90decc014099"
 
-[[package]]
-name = "endian-type"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c34f04666d835ff5d62e058c3995147c06f42fe86ff053337632bca83e42702d"
-
-[[package]]
-name = "enum-as-inner"
-version = "0.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc"
-dependencies = [
- "heck 0.5.0",
- "proc-macro2",
- "quote",
- "syn",
-]
-
 [[package]]
 name = "enum_dispatch"
 version = "0.3.13"
@@ -1616,7 +1598,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -1906,11 +1888,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
  "cfg-if",
- "js-sys",
  "libc",
  "r-efi 5.3.0",
  "wasip2",
- "wasm-bindgen",
 ]
 
 [[package]]
@@ -2095,48 +2075,47 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e712f64ec3850b98572bffac52e2c6f282b29fe6c5fa6d42334b30be438d95c1"
 
 [[package]]
-name = "hickory-client"
-version = "0.26.0-alpha.1"
+name = "hickory-net"
+version = "0.26.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "25b710cd52bde69b58137785a5d2b1ec1b20980a3ca0d5f959eab8c45a72e92d"
+checksum = "e2295ed2f9c31e471e1428a8f88a3f0e1f4b27c15049592138d1eebe9c35b183"
 dependencies = [
+ "async-trait",
+ "bytes",
  "cfg-if",
  "data-encoding",
  "futures-channel",
+ "futures-io",
  "futures-util",
  "hickory-proto",
- "once_cell",
- "radix_trie",
- "rand 0.9.4",
+ "idna",
+ "ipnet",
+ "jni 0.22.4",
+ "rand 0.10.2",
+ "rustls",
  "thiserror 2.0.18",
+ "tinyvec",
  "tokio",
+ "tokio-rustls",
  "tracing",
+ "url",
 ]
 
 [[package]]
 name = "hickory-proto"
-version = "0.26.0-alpha.1"
+version = "0.26.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a62d7684f766b0f96344be88c023f9b6650039aea09d526b4974cce302eb61b1"
+checksum = "0bab31817bfb44672a252e97fe81cd0c18d1b2cf892108922f6818820df8c643"
 dependencies = [
- "async-trait",
- "bytes",
- "cfg-if",
  "data-encoding",
- "enum-as-inner",
- "futures-channel",
- "futures-io",
- "futures-util",
  "idna",
  "ipnet",
+ "jni 0.22.4",
  "once_cell",
- "rand 0.9.4",
+ "rand 0.10.2",
  "ring",
- "rustls",
  "thiserror 2.0.18",
  "tinyvec",
- "tokio",
- "tokio-rustls",
  "tracing",
  "url",
 ]
@@ -2975,8 +2954,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -3023,6 +3002,7 @@ dependencies = [
  "tokio-tungstenite",
  "tracing",
  "typed-builder",
+ "typed-path",
  "which",
  "windows-sys 0.61.2",
  "zeroize",
@@ -3030,8 +3010,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-agent-client"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "ciborium",
  "microsandbox-protocol",
@@ -3043,8 +3023,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-db"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "async-trait",
  "sea-orm",
@@ -3055,8 +3035,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-filesystem"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "libc",
  "microsandbox-utils",
@@ -3068,11 +3048,12 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-image"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "astral-tokio-tar",
  "async-compression",
+ "chrono",
  "futures",
  "hex",
  "libc",
@@ -3094,8 +3075,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-metrics"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "chrono",
  "libc",
@@ -3106,8 +3087,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-migration"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "sea-orm-migration",
  "serde_json",
@@ -3115,8 +3096,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-network"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "base64",
  "bytes",
@@ -3124,7 +3105,7 @@ dependencies = [
  "crossbeam-queue",
  "dirs",
  "futures",
- "hickory-client",
+ "hickory-net",
  "hickory-proto",
  "httlib-hpack",
  "httparse",
@@ -3159,8 +3140,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-protocol"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "chrono",
  "ciborium",
@@ -3174,8 +3155,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-runtime"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "bytes",
  "chrono",
@@ -3206,10 +3187,11 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-types"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "chrono",
+ "ipnetwork",
  "serde",
  "serde_json",
  "sha2 0.11.0",
@@ -3219,8 +3201,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-utils"
-version = "0.6.6"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.6#2367d506103f87fe733d7252c3202b278eadef88"
+version = "0.6.7"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.7#0c54fd12acf7740f68d5bcd38e58a9fe82d51a45"
 dependencies = [
  "dirs",
  "libc",
@@ -3232,7 +3214,7 @@ dependencies = [
 
 [[package]]
 name = "microsandbox_rb"
-version = "0.10.0"
+version = "0.11.0"
 dependencies = [
  "chrono",
  "futures",
@@ -3491,15 +3473,6 @@ dependencies = [
  "zstd",
 ]
 
-[[package]]
-name = "nibble_vec"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77a5d83df9f36fe23f0c3648c6bbb8b0298bb5f1939c8f2704431371f4b84d43"
-dependencies = [
- "smallvec",
-]
-
 [[package]]
 name = "nix"
 version = "0.29.0"
@@ -4248,15 +4221,16 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.14"
+version = "0.11.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+checksum = "2f4bfc015262b9df63c8845072ce59068853ff5872180c2ce2f13038b970e560"
 dependencies = [
  "aws-lc-rs",
  "bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
  "lru-slab",
- "rand 0.9.4",
+ "rand 0.10.2",
+ "rand_pcg",
  "ring",
  "rustc-hash",
  "rustls",
@@ -4303,16 +4277,6 @@ version = "6.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
-[[package]]
-name = "radix_trie"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c069c179fcdc6a2fe24d8d18305cf085fdbd4f922c041943e203685d6a1c58fd"
-dependencies = [
- "endian-type",
- "nibble_vec",
-]
-
 [[package]]
 name = "rand"
 version = "0.8.6"
@@ -4389,6 +4353,15 @@ version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
 
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "rb-sys"
 version = "0.9.128"
@@ -4766,7 +4739,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -4834,7 +4807,7 @@ dependencies = [
  "security-framework 3.7.0",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -4855,7 +4828,7 @@ dependencies = [
  "security-framework 3.7.0",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -5385,9 +5358,9 @@ checksum = "703d5c7ef118737c72f1af64ad2f6f8c5e1921f818cdcb97b8fe6fc69bf66214"
 
 [[package]]
 name = "simd_cesu8"
-version = "1.1.1"
+version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94f90157bb87cddf702797c5dadfa0be7d266cdf49e22da2fcaa32eff75b2c33"
+checksum = "11031e251abf8611c80f460e19dbdeb54a66db918e49c65a7065b46ac7aec520"
 dependencies = [
  "rustc_version",
  "simdutf8",
@@ -5875,7 +5848,7 @@ dependencies = [
  "getrandom 0.4.2",
  "once_cell",
  "rustix",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -6221,6 +6194,12 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "typed-path"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e28f89b80c87b8fb0cf04ab448d5dd0dd0ade2f8891bae878de66a75a28600e"
+
 [[package]]
 name = "typenum"
 version = "1.20.1"

data/README.md

@@ -39,7 +39,7 @@ them. Our deepest thanks to the maintainers and community. 🙏
 - **Guest filesystem access** — read, write, list, copy, stat files inside a running sandbox
 - **Metrics & logs** — CPU, memory, disk and network I/O; captured stdout/stderr/system logs
 - **Rootfs patches** — inject files, dirs, and symlinks into the image before boot (`Microsandbox::Patch`)
-- **Fine-grained networking** — policy presets *and* custom CIDR/domain/group allow-deny rules (`Microsandbox::NetworkPolicy`)
+- **Fine-grained networking** — composable profiles (`:public`/`:private`/`:host`) *and* custom CIDR/domain/group allow-deny rules (`Microsandbox::NetworkPolicy`)
 - **SSH & SFTP** — native in-process SSH client/server and file transfer (`Sandbox#ssh`)
 - **Raw agent client** — byte-level access to the guest `agentd` protocol (`Microsandbox::AgentClient`)
 - **Idiomatic Ruby** — keyword arguments, block-scoped lifecycle, a typed error hierarchy
@@ -160,7 +160,7 @@ Microsandbox::Sandbox.create(
   workdir:  "/app",
   labels:   { "team" => "research" },
   ports:    { 8080 => 80 },            # host => guest (TCP)
-  network:  "public_only",             # or "none" for airgapped
+  network:  [:public],                 # composable profiles; :none for airgapped
   replace:  true                       # replace an existing sandbox of the same name
 ) do |sb|
   # ...
@@ -442,8 +442,8 @@ change diverged the two numbers — the gem version is **not** a reliable indica
 of the embedded runtime version. To learn which runtime a build wraps, ask it:
 
 ```ruby
-Microsandbox::VERSION          # => "0.10.0"  (the gem's own version)
-Microsandbox.runtime_version   # => "v0.6.6"  (the embedded upstream runtime tag)
+Microsandbox::VERSION          # => "0.11.0"  (the gem's own version)
+Microsandbox.runtime_version   # => "v0.6.7"  (the embedded upstream runtime tag)
 ```
 
 | Gem version | Upstream runtime | Notes |
@@ -464,6 +464,7 @@ Microsandbox.runtime_version   # => "v0.6.6"  (the embedded upstream runtime tag
 | `0.9.2`  | `v0.6.3` | adopts upstream `v0.6.3` (v4-only sandboxes stop advertising AAAA DNS answers — fixes guest gRPC/c-ares preferring unreachable IPv6; scoped upstream TLS verification); glue moves to `*_local` SDK variants — no Ruby surface change |
 | `0.9.3`  | `v0.6.6` | adopts upstream `v0.6.4`+`v0.6.6` (`v0.6.5` was yanked upstream): snapshot restore by pinned digest — fixes fatal restore-after-tag-republish bug, fragmented-UDP/PMTU relay fixes, exec kills the whole process group, ephemeral stop-wait tolerance, readdir RSS-leak fix; upstream API growth is additive-only — no Ruby surface change |
 | `0.10.0` | `v0.6.6` | `v0.6.6` API parity: live `modify`/resize, `ping`/`touch`, create `max_cpus`/`max_memory` |
+| `0.11.0` | `v0.6.7` | adopts upstream `v0.6.7` (**breaking**): network profiles replace `public_only`/`non_local`, structured `root_disk:` replaces `oci_upper_size:` (deprecated alias kept), snapshot descriptor contract (`create` re-keyed by name, `save`/`load` rename, `snapshot_to` removed, on-disk auto-migration), `Image.load`/`Image.save`, `follow_root_symlinks:`; runtime carries the GHSA-4vq3-cjpp-v7fg `msb copy` fix |
 
 **Going forward** — the gem version moves on its own semver track and no longer
 mirrors the upstream tag:
@@ -542,7 +543,7 @@ section. The binding covers the official-SDK surface: sandbox
 lifecycle (the live `Sandbox` `stop`/`stop_and_wait`/`kill`/`drain`/`wait`/
 `status`/`detach`/`owns_lifecycle?`, plus the `SandboxHandle` controls
 `stop_with_timeout`/`request_stop`/`request_kill`/`request_drain`/
-`wait_until_stopped`/`config`/`config_json`/`snapshot`/`snapshot_to` from
+`wait_until_stopped`/`config`/`config_json`/`snapshot` from
 `Sandbox.get`, and label-filtered `list_with`),
 backend routing (`set_default_backend`/`with_backend`/`default_backend_kind`),
 `exec`/`shell` (collected and streaming), interactive `attach`/
@@ -550,10 +551,12 @@ backend routing (`set_default_backend`/`with_backend`/`default_backend_kind`),
 `write_stream`), metrics (per-sandbox, `Microsandbox.all_sandbox_metrics`, and
 streaming `metrics_stream`/`log_stream`), logs, OCI image-cache management,
 named volumes (incl. host-side `Volume.fs`/`VolumeInfo#fs` read/write),
-snapshots (create/open/list/list_dir/reindex/verify/export/import +
-boot-from-snapshot), streaming image-pull progress
-(`Sandbox.create_with_progress` → `PullSession`), **rootfs patches**
-(`Microsandbox::Patch`), **network configuration** (presets, custom per-rule
+snapshots (create/open/list/list_dir/reindex/verify/save/load +
+boot-from-snapshot), image archives (`Image.load`/`Image.save`), streaming
+image-pull progress (`Sandbox.create_with_progress` → `PullSession`),
+**rootfs patches** (`Microsandbox::Patch`), the structured **root disk**
+(`root_disk:` managed/tmpfs/disk via `Microsandbox::RootDisk`), **network
+configuration** (composable profiles, custom per-rule
 `Microsandbox::NetworkPolicy`/`Rule`/`Destination`, plus DNS, TLS interception,
 IPv4/IPv6 pools, `max_connections`, `trust_host_cas`), **secrets** (multi-host /
 wildcard allow-lists, injection toggles, per-secret + sandbox-level violation

data/ext/microsandbox/Cargo.toml

@@ -6,8 +6,8 @@ name = "microsandbox_rb"
 description = "Ruby SDK native extension for microsandbox — secure, fast microVM-based sandboxing."
 # Must equal Microsandbox::VERSION (lib/microsandbox/version.rb) — Native.version
 # returns this via env!("CARGO_PKG_VERSION") and version_spec.rb asserts equality.
-# The core-crate dependency below stays pinned at its own tag (v0.6.6).
-version = "0.10.0"
+# The core-crate dependency below stays pinned at its own tag (v0.6.7).
+version = "0.11.0"
 authors = ["Super Rad Company <development@superrad.company>"]
 repository = "https://github.com/superradcompany/microsandbox"
 license = "Apache-2.0"
@@ -35,8 +35,8 @@ rb-sys = "0.9"
 # `.cargo/config.toml.example`). "ssh" matches the feature set the Python/Node
 # SDKs ship with; default features add "prebuilt" (provisions msb + libkrunfw at
 # build time), "net", and "keyring".
-microsandbox = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.6", default-features = true, features = ["ssh"] }
-microsandbox-network = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.6" }
+microsandbox = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.7", default-features = true, features = ["ssh"] }
+microsandbox-network = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.7" }
 
 # Async core bridged to Ruby's synchronous API via a blocking tokio runtime.
 tokio = { version = "1", features = ["rt-multi-thread", "sync", "time"] }

data/ext/microsandbox/src/error.rs

@@ -51,6 +51,10 @@ fn class_name(err: &MicrosandboxError) -> &'static str {
         SnapshotSandboxRunning(_) => "SnapshotSandboxRunningError",
         SnapshotImageMissing(_) => "SnapshotImageMissingError",
         SnapshotIntegrity(_) => "SnapshotIntegrityError",
+        // v0.6.7 (#1200): the automatic v0.6.6→v0.6.7 snapshot-descriptor
+        // migration (run at backend connect / artifact open) failed and needs
+        // repair. Mirrors the Python `SnapshotMigrationError`.
+        SnapshotMigration { .. } => "SnapshotMigrationError",
         // Give the already-defined-but-orphaned `NetworkPolicyError` a mapping:
         // a builder parse/validation error from `network(|n| ...)`. The gem
         // unconditionally enables the core's `net` feature (default-features),