microsandbox-rb 0.11.0 → 0.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 05d5b2e1200b6aff7dc7801259558a202064a01cac529ea55f2390790b7f84bb
-  data.tar.gz: d4d357393a51e2b642dd9d6fc6e899a6a92a3895bf98495a01714fbdbb76c0ed
+  metadata.gz: 7f062583f2c7fd83962ad03246dfbf6ad8c86be39756f75cf61c7c4a5e96d09e
+  data.tar.gz: 23cc401545bb10273d470af66f182f06e9c0be6956ccace5dc6d2b43de93c92d
 SHA512:
-  metadata.gz: 994d487f8a606de2664566519ba28964fcc1053e9277b768945472dfac105d34a48479b1677d8598fde596b4d5c9f37a31970d2cf3e3a2065f98a12fdfe85322
-  data.tar.gz: c0d57191ef9fc97845c773216dd19194dbad4dd0c58f3525989d16df0c37088749fe880ccd89b53d71f9f9454c149429886de208b36cda2de4210f23b4bc05f8
+  metadata.gz: b95c8b95460e7fdf03d95241e4e8d3c028a9656e00aeaefa7df28f387c7caaddecc767fae14bb82871d55074f7b24b841d739497cfbd430559c4cf9e8427214c
+  data.tar.gz: f780f6378522e1296eae3914687f7b77e534068f7c30b194f56603234920fff951dde5fade2201e5b94dd04ca3dc9a356f287c51339c694477aa6ff56ca90dfc

data/CHANGELOG.md

@@ -6,6 +6,132 @@ All notable changes to this gem are documented here. The format is based on
 microsandbox runtime it embeds; each release notes the upstream runtime tag it
 wraps, and the README's Versioning section keeps the full gem→runtime map.
 
+## [0.13.0] - 2026-08-18
+
+Adopts upstream runtime **`v0.6.8` → `v0.6.9`**.
+
+### Breaking
+
+- **A bare `MSB_API_KEY` no longer selects the cloud backend** (upstream
+  backend-selection hardening: "a bare API key is credential material, not
+  backend intent"). Cloud intent must now be explicit: set `MSB_BACKEND=cloud`
+  (with a non-empty `MSB_API_KEY`), select a cloud profile, or call
+  `Microsandbox.set_default_backend(:cloud, ...)`. Code that relied on
+  exporting only `MSB_API_KEY` now silently runs on the **local** backend —
+  audit deployment environments when upgrading.
+- **Invalid cloud configuration fails closed** instead of silently falling
+  back to local execution: `MSB_BACKEND=cloud` without a usable API key or
+  cloud profile raises {Microsandbox::InvalidConfigError} at first use rather
+  than dispatching sandboxes locally.
+- **Snapshot payload integrity is opt-in** (upstream #1346). New snapshots no
+  longer record a content digest unless created with
+  `record_integrity: true` (previously documented as a no-op because schema-1
+  always recorded integrity — that default reversed upstream, as hashing
+  large allocated uppers is expensive). {Microsandbox::Snapshot.verify} on a
+  snapshot without recorded integrity now reports
+  `SnapshotVerifyReport#status == :not_recorded` (with `#algorithm` /
+  `#content_digest` nil, `#verified?` false) instead of always `:verified`.
+
+### Added
+
+`v0.6.9` SDK parity (matching the official Python binding surface):
+
+- **Default-workload execution** — `Sandbox.create` is strictly boot-only, so
+  the image's resolved OCI `ENTRYPOINT`+`CMD` now runs via
+  {Microsandbox::Sandbox#exec_default} (buffered),
+  {Microsandbox::Sandbox#exec_default_stream} (streaming), and
+  {Microsandbox::Sandbox#attach_default} (interactive). New
+  {Microsandbox::NoDefaultCommandError} when the image resolves no executable
+  command. New `cmd:` create keyword overrides the durable image CMD (an
+  explicit `[]` clears it) without executing anything at create time.
+- **Flat OCI root disks** — `RootDisk.flat(size_mib, fstype:, clone:)` boots
+  from a single complete ext4 root disk materialized from the OCI image
+  (skips the overlay stack; content-addressed and cached; `clone:` picks
+  `:auto`/`:copy`/`:reflink` private-disk cloning).
+- **Root-disk resizing** — `modify(root_disk_size:)` grows the managed upper
+  or flat root disk (MiB).
+- **Per-sandbox network rate limits** — `rate_limiter:` create keyword with
+  per-direction (`egress:`/`ingress:`) `bandwidth:`/`ops:` token buckets
+  (`size:`, `refill_time_ms:`, `one_time_burst:`).
+- **Host vsock routes** — `vsock:` create keyword exposes host Unix sockets
+  on guest-to-host vsock ports: `{ "/host/api.sock" => 5000 }` or an Array of
+  `{host_socket:, port:, socket_type: :stream|:dgram}`.
+- **Active backend context** — {Microsandbox.default_backend_info} returns a
+  secret-safe {Microsandbox::BackendInfo} (`kind`, `api_url`, `source`,
+  `profile`; never the API key).
+- **Default volume** — {Microsandbox::Volume.get_default} (cloud backend;
+  local raises {Microsandbox::UnsupportedError}) and
+  `VolumeInfo#default?`. The full `VolumeInfo#fs` surface works against cloud
+  default and managed directory volumes as of `v0.6.9`.
+
+Not exposed, matching the official Python binding at `v0.6.9`:
+`DeploymentProfile`/CPU-placement/THP create options (upstream wires them via
+`config.json`/CLI only so far) and the Rust-only sparse
+`SandboxConfigPatch`/`builder.configure` surface.
+
+### Fixed
+
+- `entrypoint: []` now clears the image's `ENTRYPOINT` (blocking the
+  image-config merge), matching the upstream builder contract and the Python
+  binding. Previously the empty array was silently dropped in the native
+  layer, so the image ENTRYPOINT survived — observable under the new
+  `exec_default`/`attach_default`, which would have run the wrong command.
+  `nil` (the default) still inherits the image value.
+
+### Runtime
+
+- Upstream `v0.6.9` runtime changes carried without further Ruby surface
+  change: NUMA-aware placement profiles, degraded placement under pressure,
+  integrated host performance stack (topology-aware CPU placement, THP
+  policy, bounded block writeback), long-link-target preservation in saved
+  image archives, nested OCI image index loads, backpressured published-port
+  data preservation, DNS network-rule parsing in release builds, and
+  child-process reaping in `agentd`.
+
+## [0.12.0] - 2026-07-30
+
+Adopts upstream runtime **`v0.6.7` → `v0.6.8`** and mirrors its breaking SDK
+surface (upstream #1232 "unify cloud backend and paginated listings"), keeping
+parity with the Python/Node SDKs.
+
+### Breaking
+
+- **Sandbox listing is cursor-paginated** (upstream #1232). `Sandbox.list` and
+  `Sandbox.list_with` now return a {Microsandbox::SandboxPage} — an Enumerable
+  page of `SandboxHandle`s carrying `#next_cursor` — instead of a plain Array.
+  `Sandbox.list` fetches the first page (upstream default size 20);
+  `Sandbox.list_with` gains `limit:` (1..100) and `cursor:` keywords alongside
+  the existing `labels:` filter. Code that only enumerates
+  (`list.each`/`map`/`to_a`) keeps working; code relying on the return value
+  *being* an Array (e.g. `list + other`, `Array ===`) must adapt, and listings
+  of more than one page must follow `page.next_cursor` via
+  `list_with(cursor:)`.
+- **`UnsupportedError` messages are re-keyed by structured operations**
+  (upstream #1232): the core now reports the rejected API and a remedial hint
+  (e.g. `image.list is not supported by this backend: use a local backend`)
+  instead of the old free-text `feature`/`available_when` pair. The exception
+  additionally exposes the new structured attributes below.
+
+### Added
+
+- {Microsandbox::SandboxPage} — Enumerable over its `#sandboxes`, plus
+  `#next_cursor`, `#size`/`#length`, `#empty?` and `#last_page?`.
+- `Sandbox.list_with(labels:, limit:, cursor:)` pagination keywords.
+- `UnsupportedError#operation` / `#hint` — the rejected API in Ruby rendering
+  (`"sandbox.kill"`) and the remedial hint (`"use a local backend"`),
+  mirroring the Python SDK's enriched `UnsupportedError`.
+
+### Changed
+
+- Direct `VolumeFs` operations now route through the backend's volume trait
+  (upstream #1232) instead of a construction-time local-backend guard, so an
+  unsupported backend rejects each operation with a precise per-operation
+  error.
+- The embedded runtime is `v0.6.8`; see the upstream release notes for
+  runtime-side changes (shared log registry for followed streams, cloud
+  sandbox reconnect fixes for `exec`/`ssh`, kernel sourced from
+  cdn.kernel.org).
+
 ## [0.11.0] - 2026-07-27
 
 Adopts upstream runtime **`v0.6.6` → `v0.6.7`** and mirrors its breaking SDK