Skip to content

Release history

microsandbox releases

secure, local, cross-platform and programmable sandboxes for AI agents

All releases

28 shown

No immediate action
v0.5.4 Mixed

metrics sidecar + runtime fixes

No immediate action
v0.5.3 Mixed

Sandbox limit + CLI commands + Network flush

No immediate action
v0.5.2 Mixed

Runtime + SDK fixes + lockfile

No immediate action
v0.5.1 Mixed

SSH feature + docs + agentd

Review required
v0.5.0 Breaking risk
Auth RBAC Crypto / TLS

SDK updates, networking, SSH, CLI, metrics

Review required
v0.4.6 Bug fix
Auth

SIGKILL + stdin fixes

v0.4.5 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • fix(release): add version to microsandbox-utils build-dep by @appcypher in https://github.com/superradcompany/microsandbox/pull/662
  • Optimize Image persistance queries by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/665
  • Metrics Sampling Interval by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/654
  • feat(utils): MSB_HOME env override for isolated state by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/669
  • refactor(db): typed read/write pools with retry-on-busy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/666
  • fix(network): gate address families on host route availability by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/671
  • docs(sdk): align rust and typescript networking references by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/670
  • fix(agent): bound relay handshake reads and prefer boot-error.json on timeout by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/673
  • chore(release): bump version to 0.4.5 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/672
  • chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/677
  • docs(recipes): add systemd services recipe by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/674
  • ci: add Check/Test Summary aggregator jobs for required-checks gating by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/679
  • docs(sdk): document PatchBuilder / Patch in each sdk reference by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/678

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.4...v0.4.5

v0.4.4 Bug fix
Notable features
  • exec.log capture, boot-error.json, typed ExecFailed for logs
  • file‑first disk snapshots across CLI, Rust, TS, Python
  • agentd hands off PID 1 to a guest init binary
Full changelog

What's Changed

  • chore: refresh npm lockfile after v0.4.3 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/649
  • fix(net): --no-net actually air-gaps the guest by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/647
  • feat(logs): exec.log capture, boot-error.json, typed ExecFailed by @appcypher in https://github.com/superradcompany/microsandbox/pull/650
  • feat(snapshot): file-first disk snapshots across cli, rust, ts, python by @appcypher in https://github.com/superradcompany/microsandbox/pull/652
  • feat(agentd): hand off PID 1 to a guest init binary by @appcypher in https://github.com/superradcompany/microsandbox/pull/653
  • chore(release): bump version to 0.4.4 by @appcypher in https://github.com/superradcompany/microsandbox/pull/655

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.3...v0.4.4

v0.4.3 New feature
Notable features
  • Install `msb` alias alongside `microsandbox` CLI
  • Add inline `--script` flag and rename file form to `--script-path`
Full changelog

What's Changed

  • chore: refresh npm lockfile after v0.4.2 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/641
  • domain-rule enforcement at DNS, SNI, and policy layers by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/633
  • feat(packaging): install msb alias alongside microsandbox CLI by @appcypher in https://github.com/superradcompany/microsandbox/pull/642
  • feat(cli): add inline --script and rename file form to --script-path by @appcypher in https://github.com/superradcompany/microsandbox/pull/643
  • fix(node-sdk): ship libkrunfw under canonical name in npm platform package by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/648

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.2...v0.4.3

v0.4.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • chore: refresh npm lockfile after v0.4.1 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/639
  • chore(release): fix npm exec bit and bump to 0.4.2 by @appcypher in https://github.com/superradcompany/microsandbox/pull/640

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.1...v0.4.2

v0.4.1 Breaking risk
Breaking changes
  • Node SDK builders redesigned as native napi classes
Full changelog

What's Changed

  • fix(ci): repair node sdk release step by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/630
  • fix(cli): correct dns_block_domain help text (REFUSED, not NXDOMAIN) by @voidborne-d in https://github.com/superradcompany/microsandbox/pull/631
  • refactor(sdk-node)!: redesign builders as native napi classes by @appcypher in https://github.com/superradcompany/microsandbox/pull/634
  • Reject unsupported glibc in installer by @qaijuang in https://github.com/superradcompany/microsandbox/pull/635
  • chore: bump version to 0.4.1 by @appcypher in https://github.com/superradcompany/microsandbox/pull/638

New Contributors

  • @voidborne-d made their first contribution in https://github.com/superradcompany/microsandbox/pull/631
  • @qaijuang made their first contribution in https://github.com/superradcompany/microsandbox/pull/635

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.0...v0.4.1

v0.4.0 Breaking risk
Breaking changes
  • TypeScript SDK redesigned with builder API and bundled binaries
  • OCI rootfs storage switched to block-backed implementation via VMDK + EROFS
Notable features
  • DNS interception for tcp/53 and DoT/853 queries
  • Disk-image volume mounts
  • Network policy redesign with per-rule direction
Full changelog

What's Changed

  • fix(sdk): self-heal shims when msb binary is missing by @appcypher in https://github.com/superradcompany/microsandbox/pull/575
  • execStreamWithConfig for TS SDK by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/569
  • feat(image)!: block-backed OCI rootfs via VMDK + EROFS fsmeta by @appcypher in https://github.com/superradcompany/microsandbox/pull/548
  • fix(runtime): restore VM boot and agentd docker build by @appcypher in https://github.com/superradcompany/microsandbox/pull/579
  • feat(agentd): introduce AgentdConfig to read env vars once at startup by @dijdzv in https://github.com/superradcompany/microsandbox/pull/507
  • build: use vendored dbus by @Glatzel in https://github.com/superradcompany/microsandbox/pull/562
  • Add sandbox-wide guest rlimits by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/549
  • Add keyring feature flag by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/563
  • refactor(agentd): split BootParams out of AgentdConfig by @appcypher in https://github.com/superradcompany/microsandbox/pull/580
  • refactor(dns): forward via hickory-client instead of hickory-resolver by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/578
  • docs: refresh banner palette and clean up duplicate assets by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/581
  • feat(image): support custom TLS certs and insecure registries by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/496
  • docs: add recipe for pulling images from local docker registry by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/474
  • ci: sync mintlify branch to release commit by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/588
  • Adding Secret Injection options similar to the Rust SDK for node-ts sdk. by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/586
  • feat(network): trust host CAs inside sandbox guests (opt-in) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/583
  • fix(dns): fetch nameservers via scdynamicstore on macos by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/582
  • test: add integration test infrastructure by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/547
  • feat(dns): intercept tcp/53 and dot/853 queries by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/585
  • docs(networking): split into overview, dns, tls, security-model by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/584
  • chore(deps): bump rustls-webpki from 0.103.11 to 0.103.13 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/596
  • fix(network): improve domain & domain suffix rules enforcement by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/605
  • feat(sdk): expose per-sandbox libkrunfw_path override by @appcypher in https://github.com/superradcompany/microsandbox/pull/599
  • feat(network): add host.microsandbox.internal alias by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/602
  • chore(deps-dev): bump postcss from 8.5.9 to 8.5.10 in /sdk/node-ts in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/614
  • feat(volumes): add disk-image volume mounts and unified readonly by @appcypher in https://github.com/superradcompany/microsandbox/pull/609
  • feat(network): redesign policy schema with per-rule direction (1/4) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/618
  • feat(network): policy + dns builders with lazy-parse error model by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/619
  • Fix command syntax in README examples by @mahmudsudo in https://github.com/superradcompany/microsandbox/pull/622
  • feat(cli): --net-rule grammar and flag set rewrite by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/620
  • docs(networking): align with new policy, add ts builder by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/616
  • feat(sdk-node)!: redesign TypeScript SDK with builder API and bundled binaries by @appcypher in https://github.com/superradcompany/microsandbox/pull/623
  • chore: bump version to 0.4.0 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/627
  • fix(ci): pass napi target only to build:native in release by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/629

New Contributors

  • @wellsbunk5 made their first contribution in https://github.com/superradcompany/microsandbox/pull/569
  • @Glatzel made their first contribution in https://github.com/superradcompany/microsandbox/pull/562
  • @mahmudsudo made their first contribution in https://github.com/superradcompany/microsandbox/pull/622

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.14...v0.4.0

v0.3.14 New feature
Notable features
  • Docker image publishing to release pipeline
  • CLI entry points for cargo, npm, and pip
Full changelog

What's Changed

  • feat(docker): add Docker image publishing to release pipeline by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/560
  • feat(sdk): add microsandbox CLI entry points for cargo/npx/pipx by @appcypher in https://github.com/superradcompany/microsandbox/pull/570
  • chore: bump version to 0.3.14 by @appcypher in https://github.com/superradcompany/microsandbox/pull/573

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.13...v0.3.14

v0.3.13 Breaking risk
Breaking changes
  • Removed msb shell command
Notable features
  • Python SDK with pyo3 bindings
  • File-level volume mount support
  • TypeScript SDK: filesystem readStream and metricsStream
Full changelog

What's Changed

  • refactor(cli): remove msb shell command by @appcypher in https://github.com/superradcompany/microsandbox/pull/509
  • docs: add global config.json reference page by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/511
  • feat(sandbox): support file-level volume mounts by @dijdzv in https://github.com/superradcompany/microsandbox/pull/504
  • docs(readme): simplify README by removing detailed feature sections by @appcypher in https://github.com/superradcompany/microsandbox/pull/516
  • docs: fix incorrect code examples across SDK documentation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/522
  • feat(sdk): add filesystem readStream to TypeScript SDK by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/521
  • fix(agentd): fix flaky PTY drain test by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/524
  • feat(benchmarks): add Docker vs Microsandbox filesystem benchmark harness by @appcypher in https://github.com/superradcompany/microsandbox/pull/525
  • feat(sdk): add metricsStream and attach to TypeScript SDK by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/523
  • fix(network): update Content-Length after body secret substitution by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/530
  • test(sdk): add Node.js SDK smoke tests and CI workflow by @Eronmmer in https://github.com/superradcompany/microsandbox/pull/517
  • Add --allow-private-ips CLI flag for NetworkPolicy::allow_all by @Bahtya in https://github.com/superradcompany/microsandbox/pull/520
  • docs: restructure navigation and split SDK reference by language by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/535
  • fix(tls): prevent data loss in TLS MITM proxy under parallel connections by @dijdzv in https://github.com/superradcompany/microsandbox/pull/534
  • feat(network): add upstream CA trust and rename TLS CA config by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/533
  • docs: add AI Agents page and reorganize Getting Started by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/541
  • fix(tls): Node.js TLS 1.3 connections hang through MITM proxy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/542
  • fix(tls): intermittent CERT_NOT_YET_VALID on fast-booting sandboxes by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/543
  • feat(sdk): add Python SDK with pyo3 bindings by @appcypher in https://github.com/superradcompany/microsandbox/pull/539
  • fix(cli): make command optional for msb exec in interactive mode by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/540
  • chore(deps): bump rand from 0.10.0 to 0.10.1 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/550
  • feat(cli): add interactive multi-select to msb self uninstall by @appcypher in https://github.com/superradcompany/microsandbox/pull/551
  • docs: add Python SDK snippets and reference pages by @appcypher in https://github.com/superradcompany/microsandbox/pull/553
  • chore: bump version to 0.3.13 by @appcypher in https://github.com/superradcompany/microsandbox/pull/554
  • fix(ci): install dbus-devel in manylinux container for Python wheel builds by @appcypher in https://github.com/superradcompany/microsandbox/pull/555
  • fix(ci): detect CI env inside maturin Docker containers by @appcypher in https://github.com/superradcompany/microsandbox/pull/556
  • fix(ci): add GITHUB_ACTIONS fallback for remaining CI env checks by @appcypher in https://github.com/superradcompany/microsandbox/pull/557
  • fix(ci): install libcap-ng-devel in maturin container by @appcypher in https://github.com/superradcompany/microsandbox/pull/558

New Contributors

  • @Bahtya made their first contribution in https://github.com/superradcompany/microsandbox/pull/520

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.12...v0.3.13

v0.3.11 Bug fix

Fixes symlink extended attribute operations and initializes listxattr support.

v0.3.9 Mixed
Notable features
  • Per-command exec flags for msb run
  • Simplified exec/attach/image sandbox APIs with _with variants
Full changelog

What's Changed

  • docs: make Rust the primary SDK in README examples by @appcypher in https://github.com/superradcompany/microsandbox/pull/481
  • refactor(sandbox): simplify exec/attach/image APIs with _with variants by @appcypher in https://github.com/superradcompany/microsandbox/pull/484
  • feat(cli): add per-command exec flags to msb run and AI Agents README section by @appcypher in https://github.com/superradcompany/microsandbox/pull/485
  • fix(filesystem): remove O_RESOLVE_BENEATH from macOS /.vol inode reopen by @appcypher in https://github.com/superradcompany/microsandbox/pull/487
  • fix(runtime): route VM logs to guest.log and runtime.log by @appcypher in https://github.com/superradcompany/microsandbox/pull/488
  • chore: bump version to 0.3.9 by @appcypher in https://github.com/superradcompany/microsandbox/pull/489

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.8...v0.3.9

v0.3.8 Breaking risk
Breaking changes
  • Complete rewrite with new embeddable SDK, smoltcp networking, and composable filesystem architectures
Notable features
  • Embeddable SDK for programmatic sandbox integration
  • Smoltcp networking stack
  • Composable filesystem architecture
Full changelog

What's Changed

  • feat!: rewrite microsandbox with embeddable SDK, smoltcp networking, and composable filesystem by @appcypher in https://github.com/superradcompany/microsandbox/pull/455
  • chore(install): update install script url by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/467
  • chore(deps): update crate deps + reduce oci client verbosity by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/469
  • chore: remove image tags from examples, docs, and CLI help by @appcypher in https://github.com/superradcompany/microsandbox/pull/471
  • fix: validate workdir exists at sandbox creation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/475
  • fix: ensure return ExecTimeout when exec timed-out by @Byunk in https://github.com/superradcompany/microsandbox/pull/470
  • fix(filesystem): resolve zero inode numbers in overlay readdir by @appcypher in https://github.com/superradcompany/microsandbox/pull/478
  • chore: bump microsandbox version to 0.3.8 by @appcypher in https://github.com/superradcompany/microsandbox/pull/479

New Contributors

  • @Byunk made their first contribution in https://github.com/superradcompany/microsandbox/pull/470

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.7...v0.3.8

v0.3.6 Maintenance

## What's Changed * chore: bump workspace version to 0.3.6 and update README

v0.3.5 New feature
Notable features
  • Node.js and TypeScript SDK with synchronized documentation
Full changelog

What's Changed

  • feat(sdk): add Node.js/TypeScript SDK and sync docs with implementation by @appcypher in https://github.com/superradcompany/microsandbox/pull/463
  • chore: bump workspace version to 0.3.5 by @appcypher in https://github.com/superradcompany/microsandbox/pull/464

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.4...v0.3.5

v0.3.4 New feature
Notable features
  • ICMP echo relay and gateway ping support
Full changelog

What's Changed

  • docs: add README for microsandbox branch by @appcypher in https://github.com/superradcompany/microsandbox/pull/460
  • feat(network): add ICMP echo relay and gateway ping support by @appcypher in https://github.com/superradcompany/microsandbox/pull/461
  • chore: bump workspace version to 0.3.4 by @appcypher in https://github.com/superradcompany/microsandbox/pull/462

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.3...v0.3.4

v0.3.3 New feature
Notable features
  • Volume management and guest mounts
  • User-space networking stack (smoltcp)
  • Live metrics sampling
v0.3.2 Breaking risk
Breaking changes
  • SandboxInfo replaced with SandboxHandle in SDK
  • ExecOutput encapsulated in SDK
Notable features
  • Detached sandbox mode
  • State reconciliation
  • Per-layer pull progress bars
Full changelog

What's Changed

  • feat: add detached sandbox mode, block-root example, and state reconciliation by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/431
  • refactor(sdk): replace SandboxInfo with SandboxHandle and encapsulate ExecOutput by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/432
  • feat: add per-layer pull progress bars, CLI quiet mode, and UX improvements by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/433
  • chore: bump crates to v0.3.2 and pin prebuilt download version by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/434

Full Changelog: https://github.com/zerocore-ai/microsandbox/compare/v0.3.1...v0.3.2

v0.3.1 New feature
Notable features
  • Prebuilt binaries are now the default
  • Runtime dependencies automatically install
Full changelog

What's Changed

  • feat: make prebuilt default and auto-install runtime deps by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/427
  • chore: bump crates to v0.3.1 and pin prebuilt download version by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/428

Full Changelog: https://github.com/zerocore-ai/microsandbox/compare/v0.3.0...v0.3.1

v0.3.0 Breaking risk
Breaking changes
  • Consolidated workspace into single microsandbox crate
  • Moved workspace crates under crates/ directory
Security fixes
  • RUSTSEC-2026-0007
  • RUSTSEC-2026-0009
Notable features
  • Go SDK initial implementation
  • Filesystem backends (memfs, proxyfs, overlayfs)
  • msbnet networking stack with TLS interception
microsandbox-v0.2.6 New feature

Added host argument to server start command and msbserver binary.

Beta — feedback welcome: [email protected]