Release history
microsandbox releases
secure, local, cross-platform and programmable sandboxes for AI agents
All releases
28 shown
SDK updates, networking, SSH, CLI, metrics
Minor fixes and improvements.
Full changelog
What's Changed
- fix(release): add version to microsandbox-utils build-dep by @appcypher in https://github.com/superradcompany/microsandbox/pull/662
- Optimize Image persistance queries by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/665
- Metrics Sampling Interval by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/654
- feat(utils): MSB_HOME env override for isolated state by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/669
- refactor(db): typed read/write pools with retry-on-busy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/666
- fix(network): gate address families on host route availability by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/671
- docs(sdk): align rust and typescript networking references by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/670
- fix(agent): bound relay handshake reads and prefer boot-error.json on timeout by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/673
- chore(release): bump version to 0.4.5 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/672
- chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/677
- docs(recipes): add systemd services recipe by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/674
- ci: add Check/Test Summary aggregator jobs for required-checks gating by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/679
- docs(sdk): document PatchBuilder / Patch in each sdk reference by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/678
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.4...v0.4.5
- exec.log capture, boot-error.json, typed ExecFailed for logs
- file‑first disk snapshots across CLI, Rust, TS, Python
- agentd hands off PID 1 to a guest init binary
Full changelog
What's Changed
- chore: refresh npm lockfile after v0.4.3 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/649
- fix(net): --no-net actually air-gaps the guest by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/647
- feat(logs): exec.log capture, boot-error.json, typed ExecFailed by @appcypher in https://github.com/superradcompany/microsandbox/pull/650
- feat(snapshot): file-first disk snapshots across cli, rust, ts, python by @appcypher in https://github.com/superradcompany/microsandbox/pull/652
- feat(agentd): hand off PID 1 to a guest init binary by @appcypher in https://github.com/superradcompany/microsandbox/pull/653
- chore(release): bump version to 0.4.4 by @appcypher in https://github.com/superradcompany/microsandbox/pull/655
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.3...v0.4.4
- Install `msb` alias alongside `microsandbox` CLI
- Add inline `--script` flag and rename file form to `--script-path`
Full changelog
What's Changed
- chore: refresh npm lockfile after v0.4.2 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/641
- domain-rule enforcement at DNS, SNI, and policy layers by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/633
- feat(packaging): install msb alias alongside microsandbox CLI by @appcypher in https://github.com/superradcompany/microsandbox/pull/642
- feat(cli): add inline --script and rename file form to --script-path by @appcypher in https://github.com/superradcompany/microsandbox/pull/643
- fix(node-sdk): ship libkrunfw under canonical name in npm platform package by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/648
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.2...v0.4.3
Minor fixes and improvements.
Full changelog
What's Changed
- chore: refresh npm lockfile after v0.4.1 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/639
- chore(release): fix npm exec bit and bump to 0.4.2 by @appcypher in https://github.com/superradcompany/microsandbox/pull/640
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.1...v0.4.2
- Node SDK builders redesigned as native napi classes
Full changelog
What's Changed
- fix(ci): repair node sdk release step by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/630
- fix(cli): correct dns_block_domain help text (REFUSED, not NXDOMAIN) by @voidborne-d in https://github.com/superradcompany/microsandbox/pull/631
- refactor(sdk-node)!: redesign builders as native napi classes by @appcypher in https://github.com/superradcompany/microsandbox/pull/634
- Reject unsupported glibc in installer by @qaijuang in https://github.com/superradcompany/microsandbox/pull/635
- chore: bump version to 0.4.1 by @appcypher in https://github.com/superradcompany/microsandbox/pull/638
New Contributors
- @voidborne-d made their first contribution in https://github.com/superradcompany/microsandbox/pull/631
- @qaijuang made their first contribution in https://github.com/superradcompany/microsandbox/pull/635
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.0...v0.4.1
- TypeScript SDK redesigned with builder API and bundled binaries
- OCI rootfs storage switched to block-backed implementation via VMDK + EROFS
- DNS interception for tcp/53 and DoT/853 queries
- Disk-image volume mounts
- Network policy redesign with per-rule direction
Full changelog
What's Changed
- fix(sdk): self-heal shims when msb binary is missing by @appcypher in https://github.com/superradcompany/microsandbox/pull/575
- execStreamWithConfig for TS SDK by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/569
- feat(image)!: block-backed OCI rootfs via VMDK + EROFS fsmeta by @appcypher in https://github.com/superradcompany/microsandbox/pull/548
- fix(runtime): restore VM boot and agentd docker build by @appcypher in https://github.com/superradcompany/microsandbox/pull/579
- feat(agentd): introduce AgentdConfig to read env vars once at startup by @dijdzv in https://github.com/superradcompany/microsandbox/pull/507
- build: use vendored dbus by @Glatzel in https://github.com/superradcompany/microsandbox/pull/562
- Add sandbox-wide guest rlimits by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/549
- Add keyring feature flag by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/563
- refactor(agentd): split BootParams out of AgentdConfig by @appcypher in https://github.com/superradcompany/microsandbox/pull/580
- refactor(dns): forward via hickory-client instead of hickory-resolver by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/578
- docs: refresh banner palette and clean up duplicate assets by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/581
- feat(image): support custom TLS certs and insecure registries by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/496
- docs: add recipe for pulling images from local docker registry by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/474
- ci: sync mintlify branch to release commit by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/588
- Adding Secret Injection options similar to the Rust SDK for node-ts sdk. by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/586
- feat(network): trust host CAs inside sandbox guests (opt-in) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/583
- fix(dns): fetch nameservers via scdynamicstore on macos by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/582
- test: add integration test infrastructure by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/547
- feat(dns): intercept tcp/53 and dot/853 queries by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/585
- docs(networking): split into overview, dns, tls, security-model by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/584
- chore(deps): bump rustls-webpki from 0.103.11 to 0.103.13 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/596
- fix(network): improve domain & domain suffix rules enforcement by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/605
- feat(sdk): expose per-sandbox libkrunfw_path override by @appcypher in https://github.com/superradcompany/microsandbox/pull/599
- feat(network): add host.microsandbox.internal alias by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/602
- chore(deps-dev): bump postcss from 8.5.9 to 8.5.10 in /sdk/node-ts in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/614
- feat(volumes): add disk-image volume mounts and unified readonly by @appcypher in https://github.com/superradcompany/microsandbox/pull/609
- feat(network): redesign policy schema with per-rule direction (1/4) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/618
- feat(network): policy + dns builders with lazy-parse error model by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/619
- Fix command syntax in README examples by @mahmudsudo in https://github.com/superradcompany/microsandbox/pull/622
- feat(cli): --net-rule grammar and flag set rewrite by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/620
- docs(networking): align with new policy, add ts builder by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/616
- feat(sdk-node)!: redesign TypeScript SDK with builder API and bundled binaries by @appcypher in https://github.com/superradcompany/microsandbox/pull/623
- chore: bump version to 0.4.0 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/627
- fix(ci): pass napi target only to build:native in release by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/629
New Contributors
- @wellsbunk5 made their first contribution in https://github.com/superradcompany/microsandbox/pull/569
- @Glatzel made their first contribution in https://github.com/superradcompany/microsandbox/pull/562
- @mahmudsudo made their first contribution in https://github.com/superradcompany/microsandbox/pull/622
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.14...v0.4.0
- Docker image publishing to release pipeline
- CLI entry points for cargo, npm, and pip
Full changelog
What's Changed
- feat(docker): add Docker image publishing to release pipeline by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/560
- feat(sdk): add microsandbox CLI entry points for cargo/npx/pipx by @appcypher in https://github.com/superradcompany/microsandbox/pull/570
- chore: bump version to 0.3.14 by @appcypher in https://github.com/superradcompany/microsandbox/pull/573
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.13...v0.3.14
- Removed msb shell command
- Python SDK with pyo3 bindings
- File-level volume mount support
- TypeScript SDK: filesystem readStream and metricsStream
Full changelog
What's Changed
- refactor(cli): remove
msb shellcommand by @appcypher in https://github.com/superradcompany/microsandbox/pull/509 - docs: add global config.json reference page by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/511
- feat(sandbox): support file-level volume mounts by @dijdzv in https://github.com/superradcompany/microsandbox/pull/504
- docs(readme): simplify README by removing detailed feature sections by @appcypher in https://github.com/superradcompany/microsandbox/pull/516
- docs: fix incorrect code examples across SDK documentation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/522
- feat(sdk): add filesystem readStream to TypeScript SDK by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/521
- fix(agentd): fix flaky PTY drain test by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/524
- feat(benchmarks): add Docker vs Microsandbox filesystem benchmark harness by @appcypher in https://github.com/superradcompany/microsandbox/pull/525
- feat(sdk): add metricsStream and attach to TypeScript SDK by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/523
- fix(network): update Content-Length after body secret substitution by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/530
- test(sdk): add Node.js SDK smoke tests and CI workflow by @Eronmmer in https://github.com/superradcompany/microsandbox/pull/517
- Add --allow-private-ips CLI flag for NetworkPolicy::allow_all by @Bahtya in https://github.com/superradcompany/microsandbox/pull/520
- docs: restructure navigation and split SDK reference by language by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/535
- fix(tls): prevent data loss in TLS MITM proxy under parallel connections by @dijdzv in https://github.com/superradcompany/microsandbox/pull/534
- feat(network): add upstream CA trust and rename TLS CA config by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/533
- docs: add AI Agents page and reorganize Getting Started by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/541
- fix(tls): Node.js TLS 1.3 connections hang through MITM proxy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/542
- fix(tls): intermittent CERT_NOT_YET_VALID on fast-booting sandboxes by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/543
- feat(sdk): add Python SDK with pyo3 bindings by @appcypher in https://github.com/superradcompany/microsandbox/pull/539
- fix(cli): make command optional for
msb execin interactive mode by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/540 - chore(deps): bump rand from 0.10.0 to 0.10.1 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/550
- feat(cli): add interactive multi-select to
msb self uninstallby @appcypher in https://github.com/superradcompany/microsandbox/pull/551 - docs: add Python SDK snippets and reference pages by @appcypher in https://github.com/superradcompany/microsandbox/pull/553
- chore: bump version to 0.3.13 by @appcypher in https://github.com/superradcompany/microsandbox/pull/554
- fix(ci): install dbus-devel in manylinux container for Python wheel builds by @appcypher in https://github.com/superradcompany/microsandbox/pull/555
- fix(ci): detect CI env inside maturin Docker containers by @appcypher in https://github.com/superradcompany/microsandbox/pull/556
- fix(ci): add GITHUB_ACTIONS fallback for remaining CI env checks by @appcypher in https://github.com/superradcompany/microsandbox/pull/557
- fix(ci): install libcap-ng-devel in maturin container by @appcypher in https://github.com/superradcompany/microsandbox/pull/558
New Contributors
- @Bahtya made their first contribution in https://github.com/superradcompany/microsandbox/pull/520
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.12...v0.3.13
Fixes symlink extended attribute operations and initializes listxattr support.
- Per-command exec flags for msb run
- Simplified exec/attach/image sandbox APIs with _with variants
Full changelog
What's Changed
- docs: make Rust the primary SDK in README examples by @appcypher in https://github.com/superradcompany/microsandbox/pull/481
- refactor(sandbox): simplify exec/attach/image APIs with _with variants by @appcypher in https://github.com/superradcompany/microsandbox/pull/484
- feat(cli): add per-command exec flags to msb run and AI Agents README section by @appcypher in https://github.com/superradcompany/microsandbox/pull/485
- fix(filesystem): remove O_RESOLVE_BENEATH from macOS /.vol inode reopen by @appcypher in https://github.com/superradcompany/microsandbox/pull/487
- fix(runtime): route VM logs to guest.log and runtime.log by @appcypher in https://github.com/superradcompany/microsandbox/pull/488
- chore: bump version to 0.3.9 by @appcypher in https://github.com/superradcompany/microsandbox/pull/489
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.8...v0.3.9
- Complete rewrite with new embeddable SDK, smoltcp networking, and composable filesystem architectures
- Embeddable SDK for programmatic sandbox integration
- Smoltcp networking stack
- Composable filesystem architecture
Full changelog
What's Changed
- feat!: rewrite microsandbox with embeddable SDK, smoltcp networking, and composable filesystem by @appcypher in https://github.com/superradcompany/microsandbox/pull/455
- chore(install): update install script url by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/467
- chore(deps): update crate deps + reduce oci client verbosity by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/469
- chore: remove image tags from examples, docs, and CLI help by @appcypher in https://github.com/superradcompany/microsandbox/pull/471
- fix: validate workdir exists at sandbox creation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/475
- fix: ensure return ExecTimeout when exec timed-out by @Byunk in https://github.com/superradcompany/microsandbox/pull/470
- fix(filesystem): resolve zero inode numbers in overlay readdir by @appcypher in https://github.com/superradcompany/microsandbox/pull/478
- chore: bump microsandbox version to 0.3.8 by @appcypher in https://github.com/superradcompany/microsandbox/pull/479
New Contributors
- @Byunk made their first contribution in https://github.com/superradcompany/microsandbox/pull/470
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.7...v0.3.8
## What's Changed * chore: bump workspace version to 0.3.6 and update README
- Node.js and TypeScript SDK with synchronized documentation
Full changelog
What's Changed
- feat(sdk): add Node.js/TypeScript SDK and sync docs with implementation by @appcypher in https://github.com/superradcompany/microsandbox/pull/463
- chore: bump workspace version to 0.3.5 by @appcypher in https://github.com/superradcompany/microsandbox/pull/464
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.4...v0.3.5
- ICMP echo relay and gateway ping support
Full changelog
What's Changed
- docs: add README for microsandbox branch by @appcypher in https://github.com/superradcompany/microsandbox/pull/460
- feat(network): add ICMP echo relay and gateway ping support by @appcypher in https://github.com/superradcompany/microsandbox/pull/461
- chore: bump workspace version to 0.3.4 by @appcypher in https://github.com/superradcompany/microsandbox/pull/462
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.3...v0.3.4
- Volume management and guest mounts
- User-space networking stack (smoltcp)
- Live metrics sampling
- SandboxInfo replaced with SandboxHandle in SDK
- ExecOutput encapsulated in SDK
- Detached sandbox mode
- State reconciliation
- Per-layer pull progress bars
Full changelog
What's Changed
- feat: add detached sandbox mode, block-root example, and state reconciliation by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/431
- refactor(sdk): replace SandboxInfo with SandboxHandle and encapsulate ExecOutput by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/432
- feat: add per-layer pull progress bars, CLI quiet mode, and UX improvements by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/433
- chore: bump crates to v0.3.2 and pin prebuilt download version by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/434
Full Changelog: https://github.com/zerocore-ai/microsandbox/compare/v0.3.1...v0.3.2
- Prebuilt binaries are now the default
- Runtime dependencies automatically install
Full changelog
What's Changed
- feat: make prebuilt default and auto-install runtime deps by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/427
- chore: bump crates to v0.3.1 and pin prebuilt download version by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/428
Full Changelog: https://github.com/zerocore-ai/microsandbox/compare/v0.3.0...v0.3.1
- Consolidated workspace into single microsandbox crate
- Moved workspace crates under crates/ directory
- RUSTSEC-2026-0007
- RUSTSEC-2026-0009
- Go SDK initial implementation
- Filesystem backends (memfs, proxyfs, overlayfs)
- msbnet networking stack with TLS interception
Added host argument to server start command and msbserver binary.