v0.6.2: macOS local install without root

Features in v0.6.2

Highlights

• install.sh --local works on a Mac without root. Managed Macs that cannot grant sudo can run sandboxd as the user.
• Darwin sandboxd binaries are published. toolboxd stays a Linux binary, because it runs inside the container.
• Loopback toolbox. With SB_DOCKER_TOOLBOX_LOOPBACK, sandboxd reaches toolboxd on 127.0.0.1 instead of the container IP, which macOS Local Network privacy blocks for an unsigned user process.

---

macOS local install (#523, #524)

• The release workflow builds sandboxd natively on the macOS runner. A Darwin toolboxd never becomes ready, so the installer fetches toolboxd_linux_<arch>.
• Docker Desktop only shares /Users, /private, /tmp, and /Volumes. The Linux toolboxd is installed under /private/var/lib/sandboxd-toolbox, and the macOS runtime directory is /private/var/run/sandboxd because /run does not exist.
• SB_DOCKER_TOOLBOX_LOOPBACK is off by default. Linux and every existing deployment are unchanged. Each Docker sandbox publishes only its toolbox port, bound to 127.0.0.1, and dockerd assigns the host port.

Other

• The cluster replica-budget test no longer flakes. (#525)
• The npm publish workflow and the TypeScript package repository fields match the repo. (#526)

Upgrade notes

• Re-run install.sh --local on a Mac that failed the earlier installer. Set SB_DOCKER_TOOLBOX_LOOPBACK only for that rootless macOS layout.

What's Changed

• fix(install): make --local work on macOS non-privledge mode by @sumansaurabh in #523
• Feat/macos rootless loopback toolbox by @sumansaurabh in #524
• test: Fix/cluster replica budget flake by @sumansaurabh in #525
• chore(ci): update npm publish workflow and package.json repository details by @sumansaurabh in #526

Full Changelog: v0.6.1...v0.6.2