v0.6.0

0.6.0 (2026-08-02)

⚠ BREAKING CHANGES

• api: retire tonic from the daemon (CORE-68)
• sandbox: addressable executions, template-only API, plane split (CORE-54/55/56/57) (#519)

Features

• agent: gate the guest NFS export behind a host request (ABX-426) (#512) (0330cc4)
• api: serve the sandbox control plane over Connect (CORE-53) (99e1758)
• daemon: publish VM_STARTING/VM_READY/NETWORK_READY (CORE-67) (8d52b12)
• daemon: serve reflection from the Connect stack (CORE-53) (1eeff6b)
• daemon: serve the sandbox API over Connect, gRPC, and gRPC-Web (CORE-53) (33a9d5e)
• daemon: show ~/ArcBox files as owned by the browsing user (ABX-427) (#515) (d3b17d2)
• rpc: generate the sandbox Connect surface with connectrpc + buffa (CORE-53) (0c11969)
• sandbox: addressable executions, template-only API, plane split (CORE-54/55/56/57) (#519) (f014052)

Bug Fixes

• api,daemon: fail the exec pump toward EOF and gate the macOS assertion (2fc781f)
• api: stream every setup-status update, not the newest snapshot (b7bb651)
• daemon,api: pin the h2 stream cap and tidy test-only dependencies (7b93edc)
• daemon: arm the vm_running mirror before init, and stop over-promising (01747dc)
• daemon: bound NFS unmount time (da06aed)
• daemon: make vm_running track the VM and a docker.sock bind fail startup (03a09f9)
• daemon: unmount NFS before shutdown (8b868ae)
• helper: use async fn syntax in the fs e2e test (c8cdc1a)
• rpc: build the Connect descriptor set with protoc compat flags (57e3837)

Code Refactoring

• agent: port the guest agent to buffa message types (8e4a37c)
• api,core: retire tonic and the prost deps from the API layer (b4b6f65)
• api: generate the daemon surface with buffa and move Icon (CORE-68) (2e9d670)
• api: move Kubernetes and Migration onto Connect (CORE-68) (d6fc295)
• api: move Machine onto Connect (CORE-68) (f6db17f)
• api: move Stats and System onto Connect (CORE-68) (4f84914)
• api: retire tonic from the daemon (CORE-68) (016fd01)
• api: single-type the machine and macos services on buffa (86dd726)
• cli,docker,transport: drop the dead arcbox-protocol deps (57b88c4)
• cli: drive interactive exec through a split Connect bidi stream (CORE-68) (3b4d125)
• cli: machine and macos commands on buffa types (ff21b22)
• cli: move machine, system, migrate, and disk onto Connect (CORE-68) (badd54a)
• cli: move the remaining clients onto Connect (CORE-68) (166d9e5)
• cli: sandbox and agent commands on buffa, delete the prost seam (dbb24f2)
• cli: start moving clients onto Connect (CORE-68) (72857e7)
• cli: system, disk, and kubernetes commands on buffa types (e2b96f5)
• cli: top and migrate commands on buffa types (230b9bd)
• core,api: port machine exec and stats to buffa end-to-end (d2b4529)
• core,api: port the kubernetes surface to buffa (e7ef45c)
• core,api: port the sandbox surface to buffa end-to-end (2ba9f94)
• core,api: single-type system, migration, and the setup state on buffa (225f9cc)
• core: fold the split arcbox_connect imports into one block (5941358)
• core: port the host agent channel to buffa message types (3c25982)
• docker: drop the bind-and-serve wrapper that has no callers (1c6d33d)
• rpc,e2e: decouple persisted JSON from generated proto types (55d68b2)

Tests

• core: pin the no-Linux-VM contract for init's milestones (cd810ce)
• daemon: prove one endpoint answers all three wire formats (CORE-53) (2997db4)
• docker,proxy: address review — drop the port TOCTOU, assert whole targets (89a12c7)
• docker: assert requests reach dockerd unaltered (34aaf8e)
• e2e: add the smoke suite (95d914b)
• e2e: add VirtioFS host-guest consistency checks (930f697)
• e2e: assert a plain JSON POST reaches the live sandbox API (CORE-53) (90d3521)
• e2e: calibrate the boot budget and require both of its marks (b068366)
• e2e: drive an interactive abctl PTY session end to end (#527) (5c31677)
• e2e: expose setup-phase timings from the readiness stream (3f2ac46)
• e2e: fix two defects in the daemon lock suite found in review (44d06ff)
• e2e: iperf3 throughput matrix (finds container-upload collapse + inbound gap) (#461) (b816c7b)
• e2e: IPv6-drop characterization + content-integrity coverage (#462) (ea08fb3)
• e2e: pin the daemon lock lifecycle contract (bc5037e)
• proxy: cover the inbound accept path and the ICMP round trip (0b6f376)
• proxy: run the ICMP round trip in CI instead of ignoring it (8e8bfc0)

Documentation

• app: correct which lock side makes SetupState::subscribe atomic (95edb17)
• app: record that restart_generation reports departures, not arrivals (706c832)
• balloon: host cost is the guest-touched high-water mark, not memory_mb (4a3c274)
• claude: revise File I/O and idle-memory perf targets per measured reality (68c3afd)
• cli: update stale arcbox invocations to abctl (#510) (dd786da)
• daemon: correct shutdown budget (ee4d4f8)
• daemon: make NETWORK_READY's description true in VM-host-only mode (e02e0b2)
• readme: cover the shipped feature surface (#516) (2727072)
• rpc,api: true up the codec-boundary comments for this stage (d8b0b62)
• rpc,guest: record the buffa single-type end state (CORE-73 B5) (0589998)
• rpc: arcbox-connect now also feeds the guest agent's vsock frames (0e3f816)
• rpc: fix the checklist cross-references the bots caught (8ffc626)
• rpc: name reflection's descriptor set as the daemon's prost remnant (bc0c03a)
• rpc: name the fleet prost consumer and the vsock wiring boundary (ecf11af)
• rpc: record the Connect surface in the agent handbook (CORE-53) (0212859)
• rpc: stop declaring the router's own add_service dead (e3f8912)
• rpc: true up the build script's host-codec claim (6834c5a)
• rpc: update arcbox-grpc's WKT comment to the post-serde rationale (9a4df4c)
• settled VirtioFS performance record (fs-perf-limits, CORE-48) (#517) (dd17f42)
• test,ci: correct two claims this suite's audit disproved (6eddac7)

Build System

• proto: declare the sandbox package as a publishable buf module (CORE-53) (d681cb0)

Continuous Integration

• proto: exempt the WKT image files the module split stops materializing (1f511b8)