v0.6.4

0.6.4 (2026-08-10)

Features

• agent: serve sandbox pause/resume over vsock (CORE-21) (43de608)
• api: classify agent errors into the sandbox error registry (CORE-58) (072c937)
• api: list sandbox exposed ports (CORE-102) (#585) (e40e57a)
• api: real GetCapabilities + nested-virt fail-fast on Create (CORE-13) (cb5ed3c)
• api: real Pause/Resume + daemon-side transparent auto-resume (CORE-21) (0f1a782)
• core: AgentClient pause/resume RPCs (CORE-21) (1874e39)
• e2e: idle auto-pause + SetLifecycle + capabilities scenario; docs (CORE-21/60/13) (90216b2)
• e2e: pause / auto-resume / explicit-resume scenario (CORE-21) (fdae9b5)
• rpc: pause/resume vsock wire types (CORE-21) (bea2938)
• sandbox: implement template Build from a docker_ref source (CORE-107) (#593) (a7db0d4)
• sandbox: implement template Build from inline Dockerfile content (CORE-107) (#594) (fd3bb9f)
• sandbox: implement the filesystem verbs and process-plane queries (CORE-62) (#582) (cad4fee)
• sandbox: network-identity-invariant snapshots (#562) (4149fb1)
• sandbox: serve eligible creates from warm template snapshots (#569) (d23c12b)
• sandbox: template catalog store with GC pins (CORE-107) (#590) (82c8b65)
• sandbox: wire SetLifecycle end to end (CORE-60) (ecdf7d2)
• sandbox: wire the template catalog RPCs end to end (CORE-107) (#592) (a92fb13)
• vm: idle detection + on_idle policy and re-armable TTL deadlines (CORE-21/60) (d5b2dff)
• vm: sandbox pause/resume on the same id (CORE-21) (a244ce2)

Bug Fixes

• agent: disambiguate exec ENOENT failures (62aa0c4)
• ci: harden the SDK publish jobs against the review findings (ef4e411)
• ci: install with --frozen so a release tag's version bump is not fatal (76ae8ee)
• ci: pin the publish jobs' actions and drop their cache/credential surface (2fb3528)
• cli: clarify component and boot versions (134da85)
• cli: classify machine and sandbox failures (9256795)
• cli: complete debug guidance fallbacks (052d392)
• cli: preserve raw-mode output and debug guidance (28591dd)
• cli: render actionable command failures (85abe57)
• cli: resolve CORE-91/92/93/94/95/98 production audit findings (#577) (56567d1)
• cli: restore top controls and sanitize ANSI (dc37582)
• e2e: apply the cold-download READY budget to the sdk_py harness too (277a1dd)
• e2e: apply the cold-download READY budget to the sdk_ts harness too (9984dcf)
• e2e: budget the sandbox smoke's cold runtime-binary download (8b5dfad)
• e2e: drop the stray doc bullet from the sdk_ts READY budget comment (d856408)
• e2e: seed guest runtime binaries into the generation directory (4b2041b)
• exec: preserve actionable resource errors (63fc728)
• release: resume partial crates.io publishes (#548) (34a5e64)
• sandbox: abort resume when the Resuming commit is not durable (01dd386)
• sandbox: address the lifecycle-knobs review findings (5bcd4cb)
• sandbox: classify file read/write errors on the file channel (#586) (b79304a)
• sandbox: close the idle-pause -> resume network-finalization race (45cd0e6)
• sandbox: fix the TAP-teardown race and surface swallowed RPC failures (#567) (49d7119)
• sandbox: keep paused_at stable across failed resumes; prove the resumed TAP (4036c21)
• sandbox: survive the pause-commit-to-journal-clear crash window (4189097)
• vm: gate dm-snapshot CoW on device-mapper usability, not binary existence (253a55e)

Performance Improvements

• net: batch guest-bound frame writes with sendmsg_x (ABX-313) (943d9cd)
• sandbox: cold-start probe + restore fast path round 1 (#555) (1b4b766)
• sandbox: eBPF TCX datapath for invariant sandbox NAT (#566) (46ef5a3)
• sandbox: gate READY on agent vsock readiness and back off the connect poll (#559) (6d8ab5f)
• sandbox: make boot readiness an event via guest vsock dial-out (#560) (b8b7631)
• sandbox: pre-warm restore slots behind an LRU snapshot pool (#561) (6a08111)
• sandbox: quiet microVM console + reconfig latency attribution + resolv on tmpfs (round 2) (#558) (72f0e74)
• sandbox: self-sync the guest clock from ptp_kvm, off the restore path (#568) (21c5232)
• splicetcp: batch guest-to-host frame reads with recvmsg_x (ABX-313) (48413aa)
• xnu-net: iterator send API and live sysctl batch caps (693b29b)

Tests

• agent: cover missing working directory (2cd0810)
• e2e: sdk_py harness — Python SDK hello world vs isolated daemon (e5189b2)
• sandbox: cover the terminal-state TTL guard and the List storage path (9089f48)

Documentation

• common: record the batch-I/O contract the datapath now depends on (f8e427b)
• sandbox: pause/resume semantics + resolve the Pause-from-RUNNING ambiguity (7efe0d5)
• sdk: mark the PyPI publish workflow pending and record the bootstrap caveats (d240b92)
• xnu-net: pin XNU's silent recv truncation (93bcf7d)

Build System

• sdk: register @arcbox/sandbox as a release-please component (d36184a)
• sdk: register arcbox (Python) as a release-please component (3b44845)

Continuous Integration

• hash-pin actions and harden ci.yml per zizmor (88d6220)
• sdk: gate the TypeScript and Python SDKs on every PR (f1cda25)
• sdk: mirror the release uv build in the Python PR gate (89a9323)
• sdk: pin the PR gate's uv to the release toolchain range (a7f5d51)
• sdk: publish @arcbox/sandbox to npm on the sdk-typescript tag (bf9af74)
• sdk: publish arcbox (Python) to PyPI on the sdk-python tag (cf33b8c)

Miscellaneous Chores

• assets: pin boot assets 0.8.4 with the two-arch microvm kernel (#572) (50e59cd)
• master: release sdk-python 0.1.1 (05e7cf5)
• master: release sdk-typescript 0.1.1 (79f6170)