v0.3.0

What's changed

• Replaced all workspace modes with one direct read/write workspace bind. Git worktrees mount from their root at the same lexical guest path; non-Git sessions mount their current directory.
• Writes now appear on the host immediately, and commands retain the original working directory.
• Removed Git seeding, named-volume workspace management, export, and host-copy APIs and commands.
• Added fail-closed canonical and lexical workspace identity checks for reconnects, symlink layouts, protected guest paths, and Git discovery failures.
• Removed workspace configuration keys now fail with migration guidance, including legacy settings in quoted TOML and untrusted project configuration.
• Legacy managed sandboxes can be cleaned up safely, but retained named volumes are never deleted automatically.
• Updated the live VM matrix, package checks, documentation, and migration guidance for the new behavior.

Breaking changes and migration

The former mode, clone_branch, clone_depth, shallow_archive, and volume_quota_mib settings and the /msb volumes and /msb export commands are no longer available. Before upgrading from a volume-backed release, recover any unexported work using the previous release or follow the manual recovery steps in workspace storage.

Full changelog: v0.2.0...v0.3.0

v0.2.0

What's changed

• Docker now runs inside every official sandbox image. The daemon uses a guest-local Unix socket and never connects to the host Docker socket.
• Added Docker readiness checks, auto/require/disabled modes, Buildx and Compose, and recovery across idle VM reboots and interrupted daemon starts.
• Nested container traffic now follows the sandbox's deny and allowlist policies. Port publishing supports guest, host/guest, and bind/host/guest forms.
• Increased the default sandbox size to 4 CPUs and 8192 MiB.
• Added just dev to build the current image and native addon, import the image into Microsandbox, and launch Pi with the current extension checkout.
• The package default is pinned to ghcr.io/hcohe/pi-microsandbox:1.1.0@sha256:ab4e99d4232f827b3f295ff3210437e01446dbb672ef0d0c78358566170ac86c.

The image release contains base-1.1.0, node-1.1.0, python-1.1.0, rust-1.1.0, go-1.1.0, and 1.1.0 for AMD64 and ARM64. All 18 live VM scenarios passed against the published cohort.

Full changelog: v0.1.1...v0.2.0

v0.1.1

What's Changed

• Bundle a scriptless native flock addon by @hcohe in #28

Full Changelog: v0.1.0...v0.1.1