v0.2.4

📖 Documentation for this release: https://kvcache-ai.github.io/AgentENV/v0.2.4/

---

Features

• Add sandbox logs API (#338) — @zlzGithub-0801
• Add concurrent sandbox throughput benchmarks (#337) — @GxmzG
• Build and publish reusable images with the CLI (#347) — @Primary33
• Add fromImageRegistry field to TemplateBuildStartV2 (#385) — @zlzGithub-0801
• Persist source sandbox user metadata in published snapshot records (#397) — @blahgeek
• Add DELETE /snapshots/{snapshotID} endpoint (#396) — @blahgeek
• custom-extension: Surface hook 4xx/5xx status to API callers (#395) — @blahgeek
• overlaybd: Add runtime cache limits and mmap-aware eviction (#345) — @huang-jl

Bug Fixes

• Restore Clippy compatibility with Rust 1.99 (#336) — @yingdi-shan
• overlaybd: Reclaim cache capacity pinned by open entries (#344) — @huajq
• aenv: Preserve queued input during recovery — @Boulea7
• firecracker: Wait for the API socket to accept connections — @yingdi-shan
• build: Treat a reaped BuildKit daemon as stopped — @yingdi-shan
• envd: Lock /etc/passwd when adding a Dockerfile USER account (#355) — @yingdi-shan
• gateway: Match node API sandbox list cursors via shared vectors (#375) — @yingdi-shan
• repository: Create absent OSS objects with if_not_exists — @yingdi-shan
• repository: Serialize OSS document writers with a lease on Alibaba OSS — @yingdi-shan
• proxy: Separate HTTP and WS response header timeouts (#377) — @LSX-s-Software
• image: Validate OCI blob digest before building the host path — @aeonframework
• repository: Back off when an OSS document changes while being read (#383) — @yingdi-shan
• image: Map zero-layer OCI manifest to 4xx (#394) — @Riatre
• gateway: Size reverse proxy idle connection pools for node fan-out (#393) — @blahgeek
• scripts: Forward environment explicitly for sudo-rs compatibility (#399) — @yingdi-shan
• Reject explicit volume mounts on snapshots with volumes (#405) — @Primary33
• sandbox: Announce guest MAC changes via arp_notify (#409) — @dushulin
• overlaybd: Reconcile mmap limits with open-entry eviction (#423) — @huang-jl
• sandbox: Hide image refs from guest metadata (#419) — @Riatre
• storage: Avoid spurious ZFile and disk size warnings (#420) — @guozy18

Improvements

• repository: Store build logs and cache state as shared documents (#367) — @yingdi-shan
• gateway: Route sandbox and build paths from one table — @yingdi-shan
• Move the durable repository out of the snapshot module (#368) — @yingdi-shan
• volume: Implement the volume catalog once on repository documents (#369) — @yingdi-shan
• snapshot: Implement the snapshot catalog once on repository documents — @yingdi-shan
• snapshot: Move registry export and recontainerization out of the repository — @yingdi-shan
• snapshot: Store snapshot and volume layers through one shared pipeline — @yingdi-shan
• snapshot: Resolve snapshots and volume backings with one resolver — @yingdi-shan
• repository: Name every blob path in the repository layout (#370) — @yingdi-shan
• sandbox: Reach guest envd through one backend method (#374) — @yingdi-shan
• repository: Stop depending on snapshot, image, volume and sandbox (#382) — @yingdi-shan
• Break the dependency cycles between top-level modules — @yingdi-shan
• sandbox: Own Firecracker host resources in SandboxResources — @yingdi-shan
• sandbox: Share Firecracker rootfs attach and boot-arg append — @yingdi-shan
• sandbox: Split Firecracker start_resume into stages — @yingdi-shan
• sandbox: Move guest volume helpers out of FirecrackerSandbox (#380) — @yingdi-shan
• Move layer references and volume backing out of snapshot (#386) — @Primary33

Performance

• setup: Default ublk block devices to the none I/O scheduler (#334)
• ublk-daemon: Stop devices concurrently on shutdown (#335)

Observability

• Bound the heartbeat channel's connect attempt (#339) — @nblintao
• Log why a heartbeat failed (#340) — @nblintao