Slice (Nexus-JS) v0.10.7

Slice (Nexus-JS) v0.10.7

Highlights

• Guest Slice.evalSandbox Memory Cap & Heap Accounting (#42):
  • Added memory and maxMemoryBytes serde aliases to SandboxEvalOptions::memory_bytes so guest Slice.evalSandbox(code, { memory }) honors explicit byte caps instead of falling back to the 16 MB default.
  • Stopped permanently deducting freed child JS heap allocations from the parent realm's BOA_KV_MEM_BUDGET after the child Slice.evalSandbox isolate exits, while preserving parent_rem_mem clamping during child execution.
• Proportional fuelUsed Telemetry for while and do...while Loops (#43):
  • Tracked cumulative loop_iterations_executed in boa_engine::vm::RuntimeLimits on every IncrementLoopIteration opcode and charged (loop_iters / 250).max(1) in finish_boa_compartment_execution, aligning while and do...while fuel reporting with for loops.
• Dedicated Egress DLP Violation Variant (#44):
  • Added SandboxViolation::EgressSecretLeakBlocked { tenant_id } (Egress DLP Violation (EGRESS_SECRET_LEAK_BLOCKED): Compartment '<tenant_id>' blocked from exfiltrating a registered audit secret) across outbound HTTP, WebSocket, and TCP/UDP socket guards instead of reusing EnvAccessDenied.
• Single-Line Slice.evalSandbox Error Location & Deduplication (#45):
  • Deduplicated location parentheticals in finish_boa_compartment_execution when raw_err or stack frames already include (unknown at ...).
  • Removed the extra leading newline in standalone SLICEBOA{ wrappers so single-line Slice.evalSandbox snippets report line :1: instead of :2:.
  • Updated Tier-0 JSON.parse to return Uncaught SyntaxError on malformed JSON.