> ## Documentation Index
> Fetch the complete documentation index at: https://nativesandbox.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Changelog

> Releases of nativesandbox.

<Update label="0.2.0" description="2026-09-21">
  **A CLI.** `npx nativesandbox run "node --version"` works with nothing installed — there is no
  binary to download and no runtime to version-match, because the container engine on your host
  *is* the runtime.

  `nsbx doctor` checks whether a host can run sandboxes and explains what is wrong when it cannot,
  including the one failure that reads as success: a cgroup limit the kernel **accepts and
  ignores**. `--deep` creates a real sandbox and reads `memory.max` back to prove it. It exits
  non-zero when the host is not ready, so it works as a deployment gate.

  `nsbx setup` applies what doctor found, printing each command and asking before it runs — it
  installs system packages and edits systemd units, so it does not do that quietly. `--print`
  shows them and changes nothing; `--yes` is for CI.

  `run`, `exec`, `ls`, `rm` and `sweep` cover the fleet from a terminal. `run` and `exec` stream
  output as it is produced and exit with the command's own status.

  Both binaries — `nativesandbox` and `nsbx` — ship in the same package. Still zero dependencies.
</Update>

<Update label="0.1.1" description="2026-09-21">
  `nativesandbox/package.json` is now reachable through the exports map. Tools that read a
  dependency's manifest — a version gate, a bundler, a doctor script — hit
  `ERR_PACKAGE_PATH_NOT_EXPORTED` on 0.1.0 and had to resolve some other subpath and walk up to
  find the directory.
</Update>

<Update label="0.1.0" description="2026-09-21">
  The first release.

  **Sandboxes.** `create()` with meet-or-exceed reuse, so a dependency install survives between
  commands instead of going cold. `replace` forces a fresh one. `list()`, `remove()` and
  `removeAll()` are scoped by label, so a sweep can only ever touch its own.

  **Commands.** `exec()` through a shell, with live output through `onFrame`, timeouts that kill
  forked grandchildren too, and `AbortSignal` cancellation reported separately from a timeout. A
  non-zero exit resolves rather than throwing.

  **Workspace.** Bind-mounted rather than copied through an agent channel — 7× faster to place 200
  files and 49× faster to read them back than a microVM runtime on the same machine. Traversal is
  refused rather than normalised.

  **Limits.** Memory, CPU and PID ceilings through cgroups, and a per-sandbox network policy.
  Sizes are a branded `Mebibytes`, so `memory: 512` does not compile.

  **Isolation.** Every Linux capability dropped and no-new-privileges, both on by default and both
  verified against a real `npm install`. An optional read-only root, and gVisor through
  `runtime: "runsc"`.

  **Reclaiming.** Idle stop and a hard maximum lifetime, settable per instance or per sandbox and
  recorded on the container so they survive a restart. Neither interrupts a command in flight.
</Update>