v0.5.0 Release Notes

Released 2026-02-01

v0.4.3 -> v0.5.0

Summary

Replace Podman container isolation with bubblewrap (bwrap) sandbox for script execution, implementing systemd-run resource limits and graceful shutdown mechanism.

翻譯

以 bubblewrap (bwrap) 沙箱取代 Podman 容器隔離執行腳本，實作 systemd-run 資源限制與 graceful shutdown 機制。

Changes

FEAT

Add bubblewrap sandbox execution with namespace isolation (unshare-all, share-net)
Implement systemd-run resource limits (CPUQuota, MemoryMax, MemorySwapMax)
Support Python, JavaScript, TypeScript runtime via wrapper scripts

翻譯

新增 bubblewrap 沙箱執行，支援命名空間隔離 (unshare-all, share-net)
實作 systemd-run 資源限制 (CPUQuota, MemoryMax, MemorySwapMax)
支援 Python、JavaScript、TypeScript 執行環境透過 wrapper 腳本

REFACTOR

Remove Podman container pool dependency, comment out container package code
Restructure main.go with proper graceful shutdown using context timeout
Simplify router to return *http.Server for external lifecycle control

翻譯

移除 Podman 容器池依賴，註解 container 套件程式碼
重構 main.go 實作 graceful shutdown，使用 context timeout
簡化 router 回傳 *http.Server 以支援外部生命週期控制

UPDATE

Rename environment variables: MAX_CPUS_PER_CONTAINER → MAX_CPUS, MAX_MEMORY_PER_CONTAINER → MAX_MEMORY
Change memory format from bytes to human-readable (e.g., 128M)

翻譯

重新命名環境變數：MAX_CPUS_PER_CONTAINER → MAX_CPUS，MAX_MEMORY_PER_CONTAINER → MAX_MEMORY
記憶體格式從 bytes 改為人類可讀格式（如 128M）

Files Changed

File	Status	Tag
`internal/sandbox/command.go`	Added	FEAT
`cmd/api/main.go`	Modified	REFACTOR
`internal/router.go`	Modified	REFACTOR
`internal/handler/run.go`	Modified	REFACTOR
`internal/handler/sse.go`	Modified	REFACTOR
`internal/container/build.go`	Modified	REFACTOR
`internal/container/container.go`	Modified	REFACTOR
`internal/container/health.go`	Modified	REFACTOR
`internal/container/operator.go`	Modified	REFACTOR
`.env.example`	Modified	UPDATE
`README.md`	Modified	DOC
`README.zh.md`	Modified	DOC
`cover.png`	Modified	CHORE
`package.json`	Added	CHORE
`.gitignore`	Modified	CHORE

Generated by SKILL