opensandbox-group/OpenSandbox python/sandbox/v0.1.14

Python Sandbox SDK v0.1.14

on GitHub

What's New

✨ Features

• Isolation convenience APIs — sandbox.isolation.run_once(code, workspace=...) for one-shot create → run → delete flows, and async with sandbox.isolation.session(req) / with ... session(req) for scoped multi-run workflows. Cleanup is best-effort so it never masks the original exception. Available on both async and sync clients. (#1222)
• List isolated sessions — sandbox.isolation.list() (async + sync). (#1269)
• Isolated bind mounts — CreateIsolatedSessionRequest.binds accepts BindMount(source, dest, readonly) for arbitrary host→namespace path mappings; also exposes the previously missing uid_mode. Threaded through the run_once helper as well. (#1264)
• Sandbox pool destroy — SandboxPoolManager FORCE-destroy support with DESTROYING fence + DESTROYED tombstone; both in-memory and Redis stores implement the new tombstone semantics. Failed destroys leave the pool in DESTROYING so callers can retry safely. (#1225)
• Credential Vault placeholder substitutions — opt-in placeholders for path / query / header / body request surfaces (incl. passthrough bindings). (#1251)
• Endpoint cache with inflight dedup — cache (sandbox_id, port, use_server_proxy) → Endpoint to avoid repeated HTTP roundtrips. Default on: TTL 600s, MaxSize 1024, configurable via ConnectionConfig; kill() actively invalidates cached entries. (#1133)
• Sandbox extensions in lifecycle responses — CreateSandboxResponse and Sandbox models now expose extensions, restoring Kubernetes opensandbox.io/extensions.* annotations as opensandbox.extensions.* in response data. (#1112)
• IsolationService / IsolationServiceSync protocols now include run_once and session — built-in adapters inherit default implementations via IsolationServiceMixin, but custom protocol implementations must satisfy the extended contract. (#1222)
• CredentialMatch.ports removed; intercept port is derived from scheme (http→80, https→443). Drop any ports=[...] arguments. (#1189)
• PoolStateStoreContentionError removed (never actually raised by in-memory or Redis stores). (#1198)

🐛 Bug Fixes

• Handled adapter warnings/errors are demoted so they no longer surface as noisy tracebacks, while still remaining visible in logs.
• Python SDK logging unified to f-strings.

🔒 Security

• Patch 21 Dependabot CVEs — bumps pydantic-settings → 2.14.2, python-multipart → 0.0.32, starlette → 1.3.1, cryptography → 49.0.0, pyjwt → 2.13.0 via pyproject.toml lower bounds and [tool.uv] constraint-dependencies for transitive deps. Resolves all open Dependabot alerts for Python packages. (#1145)

📦 Misc

• Removed unused server-side PendingSandbox async provisioning path and corrected the POST /sandboxes 202 spec — both Docker and K8s provision synchronously and return Running directly, so no polling loop is needed. Regenerated Python API clients accordingly. (#1178)
• Repository metadata URLs in pyproject.toml now point at opensandbox-group/OpenSandbox. (#1135)
• Bumped the Python sandbox SDK fallback_version to 0.1.14 and aligned the default User-Agent (OpenSandbox-Python-SDK/0.1.14, async + sync) which had drifted behind the released version. A regression test now locks the User-Agent to the package version. (#1248)

👥 Contributors

• @GreenShadeZhang
• @jianpingpei
• @jwx0925
• @ninan-nn
• @Pangjiping
• @ryanzhang-oss