AgentENV Files

📖 Documentation for this release: https://kvcache-ai.github.io/AgentENV/v0.1.3/

Features

• snapshot: Add artifact dimension to OSS upload observability (#168) — @huajq
• sandbox: Generate envd access token for secure sandboxes — @LSX-s-Software
• sandbox: Generate envd access token seed when unconfigured — @LSX-s-Software
• sandbox: Make shared access token seed optional (#127) — @LSX-s-Software
• observability: Add overlaybd/ext4 usage gauges on restack snapshot (#178) — @huajq
• Add single-tenant API key authentication — @yingdi-shan
• oss: Support configurable S3 addressing style (#176) — @guozy18
• Enable dirty-page tracking by default — @Hygge-Gezelligheid

Bug Fixes

• Sanitize singleton CPU config intersections (#150) — @zlzGithub-0801
• snapshot: Preserve exported image config (#154) — @huajq
• overlaybd: Clear cache bitmap before destructive eviction steps (#161) — @huajq
• sandbox: Reject overriding reserved MMDS fields — @LSX-s-Software
• p2p: Do not cache lookup timeouts as misses (#152) — @WindSongShaoGe
• overlaybd: Preserve premerged-index cache during full-file cache recovery (#170) — @huajq
• gateway: Proxy sandbox-routed metrics requests (#159)
• snapshot: Parallelize OSS layer uploads and skip publish-time re-hash (#177) — @huajq
• overlaybd: Offload premerged index prune scan and trigger it by cache growth — @YXalix
• ublk-daemon: Adopt jemalloc (#179) — @YXalix
• snapshot: Revert digest tracking on compaction output paths (#185) — @huajq
• Derive sandbox access tokens from shared seed — @yingdi-shan
• Harden managed secret loading — @yingdi-shan
• Enforce authentication boundaries — @yingdi-shan
• Preserve sandbox metrics auth (#123) — @yingdi-shan
• Disable dirty-page tracking for pvm (#190) — @Hygge-Gezelligheid
• network: Tighten sandbox egress chain and gateway ingress chain (#186) — @LSX-s-Software
• Filter KVM-managed CPUID leaf 0x1f (#193) — @zlzGithub-0801
• Clarify compose docs and cli auth errors (#195) — @yingdi-shan

Improvements

• snapshot: Always use direct OverlayBD packaging (#136) — @Hygge-Gezelligheid
• Simplify shared authentication secrets — @yingdi-shan

Performance

• server: Shorten jemalloc page decay via malloc_conf — @huajq
• sandbox: Run firecracker pool runtime on one worker thread (#162) — @huajq
• network: Skip empty egress programming on clean slots — @LSX-s-Software

Documentation

• Update egress control docs (#166) — @LSX-s-Software
• Add mermaid charts for better readability (#167) — @LSX-s-Software
• deploy: Clarify gateway ports and shared storage requirements (#175) — @zlzGithub-0801
• Document API key setup in README — @yingdi-shan