Skip to content

Releases: agentfront/enclave

Release list

v2.14.1

v2.14.1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Jun 15:16
v2.14.1
c74b161

Release v2.14.1

Release type: stable
Release line: 2.14.x
Branch: release/2.14.x

Published Packages

[2.14.1] - 2026-06-19

Added

  • Added @types/estree dependency to @enclave-vm/core.
  • Introduced additionalEntryPoints in project.json for distributed entry handling.

Fixed

  • Formatted code blocks for better readability.
  • Streamlined exports in worker.ts by merging type exports into a single line.
Assets 2
Loading

v2.14.0

v2.14.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Jun 21:41
v2.14.0
8587e0b

Release v2.14.0

Release type: stable
Release line: 2.14.x
Branch: release/2.14.x

Published Packages

[2.14.0] - 2026-06-18

Added

  • Introduced InterpreterAdapter and Interpreter, a dependency-free, runtime-agnostic execution path without QuickJS, WASM, or node:vm dependencies.
  • Added libs/core/src/adapters/interpreter-adapter.ts and libs/core/src/interpreter/interpreter.ts for INDEPENDENT sandbox operations.
  • A worker-safe entry point added at libs/core/src/worker.ts that exposes only the dependency-free execution path.

Changed

  • Upgraded all packages to version 2.14.0.
  • Updated several package dependencies and reorganized module exports.

Fixed

  • Minor package.json configuration amendments for consistency.

Security

  • Enhanced security measures by ensuring no host globals are exposed in the Interpreter.
Loading

v2.13.0

v2.13.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Apr 00:03
v2.13.0
01ff760

Release v2.13.0

Release type: stable
Release line: 2.13.x
Branch: release/2.13.x

Published Packages

[2.13.0] - 2026-04-02

Added

  • Introduced OpenAPI integration in @enclave-vm/broker, facilitating automatic tool generation and polling.
  • Implemented OpenApiSource, OpenApiSpecPoller, and OpenApiToolLoader for managing API specifications and tool synchronization.
  • Added CatalogHandler for exposing HTTP catalog of actions from OpenAPI sources.

Changed

  • Enhanced BrokerSession to include deadline management and partial error reporting.
  • Improved session cancellation handling and progress event emissions.

Fixed

  • Fixed session state transitions to handle race conditions more robustly.
Loading

v2.12.0

v2.12.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Feb 13:12
v2.12.0
d20b352

Release v2.12.0

Release type: stable
Release line: 2.12.x
Branch: release/2.12.x

Published Packages

[2.12.0] - 2026-02-25

Added

  • Introduced a new @enclave-vm/browser library for browser sandbox runtime using double iframe isolation.
  • Added a browser demo application with React integration for showcasing Enclave's capabilities.
  • Implemented Playwright e2e tests for @enclave-vm/browser.

Changed

  • Updated @enclave-vm/ast, @enclave-vm/broker, @enclave-vm/stream, and other core modules to version 2.12.0.

Security

  • Enhanced sandbox security with improved blocking mechanisms for eval() and object constructor access.

Fixed

  • Fixed client disconnect handling in streaming demos for Node 20+, ensuring proper cleanup.
Loading

v2.11.1

v2.11.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Feb 12:07
v2.11.1
0ec916f

Release v2.11.1

Release type: stable
Release line: 2.11.x
Branch: release/2.11.x

Published Packages

[2.11.1] - 2026-02-22

Added

  • Introduced coercion-utils.ts in @enclave-vm/ast, which provides utilities for detecting JavaScript coercion patterns in AST nodes.

Changed

  • Enhanced disallowed-identifier.rule.ts and no-global-access.rule.ts to leverage new static key coercion detection from coercion-utils.
  • Improved detection of computed property key expressions that resolve to disallowed identifiers.

Fixed

  • Fixed potential issues where certain coercion patterns were not detected, improving the security guard against CVE vulnerabilities.
Loading

v2.11.0

v2.11.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Feb 22:56
v2.11.0
1dd877c

Release v2.11.0

Release type: stable
Release line: 2.11.x
Branch: release/2.11.x

Published Packages

[2.11.0] - 2026-02-20

Added

  • Introduced additionalDisallowedIdentifiers in @enclave-vm/ast for additional code safety.
  • Implemented a function to handle array-coered strings in disallowed-identifier.rule.ts.

Changed

  • Updated @enclave-vm/* package dependencies to version 2.11.0.
  • Improved handling of configuration scripts and object neutralization in VmAdapter and ParentVmBootstrap.

Fixed

  • Resolved configuration and enumeration issues in memory tracking and sandbox adapter properties.

Security

  • Enhanced security by neutralizing dangerous static methods on the intrinsic Object constructor to avoid prototype pollution.
  • Defense-in-depth improvements: Removed host callbacks after capturing within sandbox scripts.
Loading

v2.10.1

v2.10.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Feb 02:34
v2.10.1
7a9b981

Release v2.10.1

Release type: stable
Release line: 2.10.x
Branch: release/2.10.x

Published Packages

[2.10.1] - 2026-02-03

Security

  • Introduced hardening against CVE-2023-29017 by implementing enhanced prototype freezing and error encapsulation within parent-vm-bootstrap.ts.
  • Added resource exhaustion rule to @enclave-vm/ast to prevent computed access via dangerous string coercion.

Acknowledgments

Changed

  • Replaced template literals with string concatenation in vm-adapter.ts and worker-script.ts to mitigate potential code injection risks.
  • Updated minimatch, zod, and @babel/standalone dependencies to newer versions for better compatibility.

Fixed

  • Addressed potential memory leaks by ensuring proper event handler binding and detachment in worker-pool-adapter.ts.

Added

  • New build-worker-script target to libs/core/project.json for optimized worker script builds using esbuild.
  • Added runtime prototype verification before user code execution to further enhance security validation.

Contributors

cristianstaicu
Loading

v2.10.0

v2.10.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Feb 12:55
v2.10.0
2972333

Release v2.10.0

Release type: stable
Release line: 2.10.x
Branch: release/2.10.x

Published Packages

[2.10.0] - 2026-02-01

Changed

  • Reorganized library structure by renaming libraries for better consistency:
    • ast-guard is now @enclave-vm/ast
    • enclavejs-broker is now @enclave-vm/broker
    • enclavejs-client is now @enclave-vm/client
    • Other corresponding paths and references have been updated accordingly.
Loading

v2.9.2

v2.9.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jan 07:17
v2.9.2
e13a6dc

Release v2.9.2

Release type: stable
Release line: 2.9.x
Branch: release/2.9.x

Published Packages

[2.9.2] - 2026-01-30

Added

  • Introduced support for NDJSON streaming with encryption via @enclave-vm/stream.
  • Added React hooks and components in @enclave-vm/react for enhanced integration.

Fixed

  • Resolved bugs in the @enclave-vm/client SDK for improved browser and Node.js compatibility.

Security

  • Enhanced CVE protection within ast-guard for better threat detection.
Loading

v2.9.1

v2.9.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jan 06:20
v2.9.1
1350080

Release v2.9.1

Release type: stable
Release line: 2.9.x
Branch: release/2.9.x

Published Packages

[2.9.1] - 2026-01-30

Changed

  • No specific changes detailed in this release cycle.

Fixed

  • General stability improvements and minor bug fixes.
Loading