What’s new in Workbox.
New features and improvements, release by release.
Unreleased
main
Added
- An event log per sandbox, read by page, long-poll or WebSocket.
- Signed webhooks, retried across restarts.
- Stored API keys bound to labels or sandbox ids.
- Sessions and files over plain HTTP, any size.
- HTTPS and WSS from workbox serve.
- An OpenAPI 3.1 document of every route.
Security
- Repeated failed authentication is rate limited.
- Keys are stored as SHA-256 digests only.
- Bound keys see only their own sandboxes.
- Webhooks reach public HTTPS endpoints only.
0.1.0-alpha.1
2026-10-28
Added
- Sandboxes from bubblewrap, a user namespace and cgroup v2.
- The in-box runner and the wb command.
- Network modes none, egress and allowlist.
- Seccomp, a fixed capability set and no_new_privs.
- REST and WebSocket API, SDK, MCP server and CLI.
- Claude Code and Codex in the agents rootfs.
Security
- A hash-chained audit log.
- Secrets redacted from output, logs and audit.
- Browser-originated API requests refused.
Where we’re headed.
Now
- A full Hyperfide provider.
Next
- Per-sandbox uid ranges.
- Seccomp argument filtering.
- Idle expiry.
Later
- High availability.
- Lower runner memory.