[shiju-nv]

Summary

Check requested service ports against the driver's approved ports before creating a sandbox or opening a local forwarding listener. Keep enforcing the saved ports on gateway routes, and show whether the target uses isolated loopback or shared host loopback that the operator explicitly allowed.

Related Issue

Closes #5110. Part of #5114. Coordinates with service-exposure issue #4310; merged RFC #4267 provides design context.

Depends on #5204. Review this layer against fix/stopped-driver-watch-fence-c92/shiju-nv, whose current head is 760396e8.

Land #5204 first. Then replay only this PR's changes onto the resulting main and retarget this existing PR.

Changes

• Persist the admitted scope and ports, then enforce them for create, exposure, TCP relays and pooled HTTP connections.
• Preserve authentication, workspace authorization, connection limits and the separate SSH transport path.
• Carry requested ports and admission through CLI, TUI, templates and supported SDKs, including preflight and replayed responses.
• Show admission in CLI output and explain when an older sandbox must be recreated.

Release Notes

Source-breaking API addition for the next minor release only. Complete raw Rust messages need defaults for the new port and admission fields. Upgrade gateway writers together. A legacy driver can omit admission; missing evidence from a negotiated modern driver rejects forwarding until the sandbox is recreated with admitted ports. Maintainers must seed and qualify the minor train before landing; do not merge or backport this into the active patch train.

Testing

• Checks appropriate to the affected code and behavior pass
• Unit tests added/updated (if applicable)
• E2E tests added/updated (if applicable)

Focused verification is reused for the unchanged feature logic and the independently reviewed shared lifecycle correction. Hosted Core E2E passed on this PR's current source. This does not claim installed native-backend qualification.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Architecture docs updated (if applicable)

[github-actions]

Compatibility review (advisory)

New or updated breaking changes; see the full report for all findings.

1. rust-sdk — No explicit risk acceptance found

Previously complete Rust creation-spec and raw-message literals now require new forward_ports or ingress_admission fields.

• Impact: Existing SDK callers and server/mock implementations constructing exhaustive literals fail to compile, while callers using ..Default::default() remain compatible.
• Action: Preserve existing Rust struct shapes in v0.1.7 or defer these additions to a qualified minor train with migration guidance for both curated and raw literals.
• PR: feat(compute)!: check allowed service ports before creating sandboxes or forwards #5116

2. state — No explicit risk acceptance found

Existing sandboxes without status.ingress_admission previously supported forwarding and service routes, but ingress-aware drivers now reject those operations after upgrade.

• Impact: Upgraded deployments lose existing CLI/SDK TCP forwards and HTTP service endpoints until sandbox recreation, returning admission errors or HTTP 404 instead of connecting.
• Action: Preserve supported forwarding for retained sandboxes through an upgrade migration in v0.1.7, or defer the recreation-required behavior to a qualified minor train.
• PR: feat(compute)!: check allowed service ports before creating sandboxes or forwards #5116

Review details

• Execution: complete
• Candidate: PR #5116 (0cee2c2049769e7cc76138b13f7167890a80105a)
• Baseline: c92c2c7983b1307715f6a922366dd3759e41b35b (c92c2c7983b1307715f6a922366dd3759e41b35b)
• Reviewed: rust-sdk, python-sdk, go-sdk, typescript-sdk, api-behavior, cli, configuration, policy, helm, state

Advisory review; publication gates are unchanged.

Branch check run

[github-actions]

Label test:e2e applied for 441d22c. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.