[shiju-nv]

Summary

A requested service port should be rejected before provisioning a sandbox or opening a local forwarding listener when the driver cannot admit it. This checks create, exposure and forwarding requests against a retained driver admission record, and shows whether the target uses isolated or operator-approved shared-host loopback.

Related Issue

Closes #5110. Part of #5114. Coordinates with service-exposure issue #4310; merged RFC #4267 provides design context.

Depends on #5204. Review this layer against fix/stopped-driver-watch-fence-c92/shiju-nv, whose current head is 760396e8.

Land #5204 first. Then replay only this PR's changes onto the resulting main and retarget this existing PR.

Changes

• Persist the admitted scope and ports, then enforce them for create, exposure, TCP relays and pooled HTTP connections.
• Preserve authentication, workspace authorization, connection limits and the separate SSH transport path.
• Carry requested ports and admission through CLI, TUI, templates and supported SDKs, including preflight and replayed responses.
• Show admission in CLI output and explain when an older sandbox must be recreated.

Release Notes

Source-breaking API addition for the next minor release only. Complete raw Rust messages need defaults for the new port and admission fields. Upgrade gateway writers together. A legacy driver can omit admission; missing evidence from a negotiated modern driver rejects forwarding until the sandbox is recreated with admitted ports. Maintainers must seed and qualify the minor train before landing; do not merge or backport this into the active patch train.

Testing

• Checks appropriate to the affected code and behavior pass
• Unit tests added/updated (if applicable)
• E2E tests added/updated (if applicable)

Focused verification is reused for the unchanged feature logic and the independently reviewed shared lifecycle correction. Hosted E2E qualification for the new stacked head remains pending.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Architecture docs updated (if applicable)

[github-actions]

Compatibility review (advisory)

New or updated breaking changes; see the full report for all findings.

1. rust-sdk — No explicit risk acceptance found

Previously complete Rust creation-spec and raw-message literals now require new forward_ports or ingress_admission fields.

• Impact: Existing SDK callers and server/mock implementations constructing exhaustive literals fail to compile, while callers using ..Default::default() remain compatible.
• Action: Preserve existing Rust struct shapes in v0.1.7 or defer these additions to a qualified minor train with migration guidance for both curated and raw literals.
• PR: feat(compute)!: admit service ports before provisioning #5116

2. state — No explicit risk acceptance found

Existing sandboxes without status.ingress_admission previously supported forwarding and service routes, but ingress-aware drivers now reject those operations after upgrade.

• Impact: Upgraded deployments lose existing CLI/SDK TCP forwards and HTTP service endpoints until sandbox recreation, returning admission errors or HTTP 404 instead of connecting.
• Action: Preserve supported forwarding for retained sandboxes through an upgrade migration in v0.1.7, or defer the recreation-required behavior to a qualified minor train.
• PR: feat(compute)!: admit service ports before provisioning #5116

Review details

• Execution: complete
• Candidate: PR #5116 (0cee2c2049769e7cc76138b13f7167890a80105a)
• Baseline: c92c2c7983b1307715f6a922366dd3759e41b35b (c92c2c7983b1307715f6a922366dd3759e41b35b)
• Reviewed: rust-sdk, python-sdk, go-sdk, typescript-sdk, api-behavior, cli, configuration, policy, helm, state

Advisory review; publication gates are unchanged.

Branch check run

[github-actions]

Label test:e2e applied for 441d22c. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.