What's new in 0.12.0¶
Published on 2026-10-15: Python SDK rayito 0.12.0, TypeScript SDK
rayito 0.12.0 and rayd 0.12.0.
0.12.0 brings the management dashboard: see and govern your sandboxes (quotas, cost, inventory, images, events) without leaving your AWS account. Everything is optional and off by default: without instantiating or deploying, there is no new call or resource.
There are no API-breaking changes.
At a glance¶
| What | Python | TypeScript | Cost |
|---|---|---|---|
| Dashboard services in the SDK | Quotas, UsageCost, Fleet (and their Async* versions) |
Quotas, UsageCost, Fleet |
$0 for reads; Cost Explorer only with billed() |
| Local dashboard | rayito dashboard |
— (the CLI is Python) | $0; --cost-explorer and --events-stack turn on what costs money |
| Dashboard in your account | OptionalStacks().deploy("dashboard", ...) |
new OptionalStacks().deploy("dashboard", ...) |
≈ $0 at rest, by usage |
| CloudWatch dashboard | rayito dashboard cloudwatch; dashboard-cloudwatch stack |
dashboard-cloudwatch stack |
$0 with fewer than 4 dashboards |
| Multiple accounts | rayito dashboard --account NAME=<ARN>; dashboard-read-role stack |
dashboard-read-role stack |
$0 |
| Quota alerts | quota-alerts stack |
quota-alerts stack |
≈ $0.30/month for the metric |
The full table, with IAM and how to turn each feature off, is in Optional features.
The dashboard¶
- Management dashboard (SDK).
Quotasreads the applied quotas and the allocated memory against the region's quota;UsageCostthe billed MicroVM cost and the per-sandbox estimate;Fleetthe inventory, the images and the events, and the bulk actions (kill, suspend, resume), which requireallow_actions=True/allowActions: true. rayito dashboard. A server on127.0.0.1with a build-free page, light and dark, over the/api/v1API. Read-only by default;--allow-actions,--cost-explorerand--events-stackenable the rest.- Dashboard in your account.
The
dashboardstack serves the same page and API from a Lambda with a Function URL and Cognito sign-in, with separate read and action roles and an audit of every action. TheAuthMode=aws-iamvariant signs with SigV4 and rejects anything unsigned before running the function.
Optional extras¶
The three live in Dashboard: extras:
- CloudWatch dashboard:
rayito dashboard cloudwatchprints the JSON without calling AWS and thedashboard-cloudwatchstack deploys it. - Multiple accounts: a read-only view of other accounts through an assumed
role (
dashboard-read-rolestack). - Quota alerts: the
quota-alertsstack publishes to SNS when the allocated memory crosses a threshold, once per crossing.
Other changes¶
- The image variant is recognized with a closed catalog. An image of your
own that starts with
rayito-(for examplerayito-my-app-caps-efs) is no longer interpreted as a known variant.volumes=requiresrayito-base-caps-efswhen the variant is known. dashboard-cloudwatch: an emptyDashboardNameuses the stack's name, so deploying no longer clashes with a dashboard of your own namedrayito. An already deployed stack keeps its name. The region of the widgets added withIncludeOtlporIncludeQuotais also fixed.- Template shortcuts.
Template.dnf_install()andTemplate.npm_install()(dnfInstall()andnpmInstall()in TypeScript) install system and Node.js packages in the image;apt_installnow points todnf_install. See Templates. - TypeScript SDK parity.
SandboxHealth.imdsBlockedsays whetherraydblocked IMDS for the sandbox,sbx.metadatareturnscreate()'smetadataandrayito/e2bexports theChart,ProcessInfo,WriteEntryandWatchHandletypes, with the same names as in Python. - Security.
raydupgradesrustlsto 0.23.46 for RUSTSEC-2026-0346 through 0349. rayito doctorknows the 0.12 series: it requires theraydfrom therayd-v0.12.0tag for SDK 0.12 (Compatibility).
How to upgrade from 0.11.x¶
-
Upgrade the SDK.
-
Republish your image on
rayd0.12.0 (Images).rayito doctorgives FAIL on thecompatibilitycheck with a 0.11 image. - If you want the dashboard, start with Management dashboard.
There are no incompatible changes in the public API from 0.11.x.