feat: rotation-aware log streaming engine + sdk bindings

.github/workflows/check.yml

@@ -428,13 +428,15 @@ jobs:
       # MSB_TEST_ISOLATE_HOME=1 turns on per-test ~/.microsandbox isolation
       # (see crates/test-utils), so nextest can run tests in parallel without
       # sqlite/image-cache contention.
+      # Keep real microVM/network concurrency bounded even on large self-hosted
+      # runners; num-cpus fan-out can overwhelm guest package installs.
       - name: Run integration tests
         env:
           MSB_TEST_ISOLATE_HOME: "1"
         run: |
           export PATH="$HOME/.microsandbox/bin:$PATH"
           export LD_LIBRARY_PATH="${{ github.workspace }}/build:$HOME/.microsandbox/lib"
-          cargo nextest run -p microsandbox --tests --run-ignored=only
+          cargo nextest run -p microsandbox --tests --run-ignored=only --test-threads 4
 
   # ---------------------------------------------------------------------------
   # Node.js SDK smoke tests (requires KVM)

Cargo.toml

@@ -76,6 +76,7 @@ indicatif = "0.18"
 ipnetwork = { version = "0.21.0", features = ["serde"] }
 libc = "0.2"
 nix = "0.30"
+notify = "8"
 oci-client = "0.16"
 oci-spec = "0.9.0"
 rand = "0.10.1"

crates/cli/Cargo.toml

@@ -29,10 +29,13 @@ net = [
 
 [dependencies]
 anyhow.workspace = true
+base64.workspace = true
+bytes.workspace = true
 chrono.workspace = true
 clap.workspace = true
 console.workspace = true
 dirs.workspace = true
+futures.workspace = true
 indicatif.workspace = true
 ipnetwork = { workspace = true, optional = true }
 libc.workspace = true