4.7.1

What's Changed

• Trim documentation and mark GPU support as under development by @gilesknap in #68

Opus 5.5

Update to latest claude code 2.1.280 for Opus 5.5.

Full Changelog: 4.7.0...4.7.1

What's Changed

• Trim documentation and mark GPU support as under development by @gilesknap in #68

Full Changelog: 4.7.0...4.7.1

4.7.0

What's Changed

• docs: add concise browser and VS Code automation guides by @gilesknap in #61
• docs: group how-to guides into sections by @gilesknap in #63
• Add opt-in GPU and device passthrough by @gilesknap in #65

Full Changelog: 4.6.2...4.7.0

What's Changed

• docs: add concise browser and VS Code automation guides by @gilesknap in #61
• docs: group how-to guides into sections by @gilesknap in #63
• Add opt-in GPU and device passthrough by @gilesknap in #65

Full Changelog: 4.6.2...4.7.0

4.6.2

What's Changed

• fix mouse chars problem with garbage when claude is killed by @gilesknap in #60

Full Changelog: 4.6.1...4.6.2

What's Changed

• fix mouse chars problem with garbage when claude is killed by @gilesknap in #60

Full Changelog: 4.6.1...4.6.2

4.6.1

What's Changed

• Show the prompt tag in white without the host name by @gilesknap in #59

Full Changelog: 4.6.0...4.6.1

4.6.0

New: tell containers apart

Each project container now has a short tag, such as myproj-3f2a. Run claude-sandbox doctor to see what is set up, and claude-sandbox doctor --fix to show host:tag in the Claude status line, the Pi footer and your zsh and bash prompts. --fix backs up every file it changes.

Existing containers have no tag. Run claude-sandbox --recreate to get one, then log in to GitHub or GitLab again.

What's Changed

• Tag each container and add claude-sandbox doctor by @gilesknap in #58

Full Changelog: 4.5.0...4.6.0

4.5.0

Upgrade note: the parent-directory mount is now opt-in

The host launcher no longer mounts the project's parent directory by default. Pass --peers before the verb when you create a container, for example claude-sandbox --peers pi, to open sibling projects from claude-sandbox shell. --no-peers is still accepted.

A container created by 4.4.0 keeps its parent mount. The launcher warns about it on reuse. Run claude-sandbox --recreate to drop the mount, then log in to GitHub or GitLab again.

What's Changed

• Stop false skill-shadow warnings and hold pre-launch warnings by @gilesknap in #56
• Readable launcher messages, warning pause and opt-in --peers by @gilesknap in #57

Full Changelog: 4.4.0...4.5.0

What's Changed

• Stop false skill-shadow warnings and hold pre-launch warnings by @gilesknap in #56
• Readable launcher messages, warning pause and opt-in --peers by @gilesknap in #57

Full Changelog: 4.4.0...4.5.0

4.4.0

What's Changed

• Simplify sandbox setup, ship audit/browser skills, and add optional peer isolation by @gilesknap in #55

Full Changelog: 4.3.0...4.4.0

4.4.0-beta.2

Full Changelog: 4.4.0-beta.1...4.4.0-beta.2

4.4.0-beta.1 — astra cleanup preview

Beta for astra-cleanup PR #55, left unmerged for maintainer testing.

Changes

• Preserve command exit status and multiline/empty arguments through sandbox launch.
• Correct repeated writable mounts and safely render Git identity after reading sandbox configuration.
• Share the image/devcontainer installation sequence and gate releases on network enforcement and lint checks.
• Remove managed session/prompt hooks, legacy migration, handwritten typo hints, and the unused installation workspace setting.
• Run claude-sandbox verify directly through the sandbox without starting an AI session; update the docs to match.

Try it

uv tool install --force 'claude-sandbox==4.4.0b1'
claude-sandbox --recreate
claude-sandbox verify

Recreate the project container for this beta. Recreation drops container-local packages and forge logins; reapply those as needed. This release intentionally does not migrate old managed hook settings. The supported entry point remains the sandbox wrapper; direct invocation of an off-PATH vendor binary no longer triggers a managed hook.

The matching container image is ghcr.io/diamondlightsource/claude-sandbox:4.4.0-beta.1 for AMD64 and ARM64.

4.3.0

What's Changed

• Share ~/.agents/skills read-write with every agent session (ADR 25) by @gilesknap in #53
• Launcher: bind the project's parent read-write; skill notes by @gilesknap in #54

Full Changelog: 4.2.2...4.3.0