Repository navigation
v1.2.0 — sandboxed agents + label prefixes
- Sandboxed agents: client-only mode (
LOAD_LOCK_NO_SPAWN) — sandboxed clients never auto-spawn a local daemon, and fail loudly with a pointer to the new docs (#29) - New Sandboxes section in docs/OPERATIONS.md: bridged-socket recipes for bubblewrap (live-verified), omac, Docker, macOS seatbelt (contract-inspected), and an honest statement on WSL2 (#29)
- Label prefixes:
LOAD_LOCK_LABEL_PREFIXenv,--label-prefixCLI flag and MCPlabel_prefixinput tag every acquire; the daemon composes holder labels (e.g.omac:issue-42 build) so the dashboard shows which sandbox an agent runs in (#29) - Lease-mode permit lifecycle (mark_started + heartbeat +
untrackedLeaseMs) documented as the cross-PID-namespace lifecycle, including the attach_pid hazard (#29) - OpenCode TUI: removed the
glkeymap binding, which swallowed plaingtyping; the dashboard opens via/load-lock, the command palette, or the sidebar widget click (#28)
Tests: 120/120 green.