Skip to content

v1.2.0 — sandboxed agents + label prefixes

Choose a tag to compare

@aron98 aron98 released this 20 Oct 10:30
· 19 commits to main since this release
  • Sandboxed agents: client-only mode (LOAD_LOCK_NO_SPAWN) — sandboxed clients never auto-spawn a local daemon, and fail loudly with a pointer to the new docs (#29)
  • New Sandboxes section in docs/OPERATIONS.md: bridged-socket recipes for bubblewrap (live-verified), omac, Docker, macOS seatbelt (contract-inspected), and an honest statement on WSL2 (#29)
  • Label prefixes: LOAD_LOCK_LABEL_PREFIX env, --label-prefix CLI flag and MCP label_prefix input tag every acquire; the daemon composes holder labels (e.g. omac:issue-42 build) so the dashboard shows which sandbox an agent runs in (#29)
  • Lease-mode permit lifecycle (mark_started + heartbeat + untrackedLeaseMs) documented as the cross-PID-namespace lifecycle, including the attach_pid hazard (#29)
  • OpenCode TUI: removed the gl keymap binding, which swallowed plain g typing; the dashboard opens via /load-lock, the command palette, or the sidebar widget click (#28)

Tests: 120/120 green.