agent-compose v2610.3.0

What's Changed

• fix(driver): install the microsandbox runtime in its resolved home by @kingfs in #794
• ci(upstream): check native runtime drivers upstream daily by @kingfs in #798
• chore(deps): bump guest providers to Codex 0.163.0 and Claude 2.1.304 by @kingfs in #797
• chore(pi): upgrade Pi agent to 1.3.0 by @kingfs in #799
• feat(driver): make microsandbox DNS rebind protection configurable by @winterfx in #801
• fix(driver): drop NET_RAW from Docker and Kubernetes sandboxes by @winterfx in #802
• feat(runs): guest-side detach for command, agent and clientless interactive runs by @winterfx in #792
• fix(runs): reject unsupported secret command env by @Heisenhower in #800
• feat(llms): mint command facades for dsh commands by @yorkew-east8 in #807
• feat(egress)!: add network policy modes, daemon bounds, and audit reporting by @ai-wyz in #803
• feat(capproxy): 全局网关路径转发 x-octobus-project-id by @winterfx in #808
• feat(driver): allow explicit docker sandbox network by @winterfx in #809
• feat(driver): add sandbox-host process to survive daemon upgrades by @winterfx in #805
• fix(codex): preserve sandbox credentials in shell environment by @lmy375 in #816
• feat(api): report stable reason and effect for RPC failures by @winterfx in #813
• chore(deps): bump proto module to v0.1.16 by @winterfx in #818

New Contributors

• @ai-wyz made their first contribution in #803

Full Changelog: v2610.2.0...v2610.3.0