@kokorolx/ai-sandbox-wrapper 2.6.0 → 3.0.0

package/README.md

@@ -4,7 +4,7 @@
 
 Protect your SSH keys, API tokens, and system files while using AI tools that need filesystem access.
 
-*Last updated: February 9, 2026*
+*Last updated: February 25, 2026*
 
 ---
 
@@ -33,21 +33,24 @@ Protect your SSH keys, API tokens, and system files while using AI tools that ne
 
 ## ✨ What's New
 
-### v2.3.0-beta: Web Mode & Port Exposure
+### v2.7.0: Git Fetch-Only Mode & Bundled Skills
 
-- **Web Auto-Detection**: `opencode web` automatically exposes port 4096 and injects `--hostname 0.0.0.0`
-- **`--expose` Flag**: New way to expose ports (replaces deprecated `PORT` env var)
-- **Port Conflict Detection**: Fails fast if port is already in use
+- **Git Fetch-Only**: Allow git fetch/pull but block push — perfect for AI agents that should read but not write
+- **Bundled Skills**: RTK token optimizer skills auto-installed for OpenCode users
+- **SSH Config Fix**: Resolved crash during git credential setup
 
 ```bash
-# Web mode - automatic port exposure
-opencode web
+# Fetch-only mode (no push allowed)
+opencode --git-fetch
 
-# Custom port
-opencode web --port 8080
+# Or select from interactive menu:
+#   4) Fetch only - allow once (no push, this session)
+#   5) Fetch only - always for this workspace (no push)
 
-# Expose additional ports
-opencode --expose 3000,5555 web
+# Manage via CLI
+npx @kokorolx/ai-sandbox-wrapper git fetch-only ~/projects/myrepo
+npx @kokorolx/ai-sandbox-wrapper git full ~/projects/myrepo
+npx @kokorolx/ai-sandbox-wrapper git status
 ```
 
 ---
@@ -172,8 +175,21 @@ Git credentials are **not** shared by default. When you run a tool, you'll be pr
 ```
 🔐 Git Access Control
   1) Yes, allow once
-  2) Yes, always allow for this workspace  
+  2) Yes, always allow for this workspace
   3) No, keep Git disabled (secure default)
+  4) Fetch only - allow once (no push, this session)
+  5) Fetch only - always for this workspace (no push)
+```
+
+**Fetch-only mode** allows `git fetch`, `git pull`, `git clone` but blocks `git push`. Uses git's `pushInsteadOf` config — no network restrictions needed.
+
+```bash
+# Force fetch-only via flag
+opencode --git-fetch
+
+# Manage via CLI
+npx @kokorolx/ai-sandbox-wrapper git fetch-only ~/projects/myrepo
+npx @kokorolx/ai-sandbox-wrapper git full ~/projects/myrepo
 ```
 
 ### Clipboard
@@ -233,6 +249,17 @@ After installation, configure your MCP client (e.g., OpenCode) to use them:
 
 > **Note:** The `--no-sandbox` flags are required when running in Docker containers. This is safe because the container itself provides isolation.
 
+### Bundled Skills (OpenCode)
+
+OpenCode containers auto-install these skills on first run (existing skills are never overwritten):
+
+| Skill | Description |
+|-------|-------------|
+| `rtk` | Command reference for RTK token optimizer (60-90% token savings) |
+| `rtk-setup` | Persistent RTK enforcement — updates AGENTS.md and propagates to subagents |
+
+Skills are copied to `~/.config/opencode/skills/` and available immediately.
+
 ---
 
 ## 📁 Directory Structure
@@ -290,6 +317,9 @@ opencode -e 3000,4000         # Multiple ports
 # Network
 opencode -n mynetwork         # Join Docker network
 
+# Git fetch-only
+opencode --git-fetch            # Fetch only (no push)
+
 # Management
 npx @kokorolx/ai-sandbox-wrapper workspace list
 npx @kokorolx/ai-sandbox-wrapper clean