openwrk 0.11.29 → 0.11.30

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -50,6 +50,45 @@ The command prints pairing details (OpenWork server URL + token, OpenCode URL +
50
50
  Use `--detach` to keep services running and exit the dashboard. The detach summary includes the
51
51
  OpenWork URL, tokens, and the `opencode attach` command.
52
52
 
53
+ ## Sandbox mode (Docker / Apple container)
54
+
55
+ `openwrk` can run the sidecars inside a Linux container boundary while still mounting your workspace
56
+ from the host.
57
+
58
+ ```bash
59
+ # Auto-pick sandbox backend (prefers Apple container on supported Macs)
60
+ openwrk start --sandbox auto --workspace /path/to/workspace --approval auto
61
+
62
+ # Explicit backends
63
+ openwrk start --sandbox docker --workspace /path/to/workspace --approval auto
64
+ openwrk start --sandbox container --workspace /path/to/workspace --approval auto
65
+ ```
66
+
67
+ Notes:
68
+
69
+ - `--sandbox auto` prefers Apple `container` on supported Macs (arm64), otherwise Docker.
70
+ - Docker backend requires `docker` on your PATH.
71
+ - Apple container backend requires the `container` CLI (https://github.com/apple/container).
72
+ - In sandbox mode, sidecars are resolved for a Linux target (and `--sidecar-source` / `--opencode-source`
73
+ are effectively `downloaded`).
74
+ - Custom `--*-bin` overrides are not supported in sandbox mode yet.
75
+ - Use `--sandbox-image` to pick an image with the toolchain you want available to OpenCode.
76
+ - Use `--sandbox-persist-dir` to control the host directory mounted at `/persist` inside the container.
77
+
78
+ ### Extra mounts (allowlisted)
79
+
80
+ You can add explicit, validated mounts into `/workspace/extra/*`:
81
+
82
+ ```bash
83
+ openwrk start --sandbox auto --sandbox-mount "/path/on/host:datasets:ro" --workspace /path/to/workspace
84
+ ```
85
+
86
+ Additional mounts are blocked unless you create an allowlist at:
87
+
88
+ - `~/.config/openwork/sandbox-mount-allowlist.json`
89
+
90
+ Override with `OPENWRK_SANDBOX_MOUNT_ALLOWLIST`.
91
+
53
92
  ## Logging
54
93
 
55
94
  `openwrk` emits a unified log stream from OpenCode, OpenWork server, and Owpenbot. Use JSON format for
package/dist/openwrk CHANGED
Binary file
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "openwrk",
3
- "version": "0.11.29",
3
+ "version": "0.11.30",
4
4
  "description": "Headless OpenWork host orchestrator for OpenCode + OpenWork server + Owpenbot",
5
5
  "type": "module",
6
6
  "bin": {