zidane 7.0.32 → 7.1.1

package/README.md

@@ -739,6 +739,25 @@ createDockerContext({ image: 'node:22', cwd: '/workspace', limits: { memory: 512
 createSandboxContext(myProvider)  // implement SandboxProvider
 ```
 
+### OS sandbox for the process context
+
+The in-process context can wrap the model's shell commands in the OS sandbox
+(macOS Seatbelt via `sandbox-exec`, Linux bubblewrap) — the same boundary
+Claude Code and Codex use. Writes are confined to `cwd`, temp dirs, a
+worktree's git dir and any extra roots; `~/.ssh`, `~/.aws`, credential files
+are unreadable; network is allow-all or deny-all. `write_file` / `edit` honor
+the same roots in-process. Fails closed when the backend is missing.
+
+```ts
+import { createProcessContext, resolveWritableRoots } from 'zidane'
+
+createProcessContext({ cwd, isolation: { writableRoots: resolveWritableRoots(cwd), network: 'allow' } })
+```
+
+In the TUI / GUI: Settings → Agent → **Sandbox shell commands** (+ **Sandbox
+network**, **Sandbox writable paths**). See `docs/EXECUTION_CONTEXT.md` for
+scope and limits.
+
 ### E2B
 
 A ready-made `SandboxProvider` backed by [E2B](https://e2b.dev) ships behind its

package/dist/{acp-bBDF-dhy.js → acp-B5UfEhMd.js}

@@ -1,9 +1,9 @@
 import { P as defaultPromptMessage } from "./openai-compat-Dy56weK8.js";
 import { u as toolResultToText } from "./types-CWgENVLY.js";
-import { Ct as basic_default, lr as readStateKey, or as hashContent, t as createAgent, ur as resolveReadStateMap } from "./agent-BCG9JcZl.js";
-import { r as createProcessContext } from "./contexts-BSFQVclW.js";
+import { Ct as basic_default, lr as readStateKey, or as hashContent, t as createAgent, ur as resolveReadStateMap } from "./agent-_xxElOgH.js";
+import { r as createProcessContext } from "./contexts-CRE9pw07.js";
 import { u as errorMessage } from "./errors-DKiMrOKq.js";
-import { o as loadSession, t as createSession } from "./session-CVy-2mAy.js";
+import { o as loadSession, t as createSession } from "./session-BqRP1hS7.js";
 import { t as effectiveInputFromTurn } from "./stats-DAKBEKjc.js";
 import { a as successResponse, i as errorResponse, r as createJsonRpcConnection } from "./json-rpc-rSWMUh9b.js";
 import { r as fetchUrl } from "./fetch-url-ma-5_p0p.js";
@@ -1764,4 +1764,4 @@ function runAcpStdioServer(options) {
 //#endregion
 export { wrapToolsForAcpClient as a, sessionBlocksToAcp as c, StartUsageError as d, buildStartLocalOptions as f, startProviderNames as h, withAcpDefaultTools as i, stopReasonFromRun as l, startLocalArgOptions as m, AcpProtocolError as n, acpMcpServersToZidane as o, parseStartArgValues as p, createAcpServer as r, acpPromptToPromptParts as s, runAcpStdioServer as t, toolResultToAcpContent as u };
 
-//# sourceMappingURL=acp-bBDF-dhy.js.map
+//# sourceMappingURL=acp-B5UfEhMd.js.map