1 Commits

• feat(extensions): add sandbox extension for OS-level bash sandboxing (#673)

  Uses @anthropic-ai/sandbox-runtime to enforce filesystem and network
  restrictions on bash commands (sandbox-exec on macOS, bubblewrap on Linux).
  
  Features:
  - Per-project config via .pi/sandbox.json
  - Global config via ~/.pi/agent/sandbox.json
  - Enabled by default with sensible defaults
  - --no-sandbox flag to disable
  - /sandbox command to view current config

  Danila Poyarkov · 2026-01-12 23:25:31 +01:00
  4751ebddbd