Changes: pi-docker-sandbox

1.30.0 (2026-10-27)#

Features#

image: add chromium for the Playwright MCP server (7e24a16)
wrapper: pass FIGMA_API_KEY from FIGMA_API_KEY_CMD (2d02108)

1.29.1 (2026-10-27)#

Bug Fixes#

kube: tell the agent the kube.json opt-ins and relay exec/attach/port-forward (a830ebb)

1.29.0 (2026-10-26)#

Features#

hermit: pin Hermit and its index, toolsets per project (19183b6)

1.28.0 (2026-10-26)#

Features#

kube: access modes and secrets/tunnels opt-ins per kube.json (1ae9091)

1.27.0 (2026-10-25)#

Features#

config: read SSH host keys from a command (known_hosts reuse) (12f4639)

1.26.0 (2026-10-24)#

Features#

config: SSH hosts per level through an ssh-agent sidecar (c008c72)

1.25.0 (2026-10-19)#

Features#

config: allow pod logs and rollout restart through kube-proxy (b10d054)
config: kubeconfig per level through a kube-proxy sidecar (2b9daf4)

1.24.0 (2026-10-18)#

Features#

sandbox: pass TELEGRAM_BOT_TOKEN from a .env command (aca74a5)

1.23.0 (2026-10-18)#

Features#

credentials: keep the gh sign-in per domain (aa48765)
image: add the GitHub CLI gh for repo reading (160e587)

1.22.1 (2026-10-18)#

Bug Fixes#

credentials: re-unlock Bitwarden when BW_SESSION is stale (9bbebc4)

1.22.0 (2026-10-18)#

Features#

credentials: unlock a locked Bitwarden vault at session start (1488c8e)

1.21.1 (2026-10-18)#

1.21.0 (2026-10-18)#

Features#

config: pass a Gateway model key into the session (9c64727)

1.20.0 (2026-10-17)#

Features#

image: add RTK binary for bash output compression (316134c)

Bug Fixes#

image: bump pinned jq to 1.6-2.1+deb12u3 (fa66534)
image: cross-compile rtk for arm64 against bookworm glibc (075a184)
image: install rtk on amd64 only (d4debb1)
image: pin every build stage to the target platform (91fbbb9)
image: pin the arm64 rtk loader path and print loader and glibc version (54bfb95)

1.19.0 (2026-10-13)#

Features#

sandbox: add kubectl, talosctl and yamllint with per-domain kube/talos config (c3e46ba)
sandbox: keep the Hermit cache in the domain volume (74d4eef)

1.18.1 (2026-10-12)#

Bug Fixes#

workspace: accept clone URLs on another host name when the path matches (5e8d405)

1.18.0 (2026-10-11)#

Features#

sandbox: trust ssh host keys in all sessions via known-hosts command (9403c67)

1.17.2 (2026-10-10)#

1.17.1 (2026-10-10)#

1.17.0 (2026-10-09)#

Features#

packages: accept package entries in object form (d02b6e6)

1.16.3 (2026-10-09)#

1.16.2 (2026-10-08)#

Performance Improvements#

context: drop the generated date from the session context (bb7a2e2)

1.16.1 (2026-10-08)#

1.16.0 (2026-10-07)#

Features#

push: push credential per domain and git host, ssh key or https token (5553308)

Bug Fixes#

release: start over when main moves during the release (6540afb)

1.15.0 (2026-10-07)#

Features#

opt-in SSH push from sessions with a per-domain key and a pre-push guard (1807050)

Bug Fixes#

avoid shellcheck SC2015 in the push key checks (5fd70b8)

1.14.0 (2026-10-06)#

Features#

MCP secrets shared by all domains (581dce6)

1.13.1 (2026-10-06)#

Bug Fixes#

name the secret command when it prints nothing; check set forge types (97595fb)

1.13.0 (2026-10-05)#

Features#

clone whole forge groups into the workspace with ghorg (ec7e5cb)

1.12.0 (2026-10-05)#

Features#

AWS MCP proxy, STACKIT and Hetzner Cloud CLIs, ghorg in the image (02548b4)

1.11.1 (2026-10-05)#

Bug Fixes#

refuse symlinked config levels, name sizes per level (cf9a92e)

1.11.0 (2026-10-05)#

Features#

instructions, skills and prompt templates per level (0560301)

1.10.0 (2026-10-05)#

Features#

micro as the terminal editor in the image (7bf362b)

1.9.0 (2026-10-05)#

Features#

pi-sandbox config init for existing domains (3f40083)

1.8.0 (2026-10-04)#

Features#

layered settings and MCP servers per context (pi-config spec 007) (deacf9c)

1.7.0 (2026-10-04)#

Features#

session history per domain with retention (pi-config spec 006) (63ad6ef)

1.6.1 (2026-10-04)#

Bug Fixes#

just gate uses the first configured domain (100a286)

1.6.0 (2026-10-04)#

Features#

configurable memory domains (pi-config spec 005) (3d172c6)

1.5.1 (2026-10-04)#

Bug Fixes#

suppress Docker CLI hints after non-zero exits (55357ae)

1.5.0 (2026-10-04)#

Features#

nested workspaces and a memory tree along the project path (5f5b8aa)

1.4.2 (2026-10-04)#

Bug Fixes#

give npm the install-script allow-list from pi-config (agent/npmrc) (783cea3)

1.4.1 (2026-10-04)#

Bug Fixes#

memory check also catches credentials in URLs, IPv6 and large files (1ea9db3)

1.4.0 (2026-10-04)#

Features#

memory hygiene checks in memory-sync and pi-sandbox memory-check (f3b3188)

1.3.1 (2026-10-03)#

Bug Fixes#

context file could be missing with a large briefing (SIGPIPE race) (4d1afe0)

1.3.0 (2026-10-03)#

Features#

warn when the sandbox checkout is not on main (13aac4e)

1.2.1 (2026-10-03)#

Bug Fixes#

release: prune old image versions before pushing (package quota) (3cbee71)

1.2.0 (2026-10-03)#

Features#

pull the pinned image on every start (e0aeb19)

1.1.2 (2026-10-03)#

1.1.1 (2026-10-03)#

1.1.0 (2026-10-03)#

Features#

expose the image release version as PI_SANDBOX_VERSION (23a2068)

1.0.1 (2026-10-03)#

Bug Fixes#

release: build the image before tagging; add publish-image recovery (dcfe922)

1.0.0 (2026-10-03)#

Features#

domain-scoped memory, session context and reviewed memory sync (c87837c)
hardened pi sandbox container and pi-sandbox command (6cb73e7)
install pinned pi packages on start; add native build toolchain (7b64f1d)
just quickstart runs the automated quickstart validation (089e7c0)
onboarding guide, docs coverage check and network cleanup (f06626b)
read secrets from a password-manager command (a016bbc)
run the released sandbox image <repo>:<VERSION> (aaacdf4)

Bug Fixes#

ci: docker CLI for checks, podman for the image release (a9c9af6)
memory sync trusts the mounted store; stronger isolation and sync tests (78a2765)
release: pin conventionalcommits preset 9.3.1 (ac345c5)