Nayan fc6fd58022 feat(core): sandbox edits to the project under --safe ...

Under --safe, PreToolUse denies any edit or command that resolves outside the
project root. It is a guard rail on the agent's own tool calls rather than an OS
sandbox, which is the right altitude for the threat it addresses: a model
wandering out of the repo, not a hostile one.

2026-07-30 11:02:00 +05:30

..

src

feat(core): sandbox edits to the project under --safe

2026-07-30 11:02:00 +05:30

package.json

feat(core): package shell and the agent adapter contract

2026-07-27 15:58:00 +05:30

tsconfig.json

feat(core): package shell and the agent adapter contract

2026-07-27 15:58:00 +05:30