v1.2.2

Highlights

• Host sandbox menu: the TUI's Toggle host sandbox command is now a Host sandbox menu that sets CPUs, memory, and LAN access for the project's host sandbox and applies them to a sandbox that is already running. Settings persist per project; a CPU or memory change restarts the sandbox in place, and a LAN change recreates it (confirmed first) because msb fixes network policy at create time.
• LAN access control: sandbox.network.allowLan (default off) opens sandbox egress to the local network, and both host and per-loop sandboxes can override it. Loop sandboxes gain a LAN access row in the loop settings submenu.
• Playwright Chromium replaces Obscura in the sandbox image, exposed as chromium. Google publishes no linux/arm64 Chrome build, so Chromium is the closest Chrome-compatible browser on arm64 hosts and the arch-matched build on amd64.
• Auto-approve honours explicit ask rules: with per-session auto-approve on, every ask resolves to allow unless it matches an autoApprove.deny rule; OpenCode deny rules are still never overridden.
• Sandbox context note reports the sandbox's CPUs, memory, and LAN access, and says once when a sandbox was restarted (a resize) or recreated, naming what was lost.

What's Changed

• feat(sandbox): host sandbox settings and LAN access control (#108)
• docs: correct drift across guides and regenerate API docs