v2.11.1

A fix release: jailed programs can set the window title again, and --dry-run
no longer writes to the host.

Backward compatible: every pre-2.11.1 .ai-jail keeps working.

Fixed

• Window titles work without --terminal-passthrough (#184). Since the
  OSC allowlist moved behind that opt-in, a jailed program could not set the
  window title at all: ai-jail claude kept the launch title instead of
  "✳ Claude Code", and opencode's tab never updated. Titles (OSC 0/1/2) now
  pass by default on both screens — rebuilt by ai-jail from printable text
  only: valid UTF-8, at most 1024 bytes, no control characters, emitted as a
  fresh ESC ] N ; text BEL. The child's raw sequence bytes never reach the
  terminal. Everything else stays behind the opt-in exactly as before:
  clipboard read and write (OSC 52), the color and capability queries, and
  the title report (CSI 21 t), so a title cannot be read back into the
  child's input. Thanks @diogochaves.

• --dry-run no longer creates host directories (#185). A dry run ran
  the same mount discovery as a launch, and discovery created what some
  mounts needed: --browser=soft created
  ~/.local/share/ai-jail/browsers/<browser>, and --overlay-map created
  the project's .ai-jail-overlays/<name>/{upper,work} plus its
  .gitignore. Discovery now distinguishes a launch from a dry run: the
  printed command is unchanged, existing overlay storage is still validated
  (including the symlink refusals), and a real launch creates everything as
  before. Thanks @diogochaves.

Documentation

• The capability table now has a Browser profile row (#186). Chromium,
  Chrome and Brave run with --no-sandbox under --browser, so ai-jail is
  the only boundary between a web page and what the browser can reach: the
  profile (soft keeps cookies and logins), the project directory, and the
  network when --network is on. ai-jail passes no such flag to Firefox or
  LibreWolf. Thanks @diogochaves.

Checksums (SHA256)

e4702b646765e1ad1c18c0b7bb333946b74c0909378c78977e1375cf3b8f95eb  ai-jail-linux-x86_64.tar.gz
73e4b7c73b815eb51d3970a2146304705d96959355f14026261763731cb772a6  ai-jail-macos-aarch64.tar.gz

Install

brew tap akitaonrails/tap && brew install ai-jail
yay -S ai-jail-bin
cargo install --locked ai-jail