v2.11.2

A compatibility fix release for macOS credential and browser launches,
Antigravity conversation resume, and side-effect-free dry runs.

Backward compatible: every pre-2.11.2 .ai-jail keeps working.

Fixed

• macOS credential flags now outrank built-in private-home denies (#187).
  --aws, --kube, --gcloud, and the other read-only credential grants are
  readable again while remaining read-only. Nested grants such as
  --docker-config are emitted after their parent-directory deny so the
  selected file wins without exposing the rest of ~/.docker.

• Direct Antigravity aliases resume existing conversations (#189). agy
  and antigravity-cli now resolve to the same command scope as
  antigravity, so direct launches receive Antigravity's complete
  ~/.gemini state. Mapping only the conversation's brain/ directory was
  insufficient because the CLI also needs its databases and metadata.

• Native browser profiles start correctly on macOS (#191). Hard Chromium
  and Firefox profiles now live inside the validated per-launch scratch
  directory instead of inaccessible /tmp, are removed when the browser
  exits, and the selected native .app bundle is readable so its packaged
  libraries and resources can load. Other applications remain hidden.

• Dry runs no longer create audit or macOS session storage (#190).
  --dry-run --audit-log does not create history, and rendering a macOS
  profile no longer creates its session directory or browser state. Real
  launches still prepare the required storage before starting the child.

Testing

• Made proxy-sensitive tests hermetic when the invoking shell exports
  http_proxy, https_proxy, all_proxy, or no_proxy (PR #188).

Checksums (SHA256)

7deebaef0bf195485ed3b8b93a23deea50edc1d34989b0e2960be4f88b3f9fc6  ai-jail-linux-x86_64.tar.gz
9c02a4570a34c35a9c9ff75d895b71ed99e0e3ce567a6c2cac1d64b17ffa68f0  ai-jail-macos-aarch64.tar.gz

Install

brew tap akitaonrails/tap && brew install ai-jail
yay -S ai-jail-bin
cargo install --locked ai-jail