Added
- Managed sandbox sessions can now be disabled for the rest of the session from an approved bypass prompt.
Fixed
- A PowerShell write the sandbox blocks offers to run the command outside the sandbox
- When you have more than one GitHub account in your credential store, a sandboxed gh command now acts as the account gh is logged in as instead of an arbitrary one.
- The
/rubber-duckcommand is hidden after a model refresh removes its compatible critic - Sandboxed runs now use relocated developer-tool caches from env vars and tool config files
- On Windows, a sandboxed command that runs git without naming it — a hook, a build tool, or an npm install that clones over HTTPS — no longer dies inside the credential helper's MSYS2 shell.