What's Changed

• test: cover workspace control Codex pool preservation by @cursor[bot] in https://github.com/mweinbach/agent-coworker/pull/151
• feat(sandbox): replace makeshift command filtering with a real OS sandbox by @mweinbach in https://github.com/mweinbach/agent-coworker/pull/153

Full Changelog: https://github.com/mweinbach/agent-coworker/compare/v1.1.17...v1.1.18