The Construct CLI 1.7.2

[1.7.2] - 2026-04-21

Added

• Host Service Env: New host_service_env field in [sandbox] config section. Injects environment variables into the container with localhost/127.0.0.1 automatically rewritten to host.docker.internal. Enables agents inside the sandbox to reach host services like AgentMemory without complex IP detection. Example: "AGENTMEMORY_URL=http://localhost:3111".
• AgentMemory config directory (~/.agentmemory) is now created on container first run.

Changed

• Replaced the [bridge] configuration section and internal/bridge package (IP detection, gateway probing, CONSTRUCT_* env vars) with the simpler host_service_env mechanism. The old [bridge] config is no longer recognized and should be removed from config.toml.

Removed

• Deleted internal/bridge/ package (config, detector, injector, integration).
• Removed [bridge] section from config template and BridgeConfig type.

The Construct CLI 1.7.1

[1.7.1] - 2026-04-20

Added

• Daemon Restart Command: New construct sys daemon restart command that stops and starts the daemon container in one operation. Handles all container states: missing (starts), stopped (cleans up and starts), and running (stops then starts).

The Construct CLI 1.7.0

[1.7.0] - 2026-04-16

Added

• Host Service Bridge: New [bridge] configuration section that allows sandboxed containers to access services running on the host machine. This enables AI agents to connect to local databases, APIs, and development servers without leaving the isolated environment.
• Cross-Platform Gateway Detection: Automatic host gateway IP detection supporting Docker (host-gateway, host.docker.internal), Podman (host.containers.internal), and network interface inspection across macOS, Linux, and WSL.
• Service Environment Variables: For each configured host service, automatically injects CONSTRUCT_<SERVICE>_HOST, CONSTRUCT_<SERVICE>_PORT, and CONSTRUCT_<SERVICE>_URL environment variables, plus CONSTRUCT_HOST_IP for the detected gateway.
• Configurable Failure Behavior: on_failure option in [bridge] section allows users to choose behavior when gateway detection fails: "warn" (default, continue with warning), "fail" (stop container startup), or "silent" (continue silently).
• Manual Host IP Override: Advanced manual_host_ip option for users who need to specify a custom host IP when automatic detection fails or for non-standard network setups.
• AgentMemory Integration: Out-of-the-box support for AgentMemory persistent memory server. Configure services = ["agentmemory:3111"] to enable AI agents to remember context across sessions while running in complete isolation.

Changed

• Docker Compose Override: Enhanced docker-compose.override.yml generation to dynamically inject extra_hosts configuration based on [bridge] settings and detected host gateway.
• Container Environment Injection: Extended environment variable assembly to include host service connection details when bridge is enabled.

Security

• Opt-In Security Model: Host service bridge is disabled by default (enabled = false) and must be explicitly enabled by users. This maintains construct-cli's security-first approach while providing flexibility for development workflows.
• Gateway Validation: Host gateway detection includes multiple validation methods and fallback mechanisms to ensure reliability while preventing accidental host exposure.

Documentation

• Configuration Reference: Added comprehensive [bridge] section documentation in default config.toml template with usage examples and security considerations.
• Cross-Platform Support: Documented platform-specific detection methods and troubleshooting steps for each container runtime.

The Construct CLI 1.6.4

Full changelog: 1.6.3...1.6.4

The Construct CLI 1.6.3

Full changelog: 1.6.2...1.6.3

The Construct CLI 1.6.2

Full changelog: 1.6.1...1.6.2

The Construct CLI 1.6.1

[1.6.1] - 2026-04-07

Fixed

• Claude Code Update False Failure: claude update exits non-zero when already up-to-date, causing topgrade to report Claude Code: FAILED in the summary even though no update was needed. Fixed by appending || true to the command in both the embedded topgrade.toml template and the dynamically generated topgrade config (GenerateTopgradeConfig).

The Construct CLI 1.6.0

[1.6.0] - 2026-04-02

Added

• Crush CLI Agent Support: Added Charmbracelet Crush (crush) as a first-class agent, installed via npm (@charmland/crush), with agent mount registration, AGENTS.md global rules path wiring, help/docs updates, and post-install/post-update verification checks.

Changed

• Yolo Agent Coverage: Added crush to yolo flag handling (--yolo) and updated supported-agent documentation comments.
• Agent Install Detection: Included crush in initial agent-installed detection checks used after image build/setup.
• Alias UX Messaging: Updated shell alias onboarding copy to include crush among example sandboxed commands.

Fixed

• Yolo Supported List Accuracy: Corrected README yolo-supported slug list to match runtime behavior.
• Agent Additions Log Completeness: Updated AGENTS.md entry for Crush to include all touched integration files.

The Construct CLI 1.5.2

[1.5.2] - 2026-03-22

Fixed

• Copilot Image Paste via PTY Wrapper: Replaced the non-functional JS clipboard bridge approach with a Python PTY wrapper that intercepts paste keystrokes at the outer Docker PTY layer, fetches the image from the host clipboard bridge, saves it to .construct-clipboard/, and injects @path as typed text into Copilot's input. The JS bridge never fired in headless environments because Copilot's internal clipboard module had no display to read from.
• Kitty Keyboard Protocol (KKP) Support: Modern terminals (Ghostty and others using KKP) send Ctrl+V and Cmd+V as CSI-u escape sequences (\x1b[118;5u and \x1b[118;9u) rather than the legacy \x16 control byte. The wrapper now intercepts all three variants via _handle_paste().
• PTY Wrapper PATH Shadowing: The wrapper is installed at /home/linuxbrew/.linuxbrew/bin/copilot (the Homebrew bin, which takes PATH priority) rather than ~/.local/bin/copilot which was silently bypassed. The real copilot binary path (~/.npm-global/bin/copilot) is resolved via npm-global candidates and injected at install time so Node's relative module imports resolve correctly.
• Clipboard Diagnostic Improvements: sys clipboard-debug now shows the resolved which copilot path, the wrapper version, the _REAL binary path, and the full wrapper log tail for Copilot sessions.

The Construct CLI 1.5.0

[1.5.0] - 2026-03-19

Added

• Generic Environment Variable Passthrough: Added first-class [sandbox].env_passthrough support so users can forward arbitrary host environment variables into Construct without editing compose overrides.
• Prefix-Based Env Auto-Pass: Added [sandbox].env_passthrough_prefixes with default ["CNSTR_"], allowing host vars like CNSTR_CONTEXT7_API_KEY to appear inside Construct as CONTEXT7_API_KEY.
• Default Auth Passthroughs: Fresh configs now include GITHUB_TOKEN and CONTEXT7_API_KEY in sandbox.env_passthrough by default.
• Regression Coverage for Env Forwarding: Added tests covering explicit env passthrough, CNSTR_ prefix stripping, precedence rules, fresh-run flag injection, daemon exec env assembly, and template/default-config drift.

Changed

• Env Precedence Rules: Explicit sandbox.env_passthrough keys now win over prefix-derived CNSTR_ passthrough when both target the same inside variable name.
• Documentation: Updated README and architecture docs to document generic env passthrough, default forwarded keys, and the new CNSTR_ auto-pass behavior.