Docker Sandboxing
Triks can now declare filesystem and shell capabilities in their manifest. When present, the gateway automatically runs the trik inside a Docker container with a sandboxed /workspace directory. The SDK auto-injects workspace tools (read_file, write_file, execute_command, etc.) — trik authors just spread getWorkspaceTools(context) into their agent tools.
Telegram Bot Scaffold
trik create-agent now offers a "CLI + Telegram" channel option. Generates a full Telegram bot adapter using grammy (TypeScript) or python-telegram-bot (Python), with BotFather setup guide and deployment docs.
Config Validation
The gateway now warns when loading a trik with missing required config. The CLI also shows config requirements after trik install.