From f2cfa725dc5002e0358e581df53bf098e38b6657 Mon Sep 17 00:00:00 2001
From: Khaliq <khaliqgant@gmail.com>
Date: Sun, 23 Aug 2026 23:26:56 +0200
Subject: [PATCH 1/2] fix(mount): retain late-bound remote paths

---
 src/mount-script.test.ts | 10 ++++++++++
 src/mount-script.ts      |  4 +++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/src/mount-script.test.ts b/src/mount-script.test.ts
index 0c39c85..1749cad 100644
--- a/src/mount-script.test.ts
+++ b/src/mount-script.test.ts
@@ -286,6 +286,16 @@ describe("exact local-layout contract", () => {
       stateDir: join(localRoot, ".state"),
       websocket: false,
     });
+    for (const renderedTemplate of [
+      template.startShellTemplate,
+      template.flushShellTemplate,
+    ]) {
+      assert.match(
+        renderedTemplate,
+        /--remote-path "\$relayfile_mount_remote_path"/,
+        "late-bound exact mounts must retain their remote-path filter",
+      );
+    }
     const values = {
       baseUrl: BASE.baseUrl,
       workspaceId: BASE.workspaceId,
diff --git a/src/mount-script.ts b/src/mount-script.ts
index 280d73f..0f2fb7c 100644
--- a/src/mount-script.ts
+++ b/src/mount-script.ts
@@ -732,7 +732,9 @@ function buildMountPathArg(path: string): string {
 }
 
 const DYNAMIC_LOCAL_DIR = "__relayfile_dynamic_local_dir__";
-const DYNAMIC_REMOTE_PATH = "__relayfile_dynamic_remote_path__";
+// Must be absolute so scopedRemoteRoots/buildMountArgs retain the sentinel
+// until dynamicMountArgs replaces it with the late-bound shell variable.
+const DYNAMIC_REMOTE_PATH = "/__relayfile_dynamic_remote_path__";
 
 function dynamicMountArgs(
   opts: RelayfileMountShellOptions,

From 963e8c9dd6e2ccbd4e5493c522f8ad6d0d73c1c0 Mon Sep 17 00:00:00 2001
From: Khaliq <khaliqgant@gmail.com>
Date: Sun, 23 Aug 2026 23:30:24 +0200
Subject: [PATCH 2/2] chore(release): prepare 0.1.7

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c2756de..c6ae05b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@agent-relay/sandbox",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@agent-relay/sandbox",
-      "version": "0.1.6",
+      "version": "0.1.7",
       "license": "Apache-2.0",
       "devDependencies": {
         "@aws-sdk/client-bedrock-agentcore": "^3.1115.0",
diff --git a/package.json b/package.json
index 187915e..11519e0 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/sandbox",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Provider-agnostic sandbox runtimes and orchestration for agent workloads.",
   "license": "Apache-2.0",
   "type": "module",