That's unfortunate. I use Zed and I'm moving towards containerising my dev environment (using SSH remote dev to connect Zed to the container) because all this agentic stuff seems like a security nightmare. At the very least I want to restrict the blast radius to my repos dir.

I would give them a week or less to support this. They've been improving the debugger so fast, it will take them no time to support remote claude code connections.