v0.24.1

Workers

• Antigravity: a task that names files outside the project no longer stops halfway. agy's file tools stay in the workspace, and a headless agy cannot ask for more, so a read outside it ("copy the components from /tmp/ui-source") was refused and ended the turn without an answer. The folders and files a task names by absolute path (or ~/…) that exist outside the workspace are now granted read-only (the sandbox mounts them read-only too), with every secret-looking file in them denied (found at any depth and in every folder; a folder too big to check, with a link leading out of it or nowhere, or with a folder that cannot be read, is not granted, and a named path counts where its links lead). Never the root or a top-level folder such as /tmp, your home itself or a folder above it, a folder holding the workspace or the project, a dot-folder in your home (~/.config and the like) or ~/Library, Pitroom's own state or a secret-looking file, and nothing on Windows (agy compares paths there without their drive letter); the secrets in your home stay denied. In a snapshot or an isolated copy the project's own paths in the task are turned into the copy's (links resolved, so /tmp/… and /private/tmp/… alike): the worker reads and edits its copy instead of being refused at the project.