v1.49.0

Added

• A virtual terminal over the services an author mounts (#2191). The new
  mirage capability gives an agent the seven sandbox tools, prefixed
  mirage_, over folders that are a Google Drive, a GitHub repository, Notion,
  a database, an SSH server or a mailbox, through
  Mirage and with no container. Each
  folder is read only or writable, and a writable one can ask a person to
  approve each write, including a write inside a shell command. A folder signs
  in with vault keys, an Entra app, or a Google account. A Google account is
  the organization's or each person's own, connected on the vault page. Typed
  hosts must be on the new MIRAGE_ALLOWED_HOSTS. The terminal is the optional
  mirage extra (EXTRAS="--extra mirage"). See
  Virtual terminal. Box service accounts use Client Credentials;
  LanceDB Cloud/Enterprise mounts require a vault key and an allowlisted HTTPS
  endpoint. Local LanceDB storage and rotating Box grants are refused.