Agents can now read, write, create, and delete files directly in /workspace without going through exec. Path traversal outside /workspace is rejected.
Agents can now read, write, create, and delete files directly in /workspace without going through exec. Path traversal outside /workspace is rejected.