fix: roll back workspace trust-boundary hardening (#335)

## Requirement or Bug

Restore pre-2.1 file/git behavior for symlinked workspaces while keeping
the narrow write guard.

## Bug Reproduction Steps

N/A (behavior restore).

## Root Cause

The 2.1 trust-boundary hardening resolved every tool path through
realpath and probed git repo config, which broke legitimate symlinked
workspaces and slowed every git invocation. Fundamental fix: the broad
gates are removed; the guard that matters (blocking writes that resolve
to env files, credentials, or SSH keys) is kept.

## Code Changes

- File tools and background git no longer run symlink-realpath gates or
repo-config probes; project-local `local.toml` loads without the trust
prompt again.
- The tower commit-identity test coverage stays.

## Impact Scope

- `packages/agent-core-v2` (read/glob/grep/edit/write/read-media tools,
path access, git protocol, workspace dirs, project-local config), CLI
docs untouched in this slice.
- Tests: write-guard, path-access, and tower suites updated; full suite
green locally.

## Checklist

- [x] I have read the
[CONTRIBUTING](https://github.com/PyModel/pythinker-code/blob/main/CONTRIBUTING.md)
document.
- [x] I have linked a related issue (external PRs: issue must have a
maintainer's `/approve`). — No public issue; maintainer work.
- [x] I have added tests that prove my feature works.
- [x] Ran `gen-changesets` skill, or this PR needs no changeset.
- [x] Ran `gen-docs` skill, or this PR needs no doc update.


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Behavior Changes**
* Project-local configuration loads without a trust prompt, and
configured additional directories are loaded regardless of workspace
trust.
* File and Git operations no longer apply extra symlink-path checks or
repository-configuration probes. Writes targeting environment files,
credentials, and SSH keys remain blocked.
* **Bug Fixes**
* Git context collection continues through process execution and reports
timeouts and command failures while preserving available repository
information.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Test User <test@example.test>

Author: elkaix

.changeset/completion-cap-opt-in.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Stop sending a default completion token cap to models; set maxCompletionTokens in modelOverrides to cap output again.

.changeset/fork-cron-clear.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Forked sessions no longer inherit the source session's scheduled tasks; the source keeps them and the fork notes the clearing.

.changeset/roll-back-trust-boundary-hardening.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Stop restricting file tools and background git through symlink-realpath gates and repo-config probes; project-local `local.toml` loads without the trust prompt again. Writes to paths that resolve to env files, credentials, or SSH keys are still blocked.

.changeset/status-and-undo-fixes.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Publish permission mode changes on agent status updates, stop NotifyUser nudges in clients without an updates panel, and drop the interruption reminder when its turn is undone.

.changeset/trust-disclosure.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+The workspace trust prompt now lists the MCP servers, extra directories, and project instruction sources that trusting would activate.

.changeset/trust-workspace-env.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+Add PYTHINKER_CODE_TRUST_WORKSPACE=1 to trust the current workspace for headless runs without answering the trust prompt.

.changeset/watch-default-on.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Watch config, skills, and AGENTS.md files for changes again by default; set `[watch] enabled = false` or PYTHINKER_CODE_WATCH=0 to keep them off.

apps/desktop/package.json

@@ -20,7 +20,7 @@
     "@types/node": "^26.1.2",
     "@types/semver": "^7.7.0",
     "builder-util-runtime": "9.7.0",
-    "electron": "43.4.0",
+    "electron": "43.5.0",
     "electron-builder": "26.15.3",
     "electron-updater": "6.8.9",
     "semver": "^7.7.4",

apps/pythinker-code/dist-web/.web-bundle-manifest.json

@@ -1,4 +1,4 @@
 {
-  "sourceHash": "04602432b100c73fa465235500caccbe13e6af08198ab1c90198cdc5bd19fd1c",
+  "sourceHash": "0b9e0a931397c88206a0e22886da74780ce0c4a27202e3f6f9f81cd32777b557",
   "sourceFileCount": 496
 }