Automation

Guard for dispatching subagents: denies isolation "worktree", checks a declared WORKTREE is a separate, clean, never-dispatched git worktree, and in opted-in repos requires non-read-only subagents to declare one.

Stops prompts that contain API keys or passwords (puts a redacted copy back in the input box) and drops the same message re-sent within a few minutes.