[Robert0622]

What changed

• Runtime filesystem confinement (security). Runtime-managed writes — agent hooks and hook settings, MCP provider configs, the git askpass helper, the repository baseline record, .git/info/exclude blocks and sandbox environment files — now go through a workspace-rooted handle (os.OpenRoot). A symlinked or traversing path inside a task workspace can no longer redirect these writes outside the workspace. New helpers live in internal/runtime/managed_files.go.
• Tracker sync keeps platform status. The first import still initializes an issue's status from the external tracker. Repeated syncs (automatic, manual, scheduled or single-item) now keep the platform status, close source and automation state, and only refresh external content and the recorded external state. An external close still blocks execution through the external state.
• Free collaboration creation. A group can now be created from projectId + input alone. repositoryIds is optional ([] means no repositories, omitted means all), and sandboxProfileId or workflowId can supply the environment and initial roles. The task list can be filtered to tasks the current user is responsible for.
• Task sidebar. Tasks are grouped as running / recently ended / earlier, with failure counts. The sidebar is resizable, [] and full-width 【】 title tags are both supported, and long titles are truncated with a tooltip.

Scope

• Platform core / API / runner
• Public adapter / deployment
• Classic
• Portable
• Shared behavior contract
• Installer / CLI
• Documentation only

Compatibility

• POST /api/task-groups is backward compatible: existing {workflowId, projectId, input} bodies behave as before.
• Repeated tracker syncs no longer overwrite the platform status of existing issues. This changes behavior for anyone who relied on external reopen/close re-mapping platform status.
• No schema migration.

Validation

go build ./...                                   # pass
go vet ./...                                     # pass
go test -p=2 ./... -count=1 -timeout=180s        # pass (includes new web/collaboration_creation_test.js via node)
python3 scripts/check-public.py                  # pass
bash scripts/scan-secrets.sh                     # pass, no leaks found
bash local/scripts/validate.sh                   # not run (LoopForge Local unchanged)
bash local/scripts/smoke-install.sh              # not run (LoopForge Local unchanged)
bash local/scripts/e2e.sh                        # not run (LoopForge Local unchanged)

Safety

• I did not include credentials, internal endpoints, production data, or organization-specific infrastructure.
• I preserved user files and unrelated changes.
• I updated generated Classic host bundles when applicable. (not applicable)
• I documented third-party content and licensing changes when applicable. (not applicable)