feat: add readonly mode with bash safety and spawn child filtering

.gitignore

@@ -47,6 +47,9 @@ web_modules/
 # TypeScript cache
 *.tsbuildinfo
 
+# TypeScript compilation output
+*.js
+
 # Optional npm cache directory
 .npm
 
@@ -149,3 +152,10 @@ package-lock.json
 .chunkhound.json
 .chunkhound/
 .mcp.json
+
+# macOS
+.DS_Store
+
+# PR review artifacts
+AGENT_REVIEW.md
+HUMAN_REVIEW.md

AGENTS.md

@@ -0,0 +1,5 @@
+# TUI Safety
+
+**Never use `console.debug/warn/error/log`** — writes to stdout/stderr corrupt pi's TUI ANSI rendering. Extension host runs in the same process.
+
+Use `ctx.ui.notify()` / `setStatus()` / `setWidget()` instead. For diagnostics, remove entirely.