Workspace daily loop
Create once from the app, then open terminal, guarded terminal, or agents from the same folder.
Commit-safe config
.authsia/workspace.json holds name, folder, env files, and agent rules — not plaintext secrets.
Nearest workspace wins
Commands search upward for workspace config. A nested config is a separate workspace.
Env before depth
Active Production tags beat deeper Default items. Same-tier ties fail closed.
Parent stays clean
Guarded launches inject plaintext only into new child processes.