Fixed workspace path mapping

Refactoring
Improved system prompts, more generalized
Home folder protection and detection
Retry logic for gemini

docker-compose.yml

@@ -44,10 +44,12 @@ services:
       # Use HOME not PWD: Claude needs access to any absolute file path, not just current project,
       # and Claude Code could be running from multiple locations at the same time
       - WORKSPACE_ROOT=${WORKSPACE_ROOT:-${HOME}}
+      # USER_HOME helps detect and protect against scanning the home directory root
+      - USER_HOME=${HOME}
       - LOG_LEVEL=${LOG_LEVEL:-DEBUG}
       - PYTHONUNBUFFERED=1
     volumes:
-      - ${HOME:-/tmp}:/workspace:ro
+      - ${WORKSPACE_ROOT:-${HOME}}:/workspace:ro
       - mcp_logs:/tmp  # Shared volume for logs
       - /etc/localtime:/etc/localtime:ro
     stdin_open: true