Refactor: Remove security module and related functionality

- Deleted the `security` module and its associated files, including `daemon.rs` and `install.rs`.
- Removed references to security features in various modules, including `mod.rs`, `mode/mod.rs`, and `input.rs`.
- Updated the `MiscState` struct to eliminate security-related fields.
- Adjusted the `apply_action` function to remove security action handling.
- Increased the maximum limits for tool-only turns and agent steps in `actions/mod.rs`.
- Modified the review prompt to exclude security checks.
- Cleaned up the `git_operator` and `shell` tools to remove catastrophic guard checks.
- Removed internet-related tools and their references from the tool module.

src/app/harness.rs

@@ -1,6 +1,7 @@
 #[derive(Debug, Clone, PartialEq)]
 pub enum Verdict {
     Allow,
+    #[allow(dead_code)]
     Block(String),
 }
 
@@ -9,12 +10,10 @@ pub struct Harness;
 impl Harness {
     pub fn gate_tool_call(
         tool_name: &str,
-        args: &serde_json::Value,
-        workspace_roots: &[&std::path::Path],
+        _args: &serde_json::Value,
+        _workspace_roots: &[&std::path::Path],
     ) -> Verdict {
-        if let Err(e) = Self::run_catastrophic_guard(tool_name, args, workspace_roots) {
-            return Verdict::Block(e);
-        }
+
         if !crate::tool::tool_is_risky(tool_name) {
             return Verdict::Allow;
         }
@@ -25,38 +24,7 @@ impl Harness {
         Verdict::Allow
     }
 
-    fn run_catastrophic_guard(
-        tool_name: &str,
-        args: &serde_json::Value,
-        workspace_roots: &[&std::path::Path],
-    ) -> Result<(), String> {
-        use super::catastrophic::CatastrophicGuard;
-        match tool_name {
-            "bash" => {
-                let cmd = args.get("command").and_then(|v| v.as_str()).unwrap_or("");
-                CatastrophicGuard::check_all(cmd, workspace_roots)
-            }
-            "git_operator" => {
-                let operation = args.get("operation").and_then(|v| v.as_str()).unwrap_or("");
-                let arg_list: Vec<String> = args
-                    .get("args")
-                    .and_then(|v| v.as_array())
-                    .map(|arr| arr.iter().filter_map(|v| v.as_str().map(|s| s.to_string())).collect())
-                    .unwrap_or_default();
-                let cmd = format!("git {} {}", operation, arg_list.join(" "));
-                CatastrophicGuard::check_all(&cmd, workspace_roots)
-            }
-            "delete" => {
-                let path = args.get("path").and_then(|v| v.as_str()).unwrap_or("");
-                CatastrophicGuard::check_delete_path(std::path::Path::new(path), workspace_roots)
-            }
-            "web_download" | "download" => {
-                let path = args.get("path").and_then(|v| v.as_str()).unwrap_or("");
-                CatastrophicGuard::check_download_path(std::path::Path::new(path))
-            }
-            _ => Ok(()),
-        }
-    }
+
 }
 
 impl Default for Harness {
@@ -114,30 +82,6 @@ mod tests {
         assert_eq!(result, Verdict::Allow);
     }
 
-    #[test]
-    fn test_gate_tool_bash_non_destructive_allowed_in_auto() {
-        let roots: &[&std::path::Path] = &[];
-        let result = Harness::gate_tool_call("bash", &json!({"command": "ls -la"}), roots);
-        assert_eq!(result, Verdict::Allow);
-    }
-
-    #[test]
-    fn test_gate_tool_bash_destructive_blocked() {
-        let roots: &[&std::path::Path] = &[];
-        let result = Harness::gate_tool_call("bash", &json!({"command": "dd if=/dev/zero of=/dev/sda"}), roots);
-        assert!(matches!(result, Verdict::Block(_)));
-    }
-
-    #[test]
-    fn test_gate_tool_git_operator_destructive_blocked() {
-        let roots: &[&std::path::Path] = &[];
-        let result = Harness::gate_tool_call(
-            "git_operator",
-            &json!({"operation": "push", "args": ["--force"]}),
-            roots,
-        );
-        assert!(matches!(result, Verdict::Block(_)));
-    }
 
     #[test]
     fn test_parse_verdict_json_allow() {