Privacy mode left the user as the AI's only eyes and hands on anything
sealed. The darkroom helper, an extension off until the user picks a
model, gives that reading to a model on their own computer.
- ai_darkroom.py talks to an OpenAI-style server on a loopback address
only (checked when kept and when read, no proxy, no redirect).
- set_prompt takes rewrite: the helper changes the prompt's text the way
the AI says; the result is on the canvas and leaves as a token.
- In a private task zoom_image's picture goes to the helper before it is
taken out; local_check holds a fixed list of checks, each one of a few
allowed words, and anything else the helper says is dropped.
- begin_task tells a private task's AI what the helper does. The Gates
window finds the local servers and lets the user pick a model.
- No new tool: the list stays at 53 and within its size.
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
