Constructor.
With project: overlay for project dirs; allow_write true = root is rw (--bind / /), false = ro (--ro-bind / /). Without project: root is always read-only; cwd defaults to home.
| project |
Project folder, or null for no-project mode |
| allow_network |
Whether to allow network access |
| allow_write |
When true, use --bind / / for root (tool allow_write "yes"); overlay still captures project dirs |