mirror of
https://github.com/Kilo-Org/kilocode.git
synced 2026-09-21 14:07:20 +08:00
marius-kilocode
e67635d270
PR #12158 enforced read permissions for file mentions by routing directory attachments through the permission resolver with denyDirectory: true. That flag is set for every prompt-mention attachment, so the read tool denied all directory listings, including directories inside the current workspace. Only deny directory attachments whose canonical path changed after permission approval. A symlink swap during the permission wait moves the resolved target, so the approved permission no longer applies and the listing is denied. Unchanged in-workspace directories are listed as before. Fixes #12241