Tools
Kilocode stops prompting for sandbox escape on read-only git and gh commands, and admits what approval really does
v7.7.4 allows read-only `gh` commands such as `gh pr view` and `gh issue list` in Plan and Ask modes and the Explore agent without a prompt (#14223), and stops asking to leave the sandbox for `git remote -v`, `git stash list` and `git branch -v` (#14222). Separately, #14226 rewrote the escalation prompt to state accurately that approval runs the whole command outside the sandbox for that command only, and that Bash allow rules and auto-approve never cover it. The old wording implied a narrower grant than users were actually giving.
Source
↳ Follow the thread