Symlink Resolution in Permission Checks

What: File permission checks now resolve symlinks and verify that BOTH the symlink path AND its target are allowed, preventing permission bypass attacks via symlinks.

How it works:

• When checking read/edit permissions for /home/user/project/link, Claude Code now resolves it to its real path (e.g., /etc/passwd)
• Both paths are checked against permission rules
• Access is denied if EITHER path is restricted

Details:

• New function CD1() at line 339792 returns array of [original_path, resolved_path]
• Helper function fW() at line 339783 performs symlink resolution using realpathSync()
• Integrated into read permissions at o11() at line 439057
• Integrated into edit permissions at dd() at line 439126
• Integrated into working directory checks at QE() at line 438915
• Gracefully handles non-existent files and resolution errors