Group of 2 You'll notice
Reading a chat attachment no longer triggers an unnecessary permission prompt just because it sits outside the working directory
What
Files the session has 'staged', such as chat attachments, are now recognized as being effectively inside the working directory (the folder Claude Code is operating in) for permission purposes, even when their actual location is outside it.
- A new check (
stagedByDirectory) auto-allows reads that would otherwise require asking the user, because the file lives under a directory the session has staged. - This feeds into read, upload, and database-write permission checks, which now also track a
stagedUploadflag. - Unlike a normal approval, this staged-file allowance does not cover the whole session; it's remembered only for that one call (
remember: 'this_call').
Why
This avoids unnecessary 'ask' prompts when Claude Code needs to read a file the user just attached to the chat, while still keeping the permission scoped narrowly instead of granting broader session-wide access.