feat: add allowSymlinksOutsideWorkspace settings UI + i18n (Zoo-Code-Org#246)

Surfaces the opt-in setting in the Context settings panel (toggle, default off) and adds its label + description across all 18 locales. Pairs with the workspace-boundary symlink fix so both ship together (Zoo-Code-Org#169 / Zoo-Code-Org#241).

Author: proyectoauraorg

.changeset/symlink-workspace-boundary.md

@@ -0,0 +1,5 @@
+---
+"zoo-code": patch
+---
+
+Resolve symlinks in the workspace-boundary check so a symlink inside the workspace that points outside is correctly treated as outside, closing a bypass of the out-of-workspace file protection (#169). Adds an opt-in `allowSymlinksOutsideWorkspace` setting (default off) for users who deliberately rely on symlinks that point outside the workspace.

webview-ui/src/components/settings/ContextManagementSettings.tsx

@@ -33,6 +33,7 @@ type ContextManagementSettingsProps = HTMLAttributes<HTMLDivElement> & {
 	maxWorkspaceFiles: number
 	showRooIgnoredFiles?: boolean
 	enableSubfolderRules?: boolean
+	allowSymlinksOutsideWorkspace?: boolean
 	maxImageFileSize?: number
 	maxTotalImageSize?: number
 	profileThresholds?: Record<string, number>
@@ -51,6 +52,7 @@ type ContextManagementSettingsProps = HTMLAttributes<HTMLDivElement> & {
 		| "maxWorkspaceFiles"
 		| "showRooIgnoredFiles"
 		| "enableSubfolderRules"
+		| "allowSymlinksOutsideWorkspace"
 		| "maxImageFileSize"
 		| "maxTotalImageSize"
 		| "profileThresholds"
@@ -71,6 +73,7 @@ export const ContextManagementSettings = ({
 	maxWorkspaceFiles,
 	showRooIgnoredFiles,
 	enableSubfolderRules,
+	allowSymlinksOutsideWorkspace,
 	setCachedStateField,
 	maxImageFileSize,
 	maxTotalImageSize,
@@ -246,6 +249,23 @@ export const ContextManagementSettings = ({
 					</div>
 				</SearchableSetting>
 
+				<SearchableSetting
+					settingId="context-allow-symlinks-outside-workspace"
+					section="contextManagement"
+					label={t("settings:contextManagement.allowSymlinksOutsideWorkspace.label")}>
+					<VSCodeCheckbox
+						checked={allowSymlinksOutsideWorkspace}
+						onChange={(e: any) => setCachedStateField("allowSymlinksOutsideWorkspace", e.target.checked)}
+						data-testid="allow-symlinks-outside-workspace-checkbox">
+						<label className="block font-medium mb-1">
+							{t("settings:contextManagement.allowSymlinksOutsideWorkspace.label")}
+						</label>
+					</VSCodeCheckbox>
+					<div className="text-vscode-descriptionForeground text-sm mt-1 mb-3">
+						{t("settings:contextManagement.allowSymlinksOutsideWorkspace.description")}
+					</div>
+				</SearchableSetting>
+
 				<SearchableSetting
 					settingId="context-max-image-file-size"
 					section="contextManagement"

webview-ui/src/components/settings/SettingsView.tsx

@@ -186,6 +186,7 @@ const SettingsView = forwardRef<SettingsViewRef, SettingsViewProps>(({ onDone, t
 		writeDelayMs,
 		showRooIgnoredFiles,
 		enableSubfolderRules,
+		allowSymlinksOutsideWorkspace,
 		maxImageFileSize,
 		maxTotalImageSize,
 		customSupportPrompts,
@@ -402,6 +403,7 @@ const SettingsView = forwardRef<SettingsViewRef, SettingsViewProps>(({ onDone, t
 					maxWorkspaceFiles: Math.min(Math.max(0, maxWorkspaceFiles ?? 200), 500),
 					showRooIgnoredFiles: showRooIgnoredFiles ?? true,
 					enableSubfolderRules: enableSubfolderRules ?? false,
+					allowSymlinksOutsideWorkspace: allowSymlinksOutsideWorkspace ?? false,
 					maxImageFileSize: maxImageFileSize ?? 5,
 					maxTotalImageSize: maxTotalImageSize ?? 20,
 					includeDiagnosticMessages:
@@ -835,6 +837,7 @@ const SettingsView = forwardRef<SettingsViewRef, SettingsViewProps>(({ onDone, t
 								maxWorkspaceFiles={maxWorkspaceFiles ?? 200}
 								showRooIgnoredFiles={showRooIgnoredFiles}
 								enableSubfolderRules={enableSubfolderRules}
+								allowSymlinksOutsideWorkspace={allowSymlinksOutsideWorkspace}
 								maxImageFileSize={maxImageFileSize}
 								maxTotalImageSize={maxTotalImageSize}
 								profileThresholds={profileThresholds}

webview-ui/src/i18n/locales/ca/settings.json

@@ -645,6 +645,10 @@
 		}
 	},
 	"contextManagement": {
+		"allowSymlinksOutsideWorkspace": {
+			"label": "Allow symlinks pointing outside the workspace",
+			"description": "When enabled, a symlink that lives inside the workspace but points outside it is treated by its location inside the workspace instead of being flagged as outside. Off by default, so symlink targets are resolved and out-of-workspace access is flagged."
+		},
 		"description": "Control what information is included in the AI's context window, affecting token usage and response quality",
 		"autoCondenseContextPercent": {
 			"label": "Threshold to trigger intelligent context condensing",