Checkpoint restore now asks for edit permission per checkpoint file instead of workspace-wide, so path-based deny/allow/ask rules apply per file and a denied file blocks the restore.
Restores can be scoped to specific files via path, file, or files; the permission ask and preview then target only the selected files, with file:// URL paths resolved.
Uses the existing checkpoint preview paths for the ask on OpenCode V1 and V2, and includes the denied path in the denial message.
Pi keeps its existing per-path project-root isolation without edit prompts.
Adds V1/V2 deny/allow/ask and scoped-restore coverage, plus Pi tests for project-root restriction.
Confidence Score: 5/5
The PR appears safe to merge; no new actionable issues were found.
Summary
Checkpoint restores now ask for edit permission only on the files being restored.
Checkpoint restores ask permission for the files they will write.
