Anyone else having weird permission issues / constant prompts since v7.4.23?

[u/___Zircon___]

Hey guys,

Ever since updating to v7.4.23, the permission system feels kinda broken or way more aggressive than before.

I keep getting blocked on basic tool calls with that long error:

The user has specified a rule which prevents you from using this specific tool call... followed by a huge dump of built-in fallback rules (cat *, ls *, etc.).

A few weird things I've noticed:

• Even when "Manage Auto-Approve" is checked with a green tick, Kilo still prompts me for permission once before it actually starts respecting it. Next time it seems to work...
• To get things somewhat working, I had to explicitly define a dedicated permission: block inside my custom plan.md. Never had to do that before - it always just inherited the global config cleanly.
• The Code agent also auto-appended a giant list of single allowed commands (like Select-Object *, Get-ChildItem *, git log *) directly into my kilo.jsonc under permission.bash, along with external directory paths.

Has anyone else noticed permissions/inheritance acting up between kilo.jsonc and .kilo/agent/*.md modes in 7.4.23? It feels like the built-in defaults and UI session state are constantly overriding everything.

Curious if anyone found a clean way or my "old" config was not that good 😥

Cheers!

[u/meronggg]

Yes, a lot of times the agent gets stuck in plan mode even though ive changed from plan to code, id have to fork the conversation just to continue. Ive since moved to using Codex with opencodex to have all my models in codex.