Add --worktree option to control original repo bind mounting

[Copilot]

Addresses security concerns about automatic bind mounting when running in git worktrees by making the behavior explicit and user-controlled.

Changes

• Added --worktree option with four modes:

  • ask (default): Prompts user with security warning before bind mounting
  • bind: Automatically bind mounts original repo
  • ok: Runs without bind mount
  • error: Exits if worktree detected

• Updated documentation with usage examples and security implications

Usage

# Prompt before mounting (default)
yolo

# Always bind mount
yolo --worktree=bind

# Never bind mount
yolo --worktree=ok

# Disallow worktrees
yolo --worktree=error

The ask prompt informs users that bind mounting enables git operations but may expose unintended files, addressing the silent exposure concern.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.