@codingame/monaco-vscode-katex-common 31.0.1 → 32.0.0

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/browser/tools/runInTerminalTool.d.ts

@@ -36,8 +36,10 @@ export interface IRunInTerminalInputParams {
     timeout?: number;
     requestUnsandboxedExecution?: boolean;
     requestUnsandboxedExecutionReason?: string;
+    allowToRunUnsandboxedCommands?: boolean;
 }
 export interface IAutomaticUnsandboxRetryOptions {
+    readonly allowUnsandboxedCommands: boolean;
     readonly didSandboxWrapCommand: boolean;
     readonly requestUnsandboxedExecution: boolean;
     readonly isPersistentSession: boolean;
@@ -100,14 +102,25 @@ export declare class RunInTerminalTool extends Disposable implements IToolImpl {
     protected readonly _sessionTerminalInstances: ResourceMap<Set<ITerminalInstance>>;
     private readonly _terminalsBeingDisposedBySessionCleanup;
     /**
-     * Tracks active background completion notifications per terminal ID.
+     * Tracks active background completion notifications per terminal instance ID.
      * When a new notification is registered for a terminal that already has one,
      * the previous notification (and its OutputMonitor) is disposed first to
      * prevent listener accumulation on the terminal's onDidInputData emitter.
+     *
+     * Keyed by `ITerminalInstance.instanceId` (stable per terminal) rather than
+     * the per-invocation `termId` so that reusing the same foreground terminal
+     * after an `inputNeeded` race disposes the prior OutputMonitor.
      */
     private readonly _backgroundNotifications;
     protected readonly _osBackend: Promise<OperatingSystem>;
     private static readonly _activeExecutions;
+    /**
+     * Terminal IDs currently being disposed by `kill_terminal`. Used to
+     * suppress redundant steering messages in `_registerCompletionNotification`'s
+     * `onDisposed` handler — the agent already receives the output through the
+     * `kill_terminal` tool result.
+     */
+    private static readonly _killedByTool;
     static getBackgroundOutput(id: string): string;
     /**
      * Gets an active terminal execution by ID. Returns undefined if not found.
@@ -119,13 +132,25 @@ export declare class RunInTerminalTool extends Disposable implements IToolImpl {
      * @returns true if the execution was found and removed, false otherwise.
      */
     static removeExecution(id: string): boolean;
+    /**
+     * Marks a terminal ID as being killed by the `kill_terminal` tool so that
+     * the `onDisposed` handler in `_registerCompletionNotification` skips the
+     * redundant steering message.
+     */
+    static markKilledByTool(id: string): void;
     private _resolveExecutionOptions;
+    private get _allowUnsandboxedCommands();
+    private get _autoApproveUnsandboxedCommands();
+    private get _allowSandboxAutoApprove();
+    private _getAllowToRunUnsandboxedCommands;
+    private _shouldRejectUnsandboxedExecutionRequest;
+    private _getUnsandboxedExecutionDisabledMessage;
     /**
      * Controls whether this tool wires up sandbox-specific command-line
      * behavior, including both the {@link CommandLineSandboxRewriter} and the
      * {@link CommandLineSandboxAnalyzer}. This is separate from
-     * ITerminalSandboxService.isEnabled(), which reports whether terminal
-     * sandboxing is currently enabled for the running window.
+     * ITerminalSandboxService.isEnabled(), which reports the current terminal
+     * sandboxing enablement for the running window.
      */
     protected get _enableCommandLineSandboxRewriting(): boolean;
     constructor(_chatService: IChatService, _configurationService: IConfigurationService, _fileService: IFileService, _historyService: IHistoryService, _instantiationService: IInstantiationService, _labelService: ILabelService, _languageModelToolsService: ILanguageModelToolsService, _remoteAgentService: IRemoteAgentService, _storageService: IStorageService, _terminalChatService: ITerminalChatService, _logService: ITerminalLogService, _terminalService: ITerminalService, _terminalSandboxService: ITerminalSandboxService, _workspaceContextService: IWorkspaceContextService, _chatWidgetService: IChatWidgetService, _agentSessionsService: IAgentSessionsService);
@@ -136,8 +161,40 @@ export declare class RunInTerminalTool extends Disposable implements IToolImpl {
     private _rewriteCommandLine;
     private _confirmAutomaticUnsandboxRetry;
     private _getAutomaticUnsandboxRetryTitle;
+    /**
+     * Surface a confirmation dialog when the terminal is detected to be waiting
+     * for sensitive input (password, passphrase, OTP, …). Sensitive prompts must
+     * never be routed through the model — the user types the secret directly
+     * into the terminal. The "Focus terminal" action reveals and focuses the
+     * terminal; the "Cancel" action cancels the running command.
+     *
+     * Returns a disposable that hides any pending elicitation. The handler
+     * itself dedupes concurrent elicitations so repeated polling cycles don't
+     * spam the chat session.
+     */
+    private _registerSensitiveInputElicitation;
     private _acceptAutomaticUnsandboxRetryToolInvocationUpdate;
     invoke(invocation: IToolInvocation, _countTokens: CountTokensCallback, _progress: ToolProgress, token: CancellationToken): Promise<IToolResult>;
+    /**
+     * Builds the steering text the model sees when the terminal tool suspects
+     * the command may be waiting for input. The heuristic that triggers this
+     * note can false-positive on long-running compute commands or shells sitting
+     * on a secondary prompt (e.g. heredoc continuation `> `), so the text
+     * explicitly:
+     *   1. Tells the model this note is NOT a signal to end the turn.
+     *   2. In auto-approve mode, leads with `send_to_terminal` for non-secret
+     *      prompts to minimize round-trips, with a `get_terminal_output` fallback.
+     *   3. In default mode, leads with `get_terminal_output` as the safe
+     *      recovery action and offers `vscode_askQuestions` only for real
+     *      non-secret prompts. Secret prompts (passwords, passphrases,
+     *      tokens) must never be routed through `vscode_askQuestions`
+     *      because answers to that tool are sent through the model — the
+     *      user is told to type those values directly into the terminal.
+     * `kill_terminal` is only advertised on the timeout branch — suggesting it
+     * in the general case leads the model to terminate valid interactive
+     * sessions (e.g. `npm init`) instead of driving them.
+     */
+    private _buildInputNeededSteeringText;
     private _getOutputAnalyzerMessage;
     private static readonly _maxImageFileSize;
     /**