@codingame/monaco-vscode-katex-common 33.0.9 → 34.0.0

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxReadAllowList.js

@@ -1,302 +0,0 @@
-
-import { OperatingSystem } from '@codingame/monaco-vscode-api/vscode/vs/base/common/platform';
-import { gitGlobalOptionsWithValue, matchesTerminalSandboxCommandRule } from './terminalSandboxCommandRules.js';
-
-var TerminalSandboxReadAllowListOperation;
-(function(TerminalSandboxReadAllowListOperation) {
-    TerminalSandboxReadAllowListOperation["Git"] = "git";
-    TerminalSandboxReadAllowListOperation["Node"] = "node";
-    TerminalSandboxReadAllowListOperation["Rust"] = "rust";
-    TerminalSandboxReadAllowListOperation["Go"] = "go";
-    TerminalSandboxReadAllowListOperation["Python"] = "python";
-    TerminalSandboxReadAllowListOperation["Java"] = "java";
-    TerminalSandboxReadAllowListOperation["Dotnet"] = "dotnet";
-    TerminalSandboxReadAllowListOperation["Nuget"] = "nuget";
-    TerminalSandboxReadAllowListOperation["Msbuild"] = "msbuild";
-    TerminalSandboxReadAllowListOperation["Ruby"] = "ruby";
-    TerminalSandboxReadAllowListOperation["NativeBuild"] = "nativeBuild";
-    TerminalSandboxReadAllowListOperation["Conan"] = "conan";
-    TerminalSandboxReadAllowListOperation["GnuPG"] = "gnupg";
-})(
-    TerminalSandboxReadAllowListOperation || (TerminalSandboxReadAllowListOperation = {})
-);
-const terminalSandboxReadAllowListKeywordMap = ( new Map([
-    ["git", TerminalSandboxReadAllowListOperation.Git],
-    ["gh", TerminalSandboxReadAllowListOperation.Git],
-    ["node", TerminalSandboxReadAllowListOperation.Node],
-    ["npm", TerminalSandboxReadAllowListOperation.Node],
-    ["npx", TerminalSandboxReadAllowListOperation.Node],
-    ["pnpm", TerminalSandboxReadAllowListOperation.Node],
-    ["yarn", TerminalSandboxReadAllowListOperation.Node],
-    ["corepack", TerminalSandboxReadAllowListOperation.Node],
-    ["bun", TerminalSandboxReadAllowListOperation.Node],
-    ["deno", TerminalSandboxReadAllowListOperation.Node],
-    ["nvm", TerminalSandboxReadAllowListOperation.Node],
-    ["volta", TerminalSandboxReadAllowListOperation.Node],
-    ["fnm", TerminalSandboxReadAllowListOperation.Node],
-    ["asdf", TerminalSandboxReadAllowListOperation.Node],
-    ["mise", TerminalSandboxReadAllowListOperation.Node],
-    ["cargo", TerminalSandboxReadAllowListOperation.Rust],
-    ["rustc", TerminalSandboxReadAllowListOperation.Rust],
-    ["rustup", TerminalSandboxReadAllowListOperation.Rust],
-    ["go", TerminalSandboxReadAllowListOperation.Go],
-    ["gofmt", TerminalSandboxReadAllowListOperation.Go],
-    ["python", TerminalSandboxReadAllowListOperation.Python],
-    ["python3", TerminalSandboxReadAllowListOperation.Python],
-    ["pip", TerminalSandboxReadAllowListOperation.Python],
-    ["pip3", TerminalSandboxReadAllowListOperation.Python],
-    ["poetry", TerminalSandboxReadAllowListOperation.Python],
-    ["uv", TerminalSandboxReadAllowListOperation.Python],
-    ["pipx", TerminalSandboxReadAllowListOperation.Python],
-    ["pyenv", TerminalSandboxReadAllowListOperation.Python],
-    ["java", TerminalSandboxReadAllowListOperation.Java],
-    ["javac", TerminalSandboxReadAllowListOperation.Java],
-    ["jar", TerminalSandboxReadAllowListOperation.Java],
-    ["mvn", TerminalSandboxReadAllowListOperation.Java],
-    ["mvnw", TerminalSandboxReadAllowListOperation.Java],
-    ["gradle", TerminalSandboxReadAllowListOperation.Java],
-    ["gradlew", TerminalSandboxReadAllowListOperation.Java],
-    ["sdk", TerminalSandboxReadAllowListOperation.Java],
-    ["dotnet", TerminalSandboxReadAllowListOperation.Dotnet],
-    ["nuget", TerminalSandboxReadAllowListOperation.Nuget],
-    ["msbuild", TerminalSandboxReadAllowListOperation.Msbuild],
-    ["ruby", TerminalSandboxReadAllowListOperation.Ruby],
-    ["gem", TerminalSandboxReadAllowListOperation.Ruby],
-    ["bundle", TerminalSandboxReadAllowListOperation.Ruby],
-    ["bundler", TerminalSandboxReadAllowListOperation.Ruby],
-    ["rake", TerminalSandboxReadAllowListOperation.Ruby],
-    ["rbenv", TerminalSandboxReadAllowListOperation.Ruby],
-    ["rvm", TerminalSandboxReadAllowListOperation.Ruby],
-    ["ccache", TerminalSandboxReadAllowListOperation.NativeBuild],
-    ["sccache", TerminalSandboxReadAllowListOperation.NativeBuild],
-    ["cmake", TerminalSandboxReadAllowListOperation.NativeBuild],
-    ["conan", TerminalSandboxReadAllowListOperation.Conan]
-]));
-function getTerminalSandboxReadAllowListForOperation(operation, os) {
-    switch (operation) {
-    case TerminalSandboxReadAllowListOperation.Git:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return [
-                "~/.gitconfig",
-                "~/.config/git/config",
-                "~/.gitignore",
-                "~/.gitignore_global",
-                "~/.config/git/ignore",
-                "~/.config/git/attributes"
-            ];
-        }
-    case TerminalSandboxReadAllowListOperation.Node:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-            return [
-                "~/.npm",
-                "~/Library/Caches/node",
-                "~/Library/Caches/electron",
-                "~/Library/Caches/ms-playwright",
-                "~/Library/Caches/Yarn",
-                "~/Library/Caches/deno",
-                "~/Library/pnpm",
-                "~/.electron-gyp",
-                "~/.node-gyp",
-                "~/.yarn/berry",
-                "~/.local/share/pnpm",
-                "~/.pnpm-store",
-                "~/.bun/install/cache",
-                "~/.bun/bin",
-                "~/.deno",
-                "~/.nvm/versions",
-                "~/.nvm/alias",
-                "~/.volta/bin",
-                "~/.volta/tools",
-                "~/.fnm",
-                "~/.asdf/installs/nodejs",
-                "~/.asdf/shims",
-                "~/.local/share/mise/installs/node",
-                "~/.local/share/mise/shims"
-            ];
-        case OperatingSystem.Linux:
-        default:
-            return [
-                "~/.npm",
-                "~/.cache/node",
-                "~/.cache/node/corepack",
-                "~/.cache/electron",
-                "~/.cache/ms-playwright",
-                "~/.cache/yarn",
-                "~/.electron-gyp",
-                "~/.node-gyp",
-                "~/.yarn/berry",
-                "~/.local/share/pnpm",
-                "~/.pnpm-store",
-                "~/.bun/install/cache",
-                "~/.bun/bin",
-                "~/.deno",
-                "~/.cache/deno",
-                "~/.nvm/versions",
-                "~/.nvm/alias",
-                "~/.volta/bin",
-                "~/.volta/tools",
-                "~/.fnm",
-                "~/.asdf/installs/nodejs",
-                "~/.asdf/shims",
-                "~/.local/share/mise/installs/node",
-                "~/.local/share/mise/shims"
-            ];
-        }
-    case TerminalSandboxReadAllowListOperation.Rust:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return [
-                "~/.cargo/bin",
-                "~/.cargo/registry",
-                "~/.cargo/git",
-                "~/.rustup/toolchains"
-            ];
-        }
-    case TerminalSandboxReadAllowListOperation.Go:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-            return ["~/go/pkg/mod", "~/go/bin", "~/Library/Caches/go-build"];
-        case OperatingSystem.Linux:
-        default:
-            return ["~/go/pkg/mod", "~/go/bin", "~/.cache/go-build"];
-        }
-    case TerminalSandboxReadAllowListOperation.Python:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-            return [
-                "~/Library/Caches/pip",
-                "~/Library/Caches/pypoetry",
-                "~/Library/Caches/uv",
-                "~/.local/bin",
-                "~/.local/share/virtualenv",
-                "~/.local/share/pipx",
-                "~/.pyenv/versions",
-                "~/.pyenv/shims"
-            ];
-        case OperatingSystem.Linux:
-        default:
-            return [
-                "~/.cache/pip",
-                "~/.cache/pypoetry",
-                "~/.cache/uv",
-                "~/.local/bin",
-                "~/.local/share/virtualenv",
-                "~/.local/share/pipx",
-                "~/.pyenv/versions",
-                "~/.pyenv/shims"
-            ];
-        }
-    case TerminalSandboxReadAllowListOperation.Java:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return [
-                "~/.m2/repository",
-                "~/.gradle/caches",
-                "~/.gradle/wrapper/dists",
-                "~/.sdkman/candidates"
-            ];
-        }
-    case TerminalSandboxReadAllowListOperation.Dotnet:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return ["~/.dotnet"];
-        }
-    case TerminalSandboxReadAllowListOperation.Nuget:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-            return ["~/.nuget/packages", "~/Library/Caches/NuGet/v3-cache"];
-        case OperatingSystem.Linux:
-        default:
-            return ["~/.nuget/packages", "~/.local/share/NuGet/v3-cache"];
-        }
-    case TerminalSandboxReadAllowListOperation.Msbuild:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return [];
-        }
-    case TerminalSandboxReadAllowListOperation.Ruby:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-            return ["~/.gem", "~/.rbenv/versions", "~/.rbenv/shims", "~/.rvm/rubies"];
-        case OperatingSystem.Linux:
-        default:
-            return ["~/.gem", "~/.rbenv/versions", "~/.rbenv/shims", "~/.rvm/rubies"];
-        }
-    case TerminalSandboxReadAllowListOperation.NativeBuild:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-            return ["~/Library/Caches/ccache", "~/Library/Caches/sccache"];
-        case OperatingSystem.Linux:
-        default:
-            return ["~/.cache/ccache", "~/.cache/sccache"];
-        }
-    case TerminalSandboxReadAllowListOperation.Conan:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return ["~/.conan2/p", "~/.conan2/b"];
-        }
-    case TerminalSandboxReadAllowListOperation.GnuPG:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return ["~/.gnupg"];
-        }
-    }
-}
-function getTerminalSandboxReadAllowListForCommandDetails(os, commandDetails) {
-    const operations = ( new Set());
-    for (const command of commandDetails) {
-        for (const rule of terminalSandboxReadAllowListCommandDetailRules) {
-            if (matchesTerminalSandboxCommandRule(command, rule, {
-                os
-            })) {
-                operations.add(rule.value);
-            }
-        }
-    }
-    const paths = [...operations].flatMap(operation => getTerminalSandboxReadAllowListForOperation(operation, os));
-    return [...( new Set(paths))];
-}
-const terminalSandboxReadAllowListCommandDetailRules = [{
-    keywords: ["gpg", "gpg2"],
-    value: TerminalSandboxReadAllowListOperation.GnuPG
-}, {
-    keywords: ["git"],
-    value: TerminalSandboxReadAllowListOperation.GnuPG,
-    subcommands: ["commit"],
-    optionsWithValue: gitGlobalOptionsWithValue
-}];
-function getTerminalSandboxReadAllowListForCommands(os, commandKeywords, commandDetails = []) {
-    if (commandKeywords.length === 0) {
-        return getTerminalSandboxReadAllowListForCommandDetails(os, commandDetails);
-    }
-    const operations = ( new Set());
-    for (const keyword of commandKeywords) {
-        const operation = terminalSandboxReadAllowListKeywordMap.get(keyword.toLowerCase());
-        if (operation) {
-            operations.add(operation);
-        }
-    }
-    const paths = [...operations].flatMap(operation => getTerminalSandboxReadAllowListForOperation(operation, os));
-    return [...( new Set([
-        ...paths,
-        ...getTerminalSandboxReadAllowListForCommandDetails(os, commandDetails)
-    ]))];
-}
-
-export { TerminalSandboxReadAllowListOperation, getTerminalSandboxReadAllowListForCommands };

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxRuntimeConfigurationPerOperation.d.ts

@@ -1,7 +0,0 @@
-import { OperatingSystem } from "@codingame/monaco-vscode-api/vscode/vs/base/common/platform";
-import type { ITerminalSandboxCommand } from "../../../../../platform/sandbox/common/terminalSandboxService.js";
-export declare enum TerminalSandboxRuntimeConfigurationOperation {
-    GnuPG = "gnupg",
-    Node = "node"
-}
-export declare function getTerminalSandboxRuntimeConfigurationForCommands(os: OperatingSystem, commandDetails: readonly ITerminalSandboxCommand[]): Record<string, unknown>;

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxRuntimeConfigurationPerOperation.js

@@ -1,118 +0,0 @@
-
-import { OperatingSystem } from '@codingame/monaco-vscode-api/vscode/vs/base/common/platform';
-import { gitGlobalOptionsWithValue, matchesTerminalSandboxCommandRule } from './terminalSandboxCommandRules.js';
-
-var TerminalSandboxRuntimeConfigurationOperation;
-(function(TerminalSandboxRuntimeConfigurationOperation) {
-    TerminalSandboxRuntimeConfigurationOperation["GnuPG"] = "gnupg";
-    TerminalSandboxRuntimeConfigurationOperation["Node"] = "node";
-})(
-    TerminalSandboxRuntimeConfigurationOperation || (TerminalSandboxRuntimeConfigurationOperation = {})
-);
-const terminalSandboxRuntimeConfigurationCommandRules = [{
-    keywords: [
-        "node",
-        "npm",
-        "npx",
-        "pnpm",
-        "yarn",
-        "corepack",
-        "bun",
-        "deno",
-        "nvm",
-        "volta",
-        "fnm",
-        "asdf",
-        "mise"
-    ],
-    value: TerminalSandboxRuntimeConfigurationOperation.Node
-}, {
-    keywords: ["git"],
-    value: TerminalSandboxRuntimeConfigurationOperation.GnuPG,
-    subcommands: ["commit"],
-    optionsWithValue: gitGlobalOptionsWithValue,
-    condition: (
-        {
-            os
-        }
-    ) => os !== OperatingSystem.Windows,
-    when: isGpgSignedGitCommit
-}];
-function getTerminalSandboxRuntimeConfigurationForOperation(operation, os) {
-    switch (operation) {
-    case TerminalSandboxRuntimeConfigurationOperation.GnuPG:
-        switch (os) {
-        case OperatingSystem.Windows:
-            return {};
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return {
-                network: {
-                    allowAllUnixSockets: true
-                },
-                filesystem: {
-                    allowRead: ["~/.gnupg"],
-                    allowWrite: ["~/.gnupg"]
-                }
-            };
-        }
-    case TerminalSandboxRuntimeConfigurationOperation.Node:
-        switch (os) {
-        case OperatingSystem.Macintosh:
-        case OperatingSystem.Linux:
-        default:
-            return {
-                filesystem: {
-                    allowWrite: ["~/.volta/"]
-                }
-            };
-        }
-    }
-}
-function getTerminalSandboxRuntimeConfigurationForCommands(os, commandDetails) {
-    const operations = ( new Set());
-    for (const command of commandDetails) {
-        for (const rule of terminalSandboxRuntimeConfigurationCommandRules) {
-            if (matchesTerminalSandboxCommandRule(command, rule, {
-                os
-            })) {
-                operations.add(rule.value);
-            }
-        }
-    }
-    const configuration = {};
-    for (const operation of operations) {
-        mergeAdditionalSandboxConfigProperties(
-            configuration,
-            getTerminalSandboxRuntimeConfigurationForOperation(operation, os)
-        );
-    }
-    return configuration;
-}
-function isGpgSignedGitCommit(command) {
-    return ( command.args.some(
-        arg => arg === "-S" || arg.startsWith("-S") || arg === "--gpg-sign" || arg.startsWith("--gpg-sign=")
-    ));
-}
-function mergeAdditionalSandboxConfigProperties(target, additional) {
-    for (const [key, value] of Object.entries(additional)) {
-        if (!Object.prototype.hasOwnProperty.call(target, key)) {
-            target[key] = value;
-            continue;
-        }
-        const existingValue = target[key];
-        if (Array.isArray(existingValue) && Array.isArray(value)) {
-            target[key] = [...( new Set([...existingValue, ...value]))];
-            continue;
-        }
-        if (isObjectForSandboxConfigMerge(existingValue) && isObjectForSandboxConfigMerge(value)) {
-            mergeAdditionalSandboxConfigProperties(existingValue, value);
-        }
-    }
-}
-function isObjectForSandboxConfigMerge(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
-export { TerminalSandboxRuntimeConfigurationOperation, getTerminalSandboxRuntimeConfigurationForCommands };

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxService.d.ts

@@ -1,114 +0,0 @@
-import { CancellationToken } from "@codingame/monaco-vscode-api/vscode/vs/base/common/cancellation";
-import { Disposable } from "@codingame/monaco-vscode-api/vscode/vs/base/common/lifecycle";
-import { OperatingSystem } from "@codingame/monaco-vscode-api/vscode/vs/base/common/platform";
-import { URI } from "@codingame/monaco-vscode-api/vscode/vs/base/common/uri";
-import { IConfigurationService } from "@codingame/monaco-vscode-api/vscode/vs/platform/configuration/common/configuration.service";
-import { IEnvironmentService } from "@codingame/monaco-vscode-api/vscode/vs/platform/environment/common/environment.service";
-import { IFileService } from "@codingame/monaco-vscode-api/vscode/vs/platform/files/common/files.service";
-import { ILogService } from "@codingame/monaco-vscode-api/vscode/vs/platform/log/common/log.service";
-import { IRemoteAgentService } from "@codingame/monaco-vscode-api/vscode/vs/workbench/services/remote/common/remoteAgentService.service";
-import { IWorkspaceContextService } from "@codingame/monaco-vscode-api/vscode/vs/platform/workspace/common/workspace.service";
-import { IProductService } from "@codingame/monaco-vscode-api/vscode/vs/platform/product/common/productService.service";
-import { ILifecycleService } from "@codingame/monaco-vscode-api/vscode/vs/workbench/services/lifecycle/common/lifecycle.service";
-import { ISandboxHelperService } from "@codingame/monaco-vscode-api/vscode/vs/platform/sandbox/common/sandboxHelperService.service";
-import { IChatService } from "@codingame/monaco-vscode-api/vscode/vs/workbench/contrib/chat/common/chatService/chatService.service";
-import { TerminalSandboxPrerequisiteCheck, type ISandboxDependencyInstallOptions, type ISandboxDependencyInstallResult, type ITerminalSandboxCommand, type ITerminalSandboxPrerequisiteCheckResult, type ITerminalSandboxResolvedNetworkDomains, type ITerminalSandboxWrapResult } from "../../../../../platform/sandbox/common/terminalSandboxService.js";
-import { ITerminalSandboxService } from "@codingame/monaco-vscode-api/vscode/vs/platform/sandbox/common/terminalSandboxService.service";
-export { ITerminalSandboxService, TerminalSandboxPrerequisiteCheck };
-export type { ISandboxDependencyInstallOptions, ISandboxDependencyInstallResult, ISandboxDependencyInstallTerminal, ITerminalSandboxCommand, ITerminalSandboxPrerequisiteCheckResult, ITerminalSandboxResolvedNetworkDomains, ITerminalSandboxWrapResult } from "../../../../../platform/sandbox/common/terminalSandboxService.js";
-export declare class TerminalSandboxService extends Disposable implements ITerminalSandboxService {
-    private readonly _configurationService;
-    private readonly _fileService;
-    private readonly _environmentService;
-    private readonly _logService;
-    private readonly _remoteAgentService;
-    private readonly _workspaceContextService;
-    private readonly _productService;
-    private readonly _lifecycleService;
-    private readonly _sandboxHelperService;
-    private readonly _chatService;
-    readonly _serviceBrand: undefined;
-    private _srtPath;
-    private _rgPath;
-    private _srtPathResolved;
-    private _execPath?;
-    private _sandboxConfigPath;
-    private _sandboxDependencyStatus;
-    private _needsForceUpdateConfigFile;
-    private _tempDir;
-    private _sandboxSettingsId;
-    private _remoteEnvDetailsPromise;
-    private _remoteEnvDetails;
-    private _appRoot;
-    private _commandAllowListKeywords;
-    private _commandAllowListCommandDetails;
-    private _commandCwd;
-    private _os;
-    private _defaultWritePaths;
-    private static readonly _sandboxTempDirName;
-    private static readonly _urlRegex;
-    private static readonly _sshRemoteRegex;
-    private static readonly _hostRegex;
-    constructor(_configurationService: IConfigurationService, _fileService: IFileService, _environmentService: IEnvironmentService, _logService: ILogService, _remoteAgentService: IRemoteAgentService, _workspaceContextService: IWorkspaceContextService, _productService: IProductService, _lifecycleService: ILifecycleService, _sandboxHelperService: ISandboxHelperService, _chatService: IChatService);
-    isEnabled(): Promise<boolean>;
-    isSandboxAllowNetworkEnabled(): Promise<boolean>;
-    getOS(): Promise<OperatingSystem>;
-    wrapCommand(command: string, requestUnsandboxedExecution?: boolean, shell?: string, cwd?: URI, commandDetails?: readonly ITerminalSandboxCommand[]): Promise<ITerminalSandboxWrapResult>;
-    getTempDir(): URI | undefined;
-    setNeedsForceUpdateConfigFile(): void;
-    checkForSandboxingPrereqs(forceRefresh?: boolean): Promise<ITerminalSandboxPrerequisiteCheckResult>;
-    getSandboxConfigPath(forceRefresh?: boolean): Promise<string | undefined>;
-    private _checkSandboxDependencies;
-    getMissingSandboxDependencies(): Promise<string[]>;
-    installMissingSandboxDependencies(missingDependencies: string[], sessionResource: URI | undefined, token: CancellationToken, options: ISandboxDependencyInstallOptions): Promise<ISandboxDependencyInstallResult>;
-    /**
-     * Shows a chat elicitation that keeps the "Install" flow grounded in chat while
-     * the user focuses the terminal and types a sudo password.
-     */
-    private _createMissingDependencyPasswordPrompt;
-    private _quoteShellArgument;
-    private _getSandboxCommandWithPreservedCwd;
-    private _wrapUnsandboxedCommand;
-    private _getBlockedDomains;
-    private _extractDomains;
-    private _extractDomainFromUrl;
-    /**
-     * Creates a stable, case-insensitive keyword set for config refresh checks and
-     * coarse command allow-list rules.
-     */
-    private _normalizeCommandKeywords;
-    /**
-     * Normalizes command details for deterministic comparisons while preserving
-     * argument order within each command for argument-sensitive allow-list rules.
-     */
-    private _normalizeCommandDetails;
-    private _areStringArraysEqual;
-    private _areObjectsEqual;
-    private _isSandboxConfiguredEnabled;
-    private _resolveSrtPath;
-    private _createSandboxConfig;
-    private _getCommandRuntimeFileSystemPaths;
-    private _withoutNetworkRuntimeSetting;
-    private _mergeAdditionalSandboxConfigProperties;
-    private _isObjectForSandboxConfigMerge;
-    private _pathJoin;
-    private _initTempDir;
-    private _cleanupSandboxTempDir;
-    private _getSandboxTempDirPath;
-    private _getSandboxWindowTempDirName;
-    getResolvedNetworkDomains(): ITerminalSandboxResolvedNetworkDomains;
-    private _updateAllowWritePathsWithWorkspaceFolders;
-    private _updateDenyReadPathsWithHome;
-    private _updateAllowReadPathsWithAllowWrite;
-    private _resolveLinuxFileSystemPaths;
-    private _expandHomePath;
-    private _getSandboxRuntimeReadPaths;
-    private _isPathUnderAppRoot;
-    private _getWorkspaceStoragePaths;
-    private _getUserHomePath;
-    private _resolveSandboxDependencyStatus;
-    private _getSandboxConfiguredEnabledValue;
-    private _isSandboxAllowNetworkConfigured;
-    private _areUnsandboxedCommandsAllowed;
-    private _getSettingValue;
-}