@qduc/term2 0.11.1 → 0.13.0

package/dist/utils/shell/sandbox/denied-read-stores.js.map

@@ -1 +1 @@
-{"version":3,"file":"denied-read-stores.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/denied-read-stores.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAc7B;;;;;;;;;GASG;AACH,MAAM,OAAO,eAAe;IAC1B,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,sBAAsB,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,MAAM,CAAC,OAAe,EAAE,IAAoB;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,kBAAkB,CAAC,aAAqB,EAAE,IAAoB;QAC5D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,aAAqB;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACjC,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElD,GAAG,CAAC,OAAe,EAAE,QAA2B;QAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAOvD;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IAC9B,cAAc,CAAS;IACvB,IAAI,CAAmB;IACvB,GAAG,CAAY;IAExB,YAAY,aAAqB,EAAE,MAAkB,EAAE,GAAqB;QAC1E,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;IACjF,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmC,CAAC;YACjE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8DAA8D;YAC9D,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,kEAAkE,EAAE;gBAClF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5F,CAAC;IAED,UAAU,CAAC,KAAe;QACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEnE,IAAI,qBAAqB,GAAwC,IAAI,CAAC;AACtE,IAAI,yBAAyB,GAAkB,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,aAAqB;IAC5D,IAAI,CAAC,qBAAqB,IAAI,yBAAyB,KAAK,aAAa,EAAE,CAAC;QAC1E,qBAAqB,GAAG,IAAI,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACxE,yBAAyB,GAAG,aAAa,CAAC;IAC5C,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mCAAmC;IACjD,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,sBAAsB,CAAC,KAAK,EAAE,CAAC;IAC/B,qBAAqB,GAAG,IAAI,CAAC;IAC7B,yBAAyB,GAAG,IAAI,CAAC;AACnC,CAAC"}
+{"version":3,"file":"denied-read-stores.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/denied-read-stores.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAc7B;;;;;;;;;GASG;AACH,MAAM,OAAO,eAAe;IAC1B,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,sBAAsB,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,MAAM,CAAC,OAAe,EAAE,IAAoB;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,kBAAkB,CAAC,aAAqB,EAAE,IAAoB;QAC5D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,aAAqB;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACjC,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElD,GAAG,CAAC,OAAe,EAAE,QAA2B;QAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAOvD;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IAC9B,cAAc,CAAS;IACvB,IAAI,CAAmB;IACvB,GAAG,CAAY;IAExB,YAAY,aAAqB,EAAE,MAAkB,EAAE,GAAqB;QAC1E,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;IACjF,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmC,CAAC;YACjE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8DAA8D;YAC9D,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,kEAAkE,EAAE;gBAClF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5F,CAAC;IAED,UAAU,CAAC,KAAe;QACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEnE,IAAI,qBAAqB,GAAwC,IAAI,CAAC;AACtE,IAAI,yBAAyB,GAAkB,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,aAAqB;IAC5D,IAAI,CAAC,qBAAqB,IAAI,yBAAyB,KAAK,aAAa,EAAE,CAAC;QAC1E,qBAAqB,GAAG,IAAI,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACxE,yBAAyB,GAAG,aAAa,CAAC;IAC5C,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,sBAAsB,CAAC,KAAK,EAAE,CAAC;IAC/B,qBAAqB,GAAG,IAAI,CAAC;IAC7B,yBAAyB,GAAG,IAAI,CAAC;AACnC,CAAC"}

package/dist/utils/shell/sandbox/docker-host-control-grants.d.ts

@@ -7,21 +7,51 @@ type DockerHostControlGrantRequest = {
     sessionId: string;
 };
 declare const realRoot: (cwd: string) => string;
+/** Narrow capability grant store. Persistence is intentionally limited to user settings. */
+export declare class DockerHostControlGrants {
+    #private;
+    /**
+     * A sandboxed run of this command was blocked from the Docker daemon.
+     *
+     * Scoped to the session that hit the block: the record is what later grants a
+     * command host control, so another session must not inherit it. A run with no
+     * session identity cannot be attributed, so it is dropped rather than recorded
+     * globally — the command stays sandboxed instead of gaining unearned access.
+     */
+    recordDenial(sessionId: string | undefined, command: string): void;
+    consumeDenial(sessionId: string | undefined, command: string): boolean;
+    hasDenial(sessionId: string | undefined, command: string): boolean;
+    requiresApproval(sessionId: string | undefined, command: string): boolean;
+    configure(settings: ISettingsService): void;
+    grant({ command, cwd, scope, sessionId }: DockerHostControlGrantRequest): void;
+    consumeOnce(sessionId: string, command: string): boolean;
+    hasSession(sessionId: string, cwd: string): boolean;
+    hasProject(cwd: string): boolean;
+    grantProject(cwd: string): void;
+    clearSession(sessionId: string): void;
+    resetForTests(): void;
+}
 export declare const configureDockerHostControlGrants: (settings: ISettingsService) => void;
 export declare const grantDockerHostControl: (grant: DockerHostControlGrantRequest) => void;
 export declare const consumeDockerHostControlOnce: (sessionId: string, command: string) => boolean;
 export declare const hasDockerHostControlSession: (sessionId: string, cwd: string) => boolean;
 export declare const hasDockerHostControlProject: (cwd: string) => boolean;
 export declare const clearDockerHostControlSession: (sessionId: string) => void;
-export declare const recordDockerHostControlDenial: (command: string) => void;
-export declare const consumeDockerHostControlDenial: (command: string) => boolean;
+export declare const recordDockerHostControlDenial: (sessionId: string | undefined, command: string) => void;
+export declare const consumeDockerHostControlDenial: (sessionId: string | undefined, command: string) => boolean;
 /**
  * Whether this command must go through the Docker host-control approval prompt:
- * either it reads as a Docker invocation, or a sandboxed run of it was already
- * blocked from the daemon (the only signal for indirect invocations).
+ * either it reads as a Docker invocation, or a sandboxed run of it in *this*
+ * session was already blocked from the daemon (the only signal for indirect
+ * invocations).
+ *
+ * Every caller that decides approval must pass the same session, or the prompt
+ * and the execution disagree about Docker and the command stalls on approval.
+ * The UI cannot see a session, so it must not call this — see
+ * `ApprovalDescriptor.dockerHostControl`, resolved by the producer that can.
  */
-export declare const requiresDockerHostControlApproval: (command: string) => boolean;
-export declare const resetDockerHostControlGrantsForTests: () => void;
 export declare const normalizeDockerHostControlWorkspaceRoot: typeof realRoot;
+export declare const requiresDockerHostControlApproval: (sessionId: string | undefined, command: string) => boolean;
+export declare const resetDockerHostControlGrantsForTests: () => void;
 export {};
 //# sourceMappingURL=docker-host-control-grants.d.ts.map

package/dist/utils/shell/sandbox/docker-host-control-grants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docker-host-control-grants.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/docker-host-control-grants.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAGhF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpE,KAAK,6BAA6B,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,sBAAsB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,QAAA,MAAM,QAAQ,QAAS,MAAM,WAO5B,CAAC;AA4EF,eAAO,MAAM,gCAAgC,aAAc,gBAAgB,SAC9B,CAAC;AAC9C,eAAO,MAAM,sBAAsB,UAAW,6BAA6B,SAAyC,CAAC;AACrH,eAAO,MAAM,4BAA4B,cAAe,MAAM,WAAW,MAAM,YACtB,CAAC;AAC1D,eAAO,MAAM,2BAA2B,cAAe,MAAM,OAAO,MAAM,YACtB,CAAC;AACrD,eAAO,MAAM,2BAA2B,QAAS,MAAM,YAA4C,CAAC;AACpG,eAAO,MAAM,6BAA6B,cAAe,MAAM,SAAoD,CAAC;AACpH,eAAO,MAAM,6BAA6B,YAAa,MAAM,SAAkD,CAAC;AAChH,eAAO,MAAM,8BAA8B,YAAa,MAAM,YAAmD,CAAC;AAElH;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,YAAa,MAAM,YACiB,CAAC;AACnF,eAAO,MAAM,oCAAoC,YAAgD,CAAC;AAClG,eAAO,MAAM,uCAAuC,iBAAW,CAAC"}
+{"version":3,"file":"docker-host-control-grants.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/docker-host-control-grants.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAGhF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpE,KAAK,6BAA6B,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,sBAAsB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,QAAA,MAAM,QAAQ,QAAS,MAAM,WAO5B,CAAC;AAEF,4FAA4F;AAC5F,qBAAa,uBAAuB;;IAMlC;;;;;;;OAOG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAKjE;IAED,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAMrE;IAED,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAGjE;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAExE;IAED,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAE1C;IAED,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,6BAA6B,GAAG,IAAI,CAY7E;IAED,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKvD;IAED,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAElD;IAED,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/B;IAED,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAK9B;IAED,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAIpC;IAED,aAAa,IAAI,IAAI,CAKpB;CACF;AAGD,eAAO,MAAM,gCAAgC,aAAc,gBAAgB,SAC9B,CAAC;AAC9C,eAAO,MAAM,sBAAsB,UAAW,6BAA6B,SAAyC,CAAC;AACrH,eAAO,MAAM,4BAA4B,cAAe,MAAM,WAAW,MAAM,YACtB,CAAC;AAC1D,eAAO,MAAM,2BAA2B,cAAe,MAAM,OAAO,MAAM,YACtB,CAAC;AACrD,eAAO,MAAM,2BAA2B,QAAS,MAAM,YAA4C,CAAC;AACpG,eAAO,MAAM,6BAA6B,cAAe,MAAM,SAAoD,CAAC;AACpH,eAAO,MAAM,6BAA6B,cAAe,MAAM,GAAG,SAAS,WAAW,MAAM,SAClC,CAAC;AAC3D,eAAO,MAAM,8BAA8B,cAAe,MAAM,GAAG,SAAS,WAAW,MAAM,YAClC,CAAC;AAC5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uCAAuC,iBAAW,CAAC;AAChE,eAAO,MAAM,iCAAiC,cAAe,MAAM,GAAG,SAAS,WAAW,MAAM,YACH,CAAC;AAC9F,eAAO,MAAM,oCAAoC,YAAgD,CAAC"}

package/dist/utils/shell/sandbox/docker-host-control-grants.js

@@ -11,20 +11,43 @@ const realRoot = (cwd) => {
     }
 };
 /** Narrow capability grant store. Persistence is intentionally limited to user settings. */
-class DockerHostControlGrants {
+export class DockerHostControlGrants {
     #settings;
     #onceBySession = new Map();
     #sessionRootsBySession = new Map();
-    #deniedCommands = new Set();
-    /** A sandboxed run of this command was blocked from the Docker daemon. */
-    recordDenial(command) {
-        this.#deniedCommands.add(command);
+    #deniedBySession = new Map();
+    /**
+     * A sandboxed run of this command was blocked from the Docker daemon.
+     *
+     * Scoped to the session that hit the block: the record is what later grants a
+     * command host control, so another session must not inherit it. A run with no
+     * session identity cannot be attributed, so it is dropped rather than recorded
+     * globally — the command stays sandboxed instead of gaining unearned access.
+     */
+    recordDenial(sessionId, command) {
+        if (!sessionId)
+            return;
+        const commands = this.#deniedBySession.get(sessionId) ?? new Set();
+        commands.add(command);
+        this.#deniedBySession.set(sessionId, commands);
     }
-    consumeDenial(command) {
-        return this.#deniedCommands.delete(command);
+    consumeDenial(sessionId, command) {
+        if (!sessionId)
+            return false;
+        const commands = this.#deniedBySession.get(sessionId);
+        if (!commands?.delete(command))
+            return false;
+        if (commands.size === 0)
+            this.#deniedBySession.delete(sessionId);
+        return true;
     }
-    hasDenial(command) {
-        return this.#deniedCommands.has(command);
+    hasDenial(sessionId, command) {
+        if (!sessionId)
+            return false;
+        return this.#deniedBySession.get(sessionId)?.has(command) ?? false;
+    }
+    requiresApproval(sessionId, command) {
+        return requestsDockerHostControl(command) || this.hasDenial(sessionId, command);
     }
     configure(settings) {
         this.#settings = settings;
@@ -58,9 +81,9 @@ class DockerHostControlGrants {
         return (this.#settings?.get('sandbox.dockerHostControlProjects') ?? []).includes(realRoot(cwd));
     }
     grantProject(cwd) {
+        const root = realRoot(cwd);
         if (!this.#settings)
             throw new Error('Docker host-control grants are not configured.');
-        const root = realRoot(cwd);
         const projects = this.#settings.get('sandbox.dockerHostControlProjects') ?? [];
         if (!projects.includes(root))
             this.#settings.set('sandbox.dockerHostControlProjects', [...projects, root]);
@@ -68,11 +91,12 @@ class DockerHostControlGrants {
     clearSession(sessionId) {
         this.#onceBySession.delete(sessionId);
         this.#sessionRootsBySession.delete(sessionId);
+        this.#deniedBySession.delete(sessionId);
     }
     resetForTests() {
         this.#onceBySession.clear();
         this.#sessionRootsBySession.clear();
-        this.#deniedCommands.clear();
+        this.#deniedBySession.clear();
         this.#settings = undefined;
     }
 }
@@ -83,14 +107,20 @@ export const consumeDockerHostControlOnce = (sessionId, command) => dockerHostCo
 export const hasDockerHostControlSession = (sessionId, cwd) => dockerHostControlGrants.hasSession(sessionId, cwd);
 export const hasDockerHostControlProject = (cwd) => dockerHostControlGrants.hasProject(cwd);
 export const clearDockerHostControlSession = (sessionId) => dockerHostControlGrants.clearSession(sessionId);
-export const recordDockerHostControlDenial = (command) => dockerHostControlGrants.recordDenial(command);
-export const consumeDockerHostControlDenial = (command) => dockerHostControlGrants.consumeDenial(command);
+export const recordDockerHostControlDenial = (sessionId, command) => dockerHostControlGrants.recordDenial(sessionId, command);
+export const consumeDockerHostControlDenial = (sessionId, command) => dockerHostControlGrants.consumeDenial(sessionId, command);
 /**
  * Whether this command must go through the Docker host-control approval prompt:
- * either it reads as a Docker invocation, or a sandboxed run of it was already
- * blocked from the daemon (the only signal for indirect invocations).
+ * either it reads as a Docker invocation, or a sandboxed run of it in *this*
+ * session was already blocked from the daemon (the only signal for indirect
+ * invocations).
+ *
+ * Every caller that decides approval must pass the same session, or the prompt
+ * and the execution disagree about Docker and the command stalls on approval.
+ * The UI cannot see a session, so it must not call this — see
+ * `ApprovalDescriptor.dockerHostControl`, resolved by the producer that can.
  */
-export const requiresDockerHostControlApproval = (command) => requestsDockerHostControl(command) || dockerHostControlGrants.hasDenial(command);
-export const resetDockerHostControlGrantsForTests = () => dockerHostControlGrants.resetForTests();
 export const normalizeDockerHostControlWorkspaceRoot = realRoot;
+export const requiresDockerHostControlApproval = (sessionId, command) => requestsDockerHostControl(command) || dockerHostControlGrants.hasDenial(sessionId, command);
+export const resetDockerHostControlGrantsForTests = () => dockerHostControlGrants.resetForTests();
 //# sourceMappingURL=docker-host-control-grants.js.map

package/dist/utils/shell/sandbox/docker-host-control-grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker-host-control-grants.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/docker-host-control-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAWrE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF,4FAA4F;AAC5F,MAAM,uBAAuB;IAC3B,SAAS,CAA+B;IACxC,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,sBAAsB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,0EAA0E;IAC1E,YAAY,CAAC,OAAe;QAC1B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,SAAS,CAAC,QAA0B;QAClC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAiC;QACrE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAC9E,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,OAAe;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,GAAW;QACvC,OAAO,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC;IACjF,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAW,mCAAmC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,mCAAmC,CAAC,IAAI,EAAE,CAAC;QACzF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mCAAmC,EAAE,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,aAAa;QACX,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,EAAE,CAAC;AAC9D,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,QAA0B,EAAE,EAAE,CAC7E,uBAAuB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAoC,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,EAAE,CACjF,uBAAuB,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,SAAiB,EAAE,GAAW,EAAE,EAAE,CAC5E,uBAAuB,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AACpH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AAChH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,uBAAuB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AAElH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,OAAe,EAAE,EAAE,CACnE,yBAAyB,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,aAAa,EAAE,CAAC;AAClG,MAAM,CAAC,MAAM,uCAAuC,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"docker-host-control-grants.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/docker-host-control-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAWrE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF,4FAA4F;AAC5F,MAAM,OAAO,uBAAuB;IAClC,SAAS,CAA+B;IACxC,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,sBAAsB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElD;;;;;;;OAOG;IACH,YAAY,CAAC,SAA6B,EAAE,OAAe;QACzD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,aAAa,CAAC,SAA6B,EAAE,OAAe;QAC1D,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,SAA6B,EAAE,OAAe;QACtD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACrE,CAAC;IAED,gBAAgB,CAAC,SAA6B,EAAE,OAAe;QAC7D,OAAO,yBAAyB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClF,CAAC;IAED,SAAS,CAAC,QAA0B;QAClC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAiC;QACrE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAC9E,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,OAAe;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,GAAW;QACvC,OAAO,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC;IACjF,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,mCAAmC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mCAAmC,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mCAAmC,EAAE,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa;QACX,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,EAAE,CAAC;AAC9D,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,QAA0B,EAAE,EAAE,CAC7E,uBAAuB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAoC,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,EAAE,CACjF,uBAAuB,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,SAAiB,EAAE,GAAW,EAAE,EAAE,CAC5E,uBAAuB,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AACpH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAA6B,EAAE,OAAe,EAAE,EAAE,CAC9F,uBAAuB,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,SAA6B,EAAE,OAAe,EAAE,EAAE,CAC/F,uBAAuB,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,QAAQ,CAAC;AAChE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,SAA6B,EAAE,OAAe,EAAE,EAAE,CAClG,yBAAyB,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,aAAa,EAAE,CAAC"}

package/dist/utils/shell/sandbox/sandbox-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-env.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-env.ts"],"names":[],"mappings":"AAQA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAehD;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACnC,iBAAiB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D;AAED,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAAC,UAAU,CA2BnB"}
+{"version":3,"file":"sandbox-env.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-env.ts"],"names":[],"mappings":"AASA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAehD;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACnC,iBAAiB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D;AAED,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAAC,UAAU,CA2BnB"}

package/dist/utils/shell/sandbox/sandbox-env.js

@@ -1,4 +1,5 @@
 import { resolveSandboxXdgLayout } from '../temp-dir.js';
+import { getActiveWorkspaceRoot } from '../../../services/workspace/active-workspace-root.js';
 const ALLOWED_EXACT_KEYS = new Set(['PATH', 'SHELL', 'TMPDIR', 'TEMP', 'TMP', 'TERM', 'HOME', 'TMUX']);
 function isAllowedKey(key) {
     return ALLOWED_EXACT_KEYS.has(key) || key === 'LANG' || key.startsWith('LC_');
@@ -28,7 +29,7 @@ export function createSandboxEnvironment(source = process.env, options = {}) {
         env[key] = value;
     }
     if (options.readPolicy === 'strict') {
-        const cwd = options.cwd ?? process.cwd();
+        const cwd = options.cwd ?? getActiveWorkspaceRoot();
         const { config, cache, data, state } = resolveSandboxXdgLayout(cwd);
         env.XDG_CONFIG_HOME = config;
         env.XDG_CACHE_HOME = cache;

package/dist/utils/shell/sandbox/sandbox-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-env.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvG,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,CACL,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QACzB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QACzB,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;QAC5B,GAAG,KAAK,cAAc;QACtB,GAAG,KAAK,eAAe;QACvB,GAAG,KAAK,eAAe,CACxB,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,wBAAwB,CACtC,MAAM,GAAsB,OAAO,CAAC,GAAG,EACvC,OAAO,GAA8B,EAAE;IAEvC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,8EAA8E;QAC9E,4FAA4F;QAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACpE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;QAC7B,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;QAC3B,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;QACzB,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,GAAG,CAAC,WAAW,GAAG,UAAU,OAAO,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;QACnE,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"sandbox-env.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAE9F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvG,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,CACL,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QACzB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACtB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QACzB,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;QAC5B,GAAG,KAAK,cAAc;QACtB,GAAG,KAAK,eAAe;QACvB,GAAG,KAAK,eAAe,CACxB,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,wBAAwB,CACtC,MAAM,GAAsB,OAAO,CAAC,GAAG,EACvC,OAAO,GAA8B,EAAE;IAEvC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,8EAA8E;QAC9E,4FAA4F;QAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACpD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACpE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;QAC7B,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;QAC3B,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;QACzB,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,GAAG,CAAC,WAAW,GAAG,UAAU,OAAO,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;QACnE,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/shell/sandbox/sandbox-network-approval-coordinator.d.ts

@@ -0,0 +1,21 @@
+import type { NetworkApprovalAnswer, SandboxNetworkAccessRequest } from './sandbox-network-approval.js';
+export type SandboxNetworkApprovalSnapshot = Readonly<{
+    activeRequest: SandboxNetworkAccessRequest | null;
+}>;
+/**
+ * Serializes sandbox-network approval requests for one interactive surface.
+ *
+ * The coordinator owns the request lifetime: one request is observable at a
+ * time, and teardown fails closed for both the active request and every queued
+ * request. Its consumer only needs to render `activeRequest` and submit an
+ * answer for it.
+ */
+export declare class SandboxNetworkApprovalCoordinator {
+    #private;
+    getSnapshot(): SandboxNetworkApprovalSnapshot;
+    subscribe(listener: () => void): () => void;
+    request(request: SandboxNetworkAccessRequest): Promise<NetworkApprovalAnswer>;
+    resolve(request: SandboxNetworkAccessRequest, answer: NetworkApprovalAnswer): void;
+    dispose(): void;
+}
+//# sourceMappingURL=sandbox-network-approval-coordinator.d.ts.map

package/dist/utils/shell/sandbox/sandbox-network-approval-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-network-approval-coordinator.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-network-approval-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAExG,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,aAAa,EAAE,2BAA2B,GAAG,IAAI,CAAC;CACnD,CAAC,CAAC;AAOH;;;;;;;GAOG;AACH,qBAAa,iCAAiC;;IAO5C,WAAW,IAAI,8BAA8B,CAE5C;IAED,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAK1C;IAED,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAO5E;IAED,OAAO,CAAC,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAOjF;IAED,OAAO,IAAI,IAAI,CASd;CAcF"}

package/dist/utils/shell/sandbox/sandbox-network-approval-coordinator.js

@@ -0,0 +1,66 @@
+/**
+ * Serializes sandbox-network approval requests for one interactive surface.
+ *
+ * The coordinator owns the request lifetime: one request is observable at a
+ * time, and teardown fails closed for both the active request and every queued
+ * request. Its consumer only needs to render `activeRequest` and submit an
+ * answer for it.
+ */
+export class SandboxNetworkApprovalCoordinator {
+    #active = null;
+    #queue = [];
+    #listeners = new Set();
+    #snapshot = { activeRequest: null };
+    #disposed = false;
+    getSnapshot() {
+        return this.#snapshot;
+    }
+    subscribe(listener) {
+        this.#listeners.add(listener);
+        return () => {
+            this.#listeners.delete(listener);
+        };
+    }
+    request(request) {
+        if (this.#disposed)
+            return Promise.resolve('deny');
+        return new Promise((resolve) => {
+            this.#queue.push({ request, resolve });
+            this.#showNext();
+        });
+    }
+    resolve(request, answer) {
+        const active = this.#active;
+        if (!active || active.request !== request || this.#disposed)
+            return;
+        this.#active = null;
+        this.#showNext();
+        active.resolve(answer);
+    }
+    dispose() {
+        if (this.#disposed)
+            return;
+        this.#disposed = true;
+        const pending = [...(this.#active ? [this.#active] : []), ...this.#queue];
+        this.#active = null;
+        this.#queue = [];
+        this.#setSnapshot(null);
+        for (const item of pending)
+            item.resolve('deny');
+    }
+    #showNext() {
+        if (this.#active || this.#disposed)
+            return;
+        const next = this.#queue.shift() ?? null;
+        this.#active = next;
+        this.#setSnapshot(next?.request ?? null);
+    }
+    #setSnapshot(activeRequest) {
+        if (this.#snapshot.activeRequest === activeRequest)
+            return;
+        this.#snapshot = { activeRequest };
+        for (const listener of this.#listeners)
+            listener();
+    }
+}
+//# sourceMappingURL=sandbox-network-approval-coordinator.js.map

package/dist/utils/shell/sandbox/sandbox-network-approval-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-network-approval-coordinator.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-network-approval-coordinator.ts"],"names":[],"mappings":"AAWA;;;;;;;GAOG;AACH,MAAM,OAAO,iCAAiC;IAC5C,OAAO,GAA0B,IAAI,CAAC;IACtC,MAAM,GAAqB,EAAE,CAAC;IAC9B,UAAU,GAAG,IAAI,GAAG,EAAc,CAAC;IACnC,SAAS,GAAmC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACpE,SAAS,GAAG,KAAK,CAAC;IAElB,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,QAAoB;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,OAAoC;QAC1C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEnD,OAAO,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,EAAE;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAoC,EAAE,MAA6B;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAEpE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,YAAY,CAAC,aAAiD;QAC5D,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,KAAK,aAAa;YAAE,OAAO;QAC3D,IAAI,CAAC,SAAS,GAAG,EAAE,aAAa,EAAE,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;CACF"}

package/dist/utils/shell/sandbox/sandbox-network-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-network-store.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-network-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAWzB,qBAAa,wBAAwB;;IAGnC,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAEhC;IAED,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAK9C;IAED,KAAK,IAAI,IAAI,CAEZ;CACF;AAED,qBAAa,wBAAwB;;IAInC,YAAY,aAAa,EAAE,MAAM,EAAE,UAAU,GAAE,OAAO,EAAO,EAG5D;IAMD,IAAI,IAAI,MAAM,EAAE,CAYf;IAED,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAM9C;IAED,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAMnC;CAQF;AAED,eAAO,MAAM,wBAAwB,0BAAiC,CAAC;AAKvE,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,wBAAwB,CAM3F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,GAAE,MAAsB,GAAG,OAAO,CAGzG;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,SAAS,GAAG,SAAS,EAC5B,aAAa,GAAE,MAAsB,GACpC,IAAI,CAON;AAED,wBAAgB,+BAA+B,IAAI,IAAI,CAItD"}
+{"version":3,"file":"sandbox-network-store.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-network-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAYzB,qBAAa,wBAAwB;;IAGnC,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAEhC;IAED,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAK9C;IAED,KAAK,IAAI,IAAI,CAEZ;CACF;AAED,qBAAa,wBAAwB;;IAInC,YAAY,aAAa,EAAE,MAAM,EAAE,UAAU,GAAE,OAAO,EAAO,EAG5D;IAMD,IAAI,IAAI,MAAM,EAAE,CAYf;IAED,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAM9C;IAED,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAMnC;CAQF;AAED,eAAO,MAAM,wBAAwB,0BAAiC,CAAC;AAKvE,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,wBAAwB,CAM3F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,GAAE,MAAiC,GAAG,OAAO,CAGpH;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,SAAS,GAAG,SAAS,EAC5B,aAAa,GAAE,MAAiC,GAC/C,IAAI,CAON;AAED,wBAAgB,+BAA+B,IAAI,IAAI,CAItD"}

package/dist/utils/shell/sandbox/sandbox-network-store.js

@@ -1,4 +1,5 @@
 import fs from 'node:fs';
+import { getActiveWorkspaceRoot } from '../../../services/workspace/active-workspace-root.js';
 import path from 'node:path';
 const PROJECT_CONFIG_DIR = '.term2';
 const PROJECT_NETWORK_HOSTS_FILE = 'sandbox-network-hosts.json';
@@ -77,12 +78,12 @@ export function getProjectNetworkAllowStore(workspaceRoot) {
     }
     return projectNetworkAllowStore;
 }
-export function isHostAllowed(host, port, workspaceRoot = process.cwd()) {
+export function isHostAllowed(host, port, workspaceRoot = getActiveWorkspaceRoot()) {
     if (sessionNetworkAllowStore.isAllowed(host, port))
         return true;
     return getProjectNetworkAllowStore(workspaceRoot).isAllowed(host, port);
 }
-export function addAllowedHost(host, port, scope, workspaceRoot = process.cwd()) {
+export function addAllowedHost(host, port, scope, workspaceRoot = getActiveWorkspaceRoot()) {
     const entry = port != null && port !== 80 && port !== 443 ? `${host}:${port}` : host;
     if (scope === 'session') {
         sessionNetworkAllowStore.add(entry);

package/dist/utils/shell/sandbox/sandbox-network-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-network-store.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-network-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAOhE,MAAM,OAAO,wBAAwB;IACnC,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,GAAG,CAAC,cAAsB;QACxB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,IAAa;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK;QACH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IACnC,cAAc,CAAS;IACvB,GAAG,CAAY;IAEf,YAAY,aAAqB,EAAE,UAAU,GAAc,EAAE;QAC3D,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC;IACxB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IACxF,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqC,CAAC;YACnE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACzG,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,IAAa;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,cAAsB;QAC3B,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA4B,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5F,CAAC;CACF;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAEvE,IAAI,wBAAwB,GAAoC,IAAI,CAAC;AACrE,IAAI,4BAA4B,GAAkB,IAAI,CAAC;AAEvD,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,IAAI,CAAC,wBAAwB,IAAI,4BAA4B,KAAK,aAAa,EAAE,CAAC;QAChF,wBAAwB,GAAG,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACvE,4BAA4B,GAAG,aAAa,CAAC;IAC/C,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAa,EAAE,aAAa,GAAW,OAAO,CAAC,GAAG,EAAE;IAC9F,IAAI,wBAAwB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,2BAA2B,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAwB,EACxB,KAA4B,EAC5B,aAAa,GAAW,OAAO,CAAC,GAAG,EAAE;IAErC,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;SAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,2BAA2B,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,wBAAwB,CAAC,KAAK,EAAE,CAAC;IACjC,wBAAwB,GAAG,IAAI,CAAC;IAChC,4BAA4B,GAAG,IAAI,CAAC;AACtC,CAAC"}
+{"version":3,"file":"sandbox-network-store.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-network-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAC9F,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAOhE,MAAM,OAAO,wBAAwB;IACnC,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,GAAG,CAAC,cAAsB;QACxB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,IAAa;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK;QACH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IACnC,cAAc,CAAS;IACvB,GAAG,CAAY;IAEf,YAAY,aAAqB,EAAE,UAAU,GAAc,EAAE;QAC3D,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC;IACxB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IACxF,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqC,CAAC;YACnE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACzG,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,IAAa;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,cAAsB;QAC3B,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO;QACzC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA4B,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5F,CAAC;CACF;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,wBAAwB,EAAE,CAAC;AAEvE,IAAI,wBAAwB,GAAoC,IAAI,CAAC;AACrE,IAAI,4BAA4B,GAAkB,IAAI,CAAC;AAEvD,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,IAAI,CAAC,wBAAwB,IAAI,4BAA4B,KAAK,aAAa,EAAE,CAAC;QAChF,wBAAwB,GAAG,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACvE,4BAA4B,GAAG,aAAa,CAAC;IAC/C,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAa,EAAE,aAAa,GAAW,sBAAsB,EAAE;IACzG,IAAI,wBAAwB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,2BAA2B,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAwB,EACxB,KAA4B,EAC5B,aAAa,GAAW,sBAAsB,EAAE;IAEhD,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;SAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,2BAA2B,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,wBAAwB,CAAC,KAAK,EAAE,CAAC;IACjC,wBAAwB,GAAG,IAAI,CAAC;IAChC,4BAA4B,GAAG,IAAI,CAAC;AACtC,CAAC"}

package/dist/utils/shell/sandbox/sandbox-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-policy.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-policy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAI1E,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEtD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,aAAa,CAAC;AAEzD,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,YAAY,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,CACF,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,oBAAoB,CAAC;QAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GACA,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACxD,mBAAmB,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1D;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yGAAyG;IACzG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;CAC7D;AAsWD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CA0BrE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,iCAAsC,GAAG,oBAAoB,CA2HhH;AAED,eAAO,MAAM,0BAA0B,+IACqG,CAAC"}
+{"version":3,"file":"sandbox-policy.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-policy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAI1E,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEtD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,aAAa,CAAC;AAEzD,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,YAAY,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,CACF,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,oBAAoB,CAAC;QAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GACA,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACxD,mBAAmB,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1D;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yGAAyG;IACzG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;CAC7D;AAsWD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CA0BrE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,iCAAsC,GAAG,oBAAoB,CA2HhH;AAED,eAAO,MAAM,0BAA0B,+IACqG,CAAC"}

package/dist/utils/shell/sandbox/sandbox-policy.js

@@ -1,4 +1,5 @@
 import os from 'node:os';
+import { getActiveWorkspaceRoot } from '../../../services/workspace/active-workspace-root.js';
 import fs from 'node:fs';
 import path from 'node:path';
 import { SANDBOX_TEMP_DIR } from '../temp-dir.js';
@@ -353,7 +354,7 @@ export function isPathProtected(target, home) {
 export function createSandboxRuntimeConfig(options = {}) {
     const home = options.home ?? os.homedir();
     const readPolicy = options.readPolicy ?? 'standard';
-    const workspaceRoot = fs.realpathSync(options.cwd ?? process.cwd());
+    const workspaceRoot = fs.realpathSync(options.cwd ?? getActiveWorkspaceRoot());
     const tmpDir = SANDBOX_TEMP_DIR;
     const appCacheDir = path.join(home, '.cache', 'term2-nodejs');
     const rtkConfigDir = path.join(home, '.config', 'rtk');

package/dist/utils/shell/sandbox/sandbox-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-policy.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAuC/C,MAAM,gBAAgB,GAAG;IACvB,qBAAqB;IACrB,4BAA4B;IAC5B,8BAA8B;IAC9B,6BAA6B;IAC7B,2CAA2C;IAC3C,gCAAgC;IAChC,2DAA2D;IAC3D,6BAA6B;IAC7B,6CAA6C;IAC7C,8CAA8C;IAC9C,+BAA+B;IAC/B,wCAAwC;IACxC,sCAAsC;IACtC,wCAAwC;IACxC,oCAAoC;IACpC,2CAA2C;IAC3C,6CAA6C;IAE7C,yBAAyB;IACzB,sBAAsB;IACtB,gCAAgC;IAChC,0BAA0B;IAC1B,yCAAyC;IAEzC,+BAA+B;IAC/B,YAAY;IACZ,SAAS;IACT,yBAAyB;IACzB,aAAa;IACb,cAAc;IACd,kCAAkC;IAClC,gBAAgB;IAChB,SAAS;IACT,mBAAmB;IACnB,QAAQ;IACR,gBAAgB;IAEhB,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;IAC3B,+BAA+B;IAC/B,gBAAgB;IAChB,oCAAoC;IACpC,+BAA+B;IAC/B,qBAAqB;IACrB,yBAAyB;IACzB,oBAAoB;IACpB,8CAA8C;IAE9C,mCAAmC;IACnC,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAE7C,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,6BAA6B;IAC7B,iCAAiC;IACjC,2CAA2C;IAC3C,4BAA4B;IAC5B,4BAA4B;IAC5B,8BAA8B;IAC9B,SAAS;IACT,qCAAqC;IACrC,yBAAyB;IACzB,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,+BAA+B;IAE/B,OAAO;IACP,SAAS;IACT,kBAAkB;IAClB,sCAAsC;IACtC,sCAAsC;IAEtC,KAAK;IACL,QAAQ;IACR,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,+CAA+C;IAE/C,UAAU;IACV,aAAa;IACb,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IAEvB,OAAO;IACP,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,+CAA+C;IAC/C,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,qBAAqB;IACrB,oBAAoB;IACpB,8BAA8B;IAC9B,iBAAiB;IACjB,sBAAsB;IACtB,qBAAqB;IAErB,uBAAuB;IACvB,WAAW;IACX,WAAW;IACX,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,QAAQ;IACR,WAAW;IACX,mBAAmB;IACnB,oBAAoB;IAEpB,OAAO;IACP,UAAU;IACV,cAAc;IACd,cAAc;IACd,mBAAmB;IAEnB,MAAM;IACN,oBAAoB;IACpB,eAAe;IACf,iBAAiB;IAEjB,SAAS;IACT,iBAAiB;IACjB,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,aAAa;IACb,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IAEnB,OAAO;IACP,cAAc;IACd,kBAAkB;IAClB,yBAAyB;IACzB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,qBAAqB;IACrB,UAAU;IAEV,OAAO;IACP,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,sBAAsB;IAEtB,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,eAAe;IACf,mBAAmB;IAEnB,YAAY;IACZ,wBAAwB;IACxB,4BAA4B;IAC5B,4BAA4B;IAC5B,uBAAuB;IAEvB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IAEtB,aAAa;IACb,wCAAwC;IACxC,oBAAoB;IACpB,0BAA0B;IAC1B,iCAAiC;IACjC,kCAAkC;IAClC,kDAAkD;IAElD,SAAS;IACT,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,0BAA0B;IAC1B,kBAAkB;IAElB,SAAS;IACT,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,0BAA0B;IAC1B,cAAc;IAEd,SAAS;IACT,sBAAsB;IACtB,2BAA2B;IAC3B,4BAA4B;IAE5B,SAAS;IACT,mBAAmB;IACnB,kBAAkB;IAElB,SAAS;IACT,wBAAwB;IACxB,qBAAqB;IAErB,OAAO;IACP,sBAAsB;IACtB,eAAe;IAEf,OAAO;IACP,uBAAuB;IAEvB,UAAU;IACV,gBAAgB;IAEhB,yBAAyB;IACzB,iBAAiB;IACjB,2BAA2B;IAC3B,wBAAwB;IAExB,QAAQ;IACR,WAAW;IACX,aAAa;CACd,CAAC;AAEF,2EAA2E;AAC3E,kCAAkC;AAClC,0DAA0D;AAC1D,iEAAiE;AACjE,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,mFAAmF;AACnF,MAAM,2BAA2B,GAAG;IAClC,OAAO,EAAE,wCAAwC;IACjD,OAAO;IACP,MAAM;IACN,cAAc;IACd,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;CACE,CAAC;AAEX,MAAM,6BAA6B,GAAG;IACpC,MAAM;IACN,cAAc;IACd,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,iBAAiB;CACT,CAAC;AAEX,wDAAwD;AACxD,kDAAkD;AAClD,qEAAqE;AACrE,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,wEAAwE;AACxE,iEAAiE;AACjE,MAAM,2BAA2B,GAAG,CAAC,YAAY,CAAU,CAAC;AAE5D,SAAS,cAAc,CAAC,QAAgB,EAAE,IAAY;IACpD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,iEAAiE;AACjE,4EAA4E;AAC5E,2DAA2D;AAC3D,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAE3C,KAAK,MAAM,aAAa,IAAI,2BAA2B,EAAE,CAAC;QACxD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,KAAK,MAAM,aAAa,IAAI,2BAA2B,EAAE,CAAC;QACxD,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,iBAAiB,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,MAAM,aAAa,IAAI,6BAA6B,EAAE,CAAC;QAC1D,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAO,GAAsC,EAAE;IACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC;IACpD,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC;KAChC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC;KAC1C,CAAC;IACF,MAAM,wBAAwB,GAAG;QAC/B,mBAAmB;QACnB,uBAAuB;QACvB,mBAAmB;QACnB,gCAAgC;QAChC,cAAc;QACd,gBAAgB;QAChB,mBAAmB;QACnB,eAAe;QACf,eAAe;KAChB,CAAC;IACF,8EAA8E;IAC9E,wFAAwF;IACxF,uFAAuF;IACvF,+FAA+F;IAC/F,4FAA4F;IAC5F,kFAAkF;IAClF,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,wBAAwB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAC9G,OAAO,CAAC,UAAU,CAAC,CACpB,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IAC7G,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,qDAAqD;IACrD,MAAM,yBAAyB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,SAAS,GACb,UAAU,KAAK,QAAQ;QACrB,CAAC,CAAC;YACE,aAAa;YACb,MAAM;YACN,WAAW;YACX,YAAY;YACZ,UAAU;YACV,GAAG,iBAAiB;YACpB,GAAG,cAAc;YACjB,GAAG,yBAAyB;YAC5B,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,QAAQ;YACR,MAAM;YACN,UAAU;YACV,iBAAiB;YACjB,YAAY;YACZ,eAAe;SAChB;QACH,CAAC,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,mBAAmB,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC;IACzD,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,gBAAgB;YAChC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3C,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC/C,iBAAiB,EAAE,eAAe;YAClC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;QACD,UAAU,EAAE;YACV,QAAQ;YACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,UAAU;YACV,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,IAAI;SACrB;QACD,WAAW,EAAE;YACX,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;YACrF,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;SAC5E;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GACrC,0IAA0I,CAAC"}
+{"version":3,"file":"sandbox-policy.js","sourceRoot":"","sources":["../../../../source/utils/shell/sandbox/sandbox-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAC9F,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAuC/C,MAAM,gBAAgB,GAAG;IACvB,qBAAqB;IACrB,4BAA4B;IAC5B,8BAA8B;IAC9B,6BAA6B;IAC7B,2CAA2C;IAC3C,gCAAgC;IAChC,2DAA2D;IAC3D,6BAA6B;IAC7B,6CAA6C;IAC7C,8CAA8C;IAC9C,+BAA+B;IAC/B,wCAAwC;IACxC,sCAAsC;IACtC,wCAAwC;IACxC,oCAAoC;IACpC,2CAA2C;IAC3C,6CAA6C;IAE7C,yBAAyB;IACzB,sBAAsB;IACtB,gCAAgC;IAChC,0BAA0B;IAC1B,yCAAyC;IAEzC,+BAA+B;IAC/B,YAAY;IACZ,SAAS;IACT,yBAAyB;IACzB,aAAa;IACb,cAAc;IACd,kCAAkC;IAClC,gBAAgB;IAChB,SAAS;IACT,mBAAmB;IACnB,QAAQ;IACR,gBAAgB;IAEhB,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;IAC3B,+BAA+B;IAC/B,gBAAgB;IAChB,oCAAoC;IACpC,+BAA+B;IAC/B,qBAAqB;IACrB,yBAAyB;IACzB,oBAAoB;IACpB,8CAA8C;IAE9C,mCAAmC;IACnC,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAC7C,6CAA6C;IAE7C,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;IACpB,6BAA6B;IAC7B,iCAAiC;IACjC,2CAA2C;IAC3C,4BAA4B;IAC5B,4BAA4B;IAC5B,8BAA8B;IAC9B,SAAS;IACT,qCAAqC;IACrC,yBAAyB;IACzB,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,+BAA+B;IAE/B,OAAO;IACP,SAAS;IACT,kBAAkB;IAClB,sCAAsC;IACtC,sCAAsC;IAEtC,KAAK;IACL,QAAQ;IACR,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,+CAA+C;IAE/C,UAAU;IACV,aAAa;IACb,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IAEvB,OAAO;IACP,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,+CAA+C;IAC/C,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,qBAAqB;IACrB,oBAAoB;IACpB,8BAA8B;IAC9B,iBAAiB;IACjB,sBAAsB;IACtB,qBAAqB;IAErB,uBAAuB;IACvB,WAAW;IACX,WAAW;IACX,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,QAAQ;IACR,WAAW;IACX,mBAAmB;IACnB,oBAAoB;IAEpB,OAAO;IACP,UAAU;IACV,cAAc;IACd,cAAc;IACd,mBAAmB;IAEnB,MAAM;IACN,oBAAoB;IACpB,eAAe;IACf,iBAAiB;IAEjB,SAAS;IACT,iBAAiB;IACjB,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,aAAa;IACb,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IAEnB,OAAO;IACP,cAAc;IACd,kBAAkB;IAClB,yBAAyB;IACzB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,qBAAqB;IACrB,UAAU;IAEV,OAAO;IACP,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,sBAAsB;IAEtB,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,eAAe;IACf,mBAAmB;IAEnB,YAAY;IACZ,wBAAwB;IACxB,4BAA4B;IAC5B,4BAA4B;IAC5B,uBAAuB;IAEvB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IAEtB,aAAa;IACb,wCAAwC;IACxC,oBAAoB;IACpB,0BAA0B;IAC1B,iCAAiC;IACjC,kCAAkC;IAClC,kDAAkD;IAElD,SAAS;IACT,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,0BAA0B;IAC1B,kBAAkB;IAElB,SAAS;IACT,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,0BAA0B;IAC1B,cAAc;IAEd,SAAS;IACT,sBAAsB;IACtB,2BAA2B;IAC3B,4BAA4B;IAE5B,SAAS;IACT,mBAAmB;IACnB,kBAAkB;IAElB,SAAS;IACT,wBAAwB;IACxB,qBAAqB;IAErB,OAAO;IACP,sBAAsB;IACtB,eAAe;IAEf,OAAO;IACP,uBAAuB;IAEvB,UAAU;IACV,gBAAgB;IAEhB,yBAAyB;IACzB,iBAAiB;IACjB,2BAA2B;IAC3B,wBAAwB;IAExB,QAAQ;IACR,WAAW;IACX,aAAa;CACd,CAAC;AAEF,2EAA2E;AAC3E,kCAAkC;AAClC,0DAA0D;AAC1D,iEAAiE;AACjE,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,mFAAmF;AACnF,MAAM,2BAA2B,GAAG;IAClC,OAAO,EAAE,wCAAwC;IACjD,OAAO;IACP,MAAM;IACN,cAAc;IACd,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;CACE,CAAC;AAEX,MAAM,6BAA6B,GAAG;IACpC,MAAM;IACN,cAAc;IACd,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,iBAAiB;CACT,CAAC;AAEX,wDAAwD;AACxD,kDAAkD;AAClD,qEAAqE;AACrE,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,wEAAwE;AACxE,iEAAiE;AACjE,MAAM,2BAA2B,GAAG,CAAC,YAAY,CAAU,CAAC;AAE5D,SAAS,cAAc,CAAC,QAAgB,EAAE,IAAY;IACpD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,iEAAiE;AACjE,4EAA4E;AAC5E,2DAA2D;AAC3D,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAE3C,KAAK,MAAM,aAAa,IAAI,2BAA2B,EAAE,CAAC;QACxD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,KAAK,MAAM,aAAa,IAAI,2BAA2B,EAAE,CAAC;QACxD,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,iBAAiB,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,MAAM,aAAa,IAAI,6BAA6B,EAAE,CAAC;QAC1D,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAO,GAAsC,EAAE;IACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC;IACpD,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,sBAAsB,EAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC;KAChC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC;KAC1C,CAAC;IACF,MAAM,wBAAwB,GAAG;QAC/B,mBAAmB;QACnB,uBAAuB;QACvB,mBAAmB;QACnB,gCAAgC;QAChC,cAAc;QACd,gBAAgB;QAChB,mBAAmB;QACnB,eAAe;QACf,eAAe;KAChB,CAAC;IACF,8EAA8E;IAC9E,wFAAwF;IACxF,uFAAuF;IACvF,+FAA+F;IAC/F,4FAA4F;IAC5F,kFAAkF;IAClF,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,wBAAwB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAC9G,OAAO,CAAC,UAAU,CAAC,CACpB,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IAC7G,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,qDAAqD;IACrD,MAAM,yBAAyB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,SAAS,GACb,UAAU,KAAK,QAAQ;QACrB,CAAC,CAAC;YACE,aAAa;YACb,MAAM;YACN,WAAW;YACX,YAAY;YACZ,UAAU;YACV,GAAG,iBAAiB;YACpB,GAAG,cAAc;YACjB,GAAG,yBAAyB;YAC5B,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,QAAQ;YACR,MAAM;YACN,UAAU;YACV,iBAAiB;YACjB,YAAY;YACZ,eAAe;SAChB;QACH,CAAC,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,mBAAmB,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC;IACzD,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,gBAAgB;YAChC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3C,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC/C,iBAAiB,EAAE,eAAe;YAClC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;QACD,UAAU,EAAE;YACV,QAAQ;YACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,UAAU;YACV,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,IAAI;SACrB;QACD,WAAW,EAAE;YACX,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;YACrF,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;SAC5E;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GACrC,0IAA0I,CAAC"}

package/dist/utils/shell/shell-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell-session.js","sourceRoot":"","sources":["../../../source/utils/shell/shell-session.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAGnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAS/D,MAAM,UAAU,qBAAqB,CAAC,OAA4B;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,oBAAoB,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,MAKlD;IACC,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,oBAAoB,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAS,sBAAsB,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,oBAAoB,IAAI,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE;QACvD,OAAO;QACP,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS;KAC/B,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe;QACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shell-session.js","sourceRoot":"","sources":["../../../source/utils/shell/shell-session.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAGnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAS/D,MAAM,UAAU,qBAAqB,CAAC,OAA4B;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,oBAAoB,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,MAKlD;IACC,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,oBAAoB,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChF,MAAM,eAAe,GAAG,oBAAoB,IAAI,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE;QACvD,OAAO;QACP,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS;KAC/B,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe;QACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC"}

package/dist/utils/slash-command-dispatch.d.ts

@@ -0,0 +1,21 @@
+import type { SlashCommand } from '../slash-commands.js';
+/**
+ * The one place that decides whether a fully-formed piece of text is a slash
+ * command to execute locally versus ordinary content. Both the primary
+ * submit path (`app.tsx`'s `handleSubmit`, reached when the user types text
+ * and presses Enter with no menu open) and the menu-controller's
+ * `submit-prompt` intent host (reached when a controller-owned menu, e.g.
+ * the direct `/model ` picker, finishes by handing off already-composed
+ * command text) call this so the two paths cannot drift: text like
+ * `/model gpt-4` always resolves to executing the `/model` command's
+ * `action`, never to being sent to the model as a literal chat message,
+ * regardless of which caller produced it.
+ *
+ * Returns `true` when `text` resolved to a known slash command and its
+ * `action` was invoked (input is cleared unless the action explicitly
+ * returns `false`). Returns `false` when `text` is not a slash command, or
+ * names one that isn't registered — the caller is expected to fall back to
+ * sending `text` as ordinary content in that case.
+ */
+export declare function tryExecuteSlashCommand(text: string, slashCommands: readonly SlashCommand[], replaceInput: (value: string) => void): boolean;
+//# sourceMappingURL=slash-command-dispatch.d.ts.map

package/dist/utils/slash-command-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-command-dispatch.d.ts","sourceRoot":"","sources":["../../source/utils/slash-command-dispatch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,SAAS,YAAY,EAAE,EACtC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACpC,OAAO,CAYT"}

package/dist/utils/slash-command-dispatch.js

@@ -0,0 +1,34 @@
+import { parseInput } from './input-parser.js';
+import { resolveSlashCommand } from '../slash-commands.js';
+/**
+ * The one place that decides whether a fully-formed piece of text is a slash
+ * command to execute locally versus ordinary content. Both the primary
+ * submit path (`app.tsx`'s `handleSubmit`, reached when the user types text
+ * and presses Enter with no menu open) and the menu-controller's
+ * `submit-prompt` intent host (reached when a controller-owned menu, e.g.
+ * the direct `/model ` picker, finishes by handing off already-composed
+ * command text) call this so the two paths cannot drift: text like
+ * `/model gpt-4` always resolves to executing the `/model` command's
+ * `action`, never to being sent to the model as a literal chat message,
+ * regardless of which caller produced it.
+ *
+ * Returns `true` when `text` resolved to a known slash command and its
+ * `action` was invoked (input is cleared unless the action explicitly
+ * returns `false`). Returns `false` when `text` is not a slash command, or
+ * names one that isn't registered — the caller is expected to fall back to
+ * sending `text` as ordinary content in that case.
+ */
+export function tryExecuteSlashCommand(text, slashCommands, replaceInput) {
+    const parsed = parseInput(text);
+    if (parsed.type !== 'slash-command')
+        return false;
+    const command = resolveSlashCommand(slashCommands, parsed.commandName);
+    if (!command)
+        return false;
+    const shouldClearInput = command.action(parsed.args || undefined);
+    if (shouldClearInput !== false) {
+        replaceInput('');
+    }
+    return true;
+}
+//# sourceMappingURL=slash-command-dispatch.js.map

package/dist/utils/slash-command-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-command-dispatch.js","sourceRoot":"","sources":["../../source/utils/slash-command-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG3D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,aAAsC,EACtC,YAAqC;IAErC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAElD,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAA+B,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;IAClE,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;QAC/B,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/streaming/extract-command-messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extract-command-messages.d.ts","sourceRoot":"","sources":["../../../source/utils/streaming/extract-command-messages.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,eAAO,MAAM,6BAA6B,YAAa,MAAM,GAAG,IAAI,KAAG,IAItE,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAO,IAE9C,CAAC;AAEF,eAAO,MAAM,+BAA+B,YAAa,MAAM,GAAG,IAAI,KAAG,IAKxE,CAAC;AAEF,eAAO,MAAM,6BAA6B,QAAO,IAEhD,CAAC;AA0DF,eAAO,MAAM,sBAAsB,WAAW,SAAS,OAAO,EAAE,KAAQ,cAAc,EA6FrF,CAAC"}
+{"version":3,"file":"extract-command-messages.d.ts","sourceRoot":"","sources":["../../../source/utils/streaming/extract-command-messages.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAO3D,eAAO,MAAM,6BAA6B,YAAa,MAAM,GAAG,IAAI,KAAG,IAItE,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAO,IAE9C,CAAC;AAEF,eAAO,MAAM,+BAA+B,YAAa,MAAM,GAAG,IAAI,KAAG,IAKxE,CAAC;AAEF,eAAO,MAAM,6BAA6B,QAAO,IAEhD,CAAC;AAoCF,eAAO,MAAM,sBAAsB,WAAW,SAAS,OAAO,EAAE,KAAQ,cAAc,EAkFrF,CAAC"}