devchain-cli 0.15.0 → 0.16.0

package/dist/server/modules/core/services/antigravity-trusted-workspaces.service.js

@@ -0,0 +1,249 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AntigravityTrustedWorkspacesService = void 0;
+const common_1 = require("@nestjs/common");
+const os_1 = require("os");
+const path_1 = require("path");
+const promises_1 = require("fs/promises");
+const crypto_1 = require("crypto");
+const logger_1 = require("../../../common/logging/logger");
+const trust_folders_logic_1 = require("./trust-folders-logic");
+const logger = (0, logger_1.createLogger)('AntigravityTrustedWorkspaces');
+const VALID_LEVELS = new Set(['TRUST_FOLDER', 'TRUST_PARENT', 'DO_NOT_TRUST']);
+let AntigravityTrustedWorkspacesService = class AntigravityTrustedWorkspacesService {
+    constructor() {
+        this.writeTail = Promise.resolve();
+    }
+    get settingsPath() {
+        return (0, path_1.join)((0, os_1.homedir)(), '.gemini', 'antigravity-cli', 'settings.json');
+    }
+    get trustedFoldersPath() {
+        return (0, path_1.join)((0, os_1.homedir)(), '.gemini', 'trustedFolders.json');
+    }
+    ensure(projectPath) {
+        const op = this.writeTail.catch(() => undefined).then(() => this.doEnsure(projectPath));
+        this.writeTail = op.then(() => undefined, () => undefined);
+        return op;
+    }
+    async doEnsure(projectPath) {
+        const normalizedPath = await this.normalizePath(projectPath);
+        const warnings = [];
+        const native = await this.ensureTrustedWorkspaces(normalizedPath);
+        warnings.push(...native.warnings);
+        const shared = await this.ensureTrustedFolders(normalizedPath);
+        warnings.push(...shared.warnings);
+        return { success: native.trusted, warnings };
+    }
+    async ensureTrustedWorkspaces(normalizedPath) {
+        const warnings = [];
+        const filePath = this.settingsPath;
+        try {
+            await (0, promises_1.mkdir)((0, path_1.dirname)(filePath), { recursive: true, mode: 0o700 });
+        }
+        catch (err) {
+            warnings.push({
+                source: 'trusted_workspaces',
+                level: 'warn',
+                message: `Failed to create directory ${(0, path_1.dirname)(filePath)}: ${String(err)}`,
+                code: 'AGY_TRUST_DIR_FAILED',
+            });
+            return { trusted: false, warnings };
+        }
+        let raw;
+        try {
+            raw = await (0, promises_1.readFile)(filePath, 'utf-8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT') {
+                raw = '{}';
+            }
+            else {
+                warnings.push({
+                    source: 'trusted_workspaces',
+                    level: 'warn',
+                    message: `Failed to read ${filePath}: ${String(err)}`,
+                    code: 'AGY_TRUST_READ_FAILED',
+                });
+                return { trusted: false, warnings };
+            }
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            warnings.push({
+                source: 'trusted_workspaces',
+                level: 'warn',
+                message: `${filePath} contains invalid JSON — refusing to modify`,
+                code: 'AGY_SETTINGS_MALFORMED',
+            });
+            return { trusted: false, warnings };
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            warnings.push({
+                source: 'trusted_workspaces',
+                level: 'warn',
+                message: `${filePath} root is not a JSON object — refusing to modify`,
+                code: 'AGY_SETTINGS_MALFORMED',
+            });
+            return { trusted: false, warnings };
+        }
+        const settings = parsed;
+        const existing = settings.trustedWorkspaces;
+        if (existing !== undefined && !Array.isArray(existing)) {
+            warnings.push({
+                source: 'trusted_workspaces',
+                level: 'warn',
+                message: `${filePath} "trustedWorkspaces" is not an array — refusing to modify`,
+                code: 'AGY_TRUSTED_WORKSPACES_MALFORMED',
+            });
+            return { trusted: false, warnings };
+        }
+        const list = Array.isArray(existing) ? [...existing] : [];
+        if (list.includes(normalizedPath)) {
+            return { trusted: true, warnings };
+        }
+        list.push(normalizedPath);
+        const merged = { ...settings, trustedWorkspaces: list };
+        try {
+            await this.atomicWrite(filePath, JSON.stringify(merged, null, 2) + '\n');
+        }
+        catch (err) {
+            warnings.push({
+                source: 'trusted_workspaces',
+                level: 'warn',
+                message: `Failed to write ${filePath}: ${String(err)}`,
+                code: 'AGY_TRUST_WRITE_FAILED',
+            });
+            return { trusted: false, warnings };
+        }
+        logger.info({ projectPath: normalizedPath }, 'Added agy trustedWorkspaces entry');
+        return { trusted: true, warnings };
+    }
+    async ensureTrustedFolders(normalizedPath) {
+        const warnings = [];
+        const filePath = this.trustedFoldersPath;
+        try {
+            await (0, promises_1.mkdir)((0, path_1.dirname)(filePath), { recursive: true, mode: 0o700 });
+        }
+        catch {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `Failed to create directory ${(0, path_1.dirname)(filePath)}`,
+                code: 'AGY_TRUSTED_FOLDERS_DIR_FAILED',
+            });
+            return { warnings };
+        }
+        let raw;
+        try {
+            raw = await (0, promises_1.readFile)(filePath, 'utf-8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT') {
+                raw = '{}';
+            }
+            else {
+                warnings.push({
+                    source: 'trusted_folders',
+                    level: 'warn',
+                    message: `Failed to read ${filePath}: ${String(err)}`,
+                    code: 'AGY_TRUSTED_FOLDERS_READ_FAILED',
+                });
+                return { warnings };
+            }
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `${filePath} contains invalid JSON — refusing to modify`,
+                code: 'AGY_TRUSTED_FOLDERS_MALFORMED',
+            });
+            return { warnings };
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `${filePath} root is not a JSON object — refusing to modify`,
+                code: 'AGY_TRUSTED_FOLDERS_MALFORMED',
+            });
+            return { warnings };
+        }
+        const allRules = parsed;
+        const validRules = {};
+        for (const [path, value] of Object.entries(allRules)) {
+            if (typeof value === 'string' && VALID_LEVELS.has(value)) {
+                validRules[path] = value;
+            }
+        }
+        const trust = (0, trust_folders_logic_1.getEffectiveTrust)(normalizedPath, validRules);
+        if (trust.kind === 'trusted') {
+            return { warnings };
+        }
+        if (trust.kind === 'distrusted') {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `${normalizedPath} is explicitly distrusted (${trust.via}) in ${filePath} — not overriding`,
+                code: 'AGY_TRUSTED_FOLDERS_DISTRUSTED',
+            });
+            return { warnings };
+        }
+        const merged = { ...allRules, [normalizedPath]: 'TRUST_FOLDER' };
+        try {
+            await this.atomicWrite(filePath, JSON.stringify(merged, null, 2) + '\n');
+        }
+        catch (err) {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `Failed to write ${filePath}: ${String(err)}`,
+                code: 'AGY_TRUSTED_FOLDERS_WRITE_FAILED',
+            });
+            return { warnings };
+        }
+        logger.info({ projectPath: normalizedPath }, 'Added trustedFolders entry for agy');
+        return { warnings };
+    }
+    async atomicWrite(filePath, content) {
+        const tmpPath = `${filePath}.tmp.${(0, crypto_1.randomBytes)(8).toString('hex')}`;
+        try {
+            await (0, promises_1.writeFile)(tmpPath, content, { mode: 0o600 });
+            await (0, promises_1.rename)(tmpPath, filePath);
+        }
+        catch (err) {
+            try {
+                await (0, promises_1.unlink)(tmpPath);
+            }
+            catch { }
+            throw err;
+        }
+    }
+    async normalizePath(projectPath) {
+        const resolved = (0, path_1.resolve)((0, path_1.normalize)(projectPath));
+        try {
+            return await (0, promises_1.realpath)(resolved);
+        }
+        catch {
+            return resolved.endsWith('/') ? resolved.slice(0, -1) : resolved;
+        }
+    }
+};
+exports.AntigravityTrustedWorkspacesService = AntigravityTrustedWorkspacesService;
+exports.AntigravityTrustedWorkspacesService = AntigravityTrustedWorkspacesService = __decorate([
+    (0, common_1.Injectable)()
+], AntigravityTrustedWorkspacesService);
+//# sourceMappingURL=antigravity-trusted-workspaces.service.js.map

package/dist/server/modules/core/services/antigravity-trusted-workspaces.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravity-trusted-workspaces.service.js","sourceRoot":"","sources":["../../../../src/modules/core/services/antigravity-trusted-workspaces.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAC5C,2BAA6B;AAC7B,+BAAyD;AACzD,0CAAmF;AACnF,mCAAqC;AACrC,2DAA8D;AAC9D,+DAA2E;AAE3E,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,8BAA8B,CAAC,CAAC;AAE5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;AA2ChF,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAAzC;QACG,cAAS,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAiQ1D,CAAC;IA/PC,IAAY,YAAY;QACtB,OAAO,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;IACxE,CAAC;IAED,IAAY,kBAAkB;QAC5B,OAAO,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IAMD,MAAM,CAAC,WAAmB;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,WAAmB;QACxC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAElC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAIO,KAAK,CAAC,uBAAuB,CACnC,cAAsB;QAEtB,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,IAAA,gBAAK,EAAC,IAAA,cAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,8BAA8B,IAAA,cAAO,EAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE;gBAC1E,IAAI,EAAE,sBAAsB;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,oBAAoB;oBAC5B,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,kBAAkB,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE;oBACrD,IAAI,EAAE,uBAAuB;iBAC9B,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,QAAQ,6CAA6C;gBACjE,IAAI,EAAE,wBAAwB;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,QAAQ,iDAAiD;gBACrE,IAAI,EAAE,wBAAwB;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAiC,CAAC;QACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QAE5C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,QAAQ,2DAA2D;gBAC/E,IAAI,EAAE,kCAAkC;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QAGD,MAAM,IAAI,GAAc,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,mBAAmB,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE;gBACtD,IAAI,EAAE,wBAAwB;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAIO,KAAK,CAAC,oBAAoB,CAChC,cAAsB;QAEtB,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,IAAA,gBAAK,EAAC,IAAA,cAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,8BAA8B,IAAA,cAAO,EAAC,QAAQ,CAAC,EAAE;gBAC1D,IAAI,EAAE,gCAAgC;aACvC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,iBAAiB;oBACzB,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,kBAAkB,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE;oBACrD,IAAI,EAAE,iCAAiC;iBACxC,CAAC,CAAC;gBACH,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,QAAQ,6CAA6C;gBACjE,IAAI,EAAE,+BAA+B;aACtC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,QAAQ,iDAAiD;gBACrE,IAAI,EAAE,+BAA+B;aACtC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAiC,CAAC;QACnD,MAAM,UAAU,GAA+B,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,UAAU,CAAC,IAAI,CAAC,GAAG,KAAmB,CAAC;YACzC,CAAC;QAEH,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,uCAAiB,EAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,cAAc,8BAA8B,KAAK,CAAC,GAAG,QAAQ,QAAQ,mBAAmB;gBACpG,IAAI,EAAE,gCAAgC;aACvC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,mBAAmB,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE;gBACtD,IAAI,EAAE,kCAAkC;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,OAAe;QACzD,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,IAAA,oBAAS,EAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,MAAM,IAAA,iBAAM,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,IAAA,gBAAS,EAAC,WAAW,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,CAAC;IACH,CAAC;CACF,CAAA;AAlQY,kFAAmC;8CAAnC,mCAAmC;IAD/C,IAAA,mBAAU,GAAE;GACA,mCAAmC,CAkQ/C"}

package/dist/server/modules/core/services/copilot-auth-probe.module.d.ts

@@ -0,0 +1,2 @@
+export declare class CopilotAuthProbeModule {
+}

package/dist/server/modules/core/services/copilot-auth-probe.module.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CopilotAuthProbeModule = void 0;
+const common_1 = require("@nestjs/common");
+const copilot_auth_probe_service_1 = require("./copilot-auth-probe.service");
+let CopilotAuthProbeModule = class CopilotAuthProbeModule {
+};
+exports.CopilotAuthProbeModule = CopilotAuthProbeModule;
+exports.CopilotAuthProbeModule = CopilotAuthProbeModule = __decorate([
+    (0, common_1.Module)({
+        providers: [copilot_auth_probe_service_1.CopilotAuthProbeService],
+        exports: [copilot_auth_probe_service_1.CopilotAuthProbeService],
+    })
+], CopilotAuthProbeModule);
+//# sourceMappingURL=copilot-auth-probe.module.js.map

package/dist/server/modules/core/services/copilot-auth-probe.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-auth-probe.module.js","sourceRoot":"","sources":["../../../../src/modules/core/services/copilot-auth-probe.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,6EAAuE;AAMhE,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CAAG,CAAA;AAAzB,wDAAsB;iCAAtB,sBAAsB;IAJlC,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,oDAAuB,CAAC;QACpC,OAAO,EAAE,CAAC,oDAAuB,CAAC;KACnC,CAAC;GACW,sBAAsB,CAAG"}

package/dist/server/modules/core/services/copilot-auth-probe.service.d.ts

@@ -0,0 +1,7 @@
+export declare const COPILOT_AUTH_REMEDIATION: string;
+export declare class CopilotAuthProbeService {
+    private get configPath();
+    isAuthenticated(env?: NodeJS.ProcessEnv): Promise<boolean>;
+    private hasLoggedInUsers;
+    private stripJsoncHeader;
+}

package/dist/server/modules/core/services/copilot-auth-probe.service.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CopilotAuthProbeService = exports.COPILOT_AUTH_REMEDIATION = void 0;
+const common_1 = require("@nestjs/common");
+const os_1 = require("os");
+const path_1 = require("path");
+const promises_1 = require("fs/promises");
+exports.COPILOT_AUTH_REMEDIATION = 'GitHub Copilot CLI is not authenticated. Run `copilot login` to sign in ' +
+    '(or set COPILOT_GITHUB_TOKEN / GH_TOKEN / GITHUB_TOKEN).';
+const AUTH_TOKEN_ENV_KEYS = ['COPILOT_GITHUB_TOKEN', 'GH_TOKEN', 'GITHUB_TOKEN'];
+let CopilotAuthProbeService = class CopilotAuthProbeService {
+    get configPath() {
+        return (0, path_1.join)((0, os_1.homedir)(), '.copilot', 'config.json');
+    }
+    async isAuthenticated(env = process.env) {
+        if (AUTH_TOKEN_ENV_KEYS.some((key) => (env[key] ?? '').trim().length > 0)) {
+            return true;
+        }
+        return this.hasLoggedInUsers();
+    }
+    async hasLoggedInUsers() {
+        let raw;
+        try {
+            raw = await (0, promises_1.readFile)(this.configPath, 'utf-8');
+        }
+        catch {
+            return false;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(this.stripJsoncHeader(raw));
+        }
+        catch {
+            return false;
+        }
+        const users = parsed?.loggedInUsers;
+        return Array.isArray(users) && users.length > 0;
+    }
+    stripJsoncHeader(raw) {
+        const lines = raw.split('\n');
+        let i = 0;
+        while (i < lines.length) {
+            const trimmed = lines[i].trim();
+            if (trimmed === '' || trimmed.startsWith('//')) {
+                i++;
+                continue;
+            }
+            break;
+        }
+        return lines.slice(i).join('\n');
+    }
+};
+exports.CopilotAuthProbeService = CopilotAuthProbeService;
+exports.CopilotAuthProbeService = CopilotAuthProbeService = __decorate([
+    (0, common_1.Injectable)()
+], CopilotAuthProbeService);
+//# sourceMappingURL=copilot-auth-probe.service.js.map

package/dist/server/modules/core/services/copilot-auth-probe.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-auth-probe.service.js","sourceRoot":"","sources":["../../../../src/modules/core/services/copilot-auth-probe.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAC5C,2BAA6B;AAC7B,+BAA4B;AAC5B,0CAAuC;AAM1B,QAAA,wBAAwB,GACnC,0EAA0E;IAC1E,0DAA0D,CAAC;AAG7D,MAAM,mBAAmB,GAAG,CAAC,sBAAsB,EAAE,UAAU,EAAE,cAAc,CAAU,CAAC;AAqBnF,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,IAAY,UAAU;QACpB,OAAO,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;QACxD,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAI,MAAsC,EAAE,aAAa,CAAC;QACrE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,CAAC;IAGO,gBAAgB,CAAC,GAAW;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,MAAM;QACR,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AA7CY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;GACA,uBAAuB,CA6CnC"}

package/dist/server/modules/core/services/copilot-trusted-folders.module.d.ts

@@ -0,0 +1,2 @@
+export declare class CopilotTrustedFoldersModule {
+}

package/dist/server/modules/core/services/{gemini-trusted-folders.module.js → copilot-trusted-folders.module.js}

@@ -6,16 +6,16 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GeminiTrustedFoldersModule = void 0;
+exports.CopilotTrustedFoldersModule = void 0;
 const common_1 = require("@nestjs/common");
-const gemini_trusted_folders_service_1 = require("./gemini-trusted-folders.service");
-let GeminiTrustedFoldersModule = class GeminiTrustedFoldersModule {
+const copilot_trusted_folders_service_1 = require("./copilot-trusted-folders.service");
+let CopilotTrustedFoldersModule = class CopilotTrustedFoldersModule {
 };
-exports.GeminiTrustedFoldersModule = GeminiTrustedFoldersModule;
-exports.GeminiTrustedFoldersModule = GeminiTrustedFoldersModule = __decorate([
+exports.CopilotTrustedFoldersModule = CopilotTrustedFoldersModule;
+exports.CopilotTrustedFoldersModule = CopilotTrustedFoldersModule = __decorate([
     (0, common_1.Module)({
-        providers: [gemini_trusted_folders_service_1.GeminiTrustedFoldersService],
-        exports: [gemini_trusted_folders_service_1.GeminiTrustedFoldersService],
+        providers: [copilot_trusted_folders_service_1.CopilotTrustedFoldersService],
+        exports: [copilot_trusted_folders_service_1.CopilotTrustedFoldersService],
     })
-], GeminiTrustedFoldersModule);
-//# sourceMappingURL=gemini-trusted-folders.module.js.map
+], CopilotTrustedFoldersModule);
+//# sourceMappingURL=copilot-trusted-folders.module.js.map

package/dist/server/modules/core/services/copilot-trusted-folders.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-trusted-folders.module.js","sourceRoot":"","sources":["../../../../src/modules/core/services/copilot-trusted-folders.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,uFAAiF;AAM1E,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;CAAG,CAAA;AAA9B,kEAA2B;sCAA3B,2BAA2B;IAJvC,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,8DAA4B,CAAC;QACzC,OAAO,EAAE,CAAC,8DAA4B,CAAC;KACxC,CAAC;GACW,2BAA2B,CAAG"}

package/dist/server/modules/core/services/copilot-trusted-folders.service.d.ts

@@ -0,0 +1,22 @@
+export interface CopilotTrustWarning {
+    source: 'trusted_folders';
+    level: 'warn';
+    message: string;
+    code?: string;
+}
+export interface EnsureCopilotTrustResult {
+    success: boolean;
+    warnings: CopilotTrustWarning[];
+}
+export declare class CopilotTrustedFoldersService {
+    private writeTail;
+    private get configPath();
+    ensure(projectPath: string): Promise<EnsureCopilotTrustResult>;
+    private doEnsure;
+    private retryAdd;
+    private entryPresent;
+    private splitJsonc;
+    private serialize;
+    private atomicWrite;
+    private normalizePath;
+}

package/dist/server/modules/core/services/copilot-trusted-folders.service.js

@@ -0,0 +1,228 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CopilotTrustedFoldersService = void 0;
+const common_1 = require("@nestjs/common");
+const os_1 = require("os");
+const path_1 = require("path");
+const promises_1 = require("fs/promises");
+const crypto_1 = require("crypto");
+const logger_1 = require("../../../common/logging/logger");
+const logger = (0, logger_1.createLogger)('CopilotTrustedFolders');
+let CopilotTrustedFoldersService = class CopilotTrustedFoldersService {
+    constructor() {
+        this.writeTail = Promise.resolve();
+    }
+    get configPath() {
+        return (0, path_1.join)((0, os_1.homedir)(), '.copilot', 'config.json');
+    }
+    ensure(projectPath) {
+        const op = this.writeTail.catch(() => undefined).then(() => this.doEnsure(projectPath));
+        this.writeTail = op.then(() => undefined, () => undefined);
+        return op;
+    }
+    async doEnsure(projectPath) {
+        const normalizedPath = await this.normalizePath(projectPath);
+        const warnings = [];
+        const filePath = this.configPath;
+        try {
+            await (0, promises_1.mkdir)((0, path_1.dirname)(filePath), { recursive: true, mode: 0o700 });
+        }
+        catch (err) {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `Failed to create directory ${(0, path_1.dirname)(filePath)}: ${String(err)}`,
+                code: 'COPILOT_TRUST_DIR_FAILED',
+            });
+            return { success: false, warnings };
+        }
+        let raw;
+        try {
+            raw = await (0, promises_1.readFile)(filePath, 'utf-8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT') {
+                raw = '{}';
+            }
+            else {
+                warnings.push({
+                    source: 'trusted_folders',
+                    level: 'warn',
+                    message: `Failed to read ${filePath}: ${String(err)}`,
+                    code: 'COPILOT_TRUST_READ_FAILED',
+                });
+                return { success: false, warnings };
+            }
+        }
+        const split = this.splitJsonc(raw);
+        let parsed;
+        try {
+            parsed = JSON.parse(split.body);
+        }
+        catch {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `${filePath} contains invalid JSON — refusing to modify`,
+                code: 'COPILOT_CONFIG_MALFORMED',
+            });
+            return { success: false, warnings };
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `${filePath} root is not a JSON object — refusing to modify`,
+                code: 'COPILOT_CONFIG_MALFORMED',
+            });
+            return { success: false, warnings };
+        }
+        const config = parsed;
+        const existing = config.trustedFolders;
+        if (existing !== undefined && !Array.isArray(existing)) {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `${filePath} "trustedFolders" is not an array — refusing to modify`,
+                code: 'COPILOT_TRUSTED_FOLDERS_MALFORMED',
+            });
+            return { success: false, warnings };
+        }
+        const list = Array.isArray(existing) ? [...existing] : [];
+        if (list.includes(normalizedPath)) {
+            return { success: true, warnings };
+        }
+        list.push(normalizedPath);
+        const merged = { ...config, trustedFolders: list };
+        const content = this.serialize(split.header, merged);
+        try {
+            await this.atomicWrite(filePath, content);
+        }
+        catch (err) {
+            warnings.push({
+                source: 'trusted_folders',
+                level: 'warn',
+                message: `Failed to write ${filePath}: ${String(err)}`,
+                code: 'COPILOT_TRUST_WRITE_FAILED',
+            });
+            return { success: false, warnings };
+        }
+        if (!(await this.entryPresent(filePath, normalizedPath))) {
+            logger.warn({ projectPath: normalizedPath }, 'Copilot trustedFolders entry missing after write — retrying once');
+            const retry = await this.retryAdd(filePath, normalizedPath);
+            if (!retry.ok) {
+                warnings.push({
+                    source: 'trusted_folders',
+                    level: 'warn',
+                    message: `Copilot trustedFolders entry for ${normalizedPath} did not persist (concurrent writer?)`,
+                    code: 'COPILOT_TRUST_LOST_UPDATE',
+                });
+                return { success: false, warnings };
+            }
+        }
+        logger.info({ projectPath: normalizedPath }, 'Added copilot trustedFolders entry');
+        return { success: true, warnings };
+    }
+    async retryAdd(filePath, normalizedPath) {
+        let raw;
+        try {
+            raw = await (0, promises_1.readFile)(filePath, 'utf-8');
+        }
+        catch {
+            return { ok: false };
+        }
+        const split = this.splitJsonc(raw);
+        let parsed;
+        try {
+            parsed = JSON.parse(split.body);
+        }
+        catch {
+            return { ok: false };
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            return { ok: false };
+        }
+        const config = parsed;
+        const existing = config.trustedFolders;
+        if (existing !== undefined && !Array.isArray(existing)) {
+            return { ok: false };
+        }
+        const list = Array.isArray(existing) ? [...existing] : [];
+        if (!list.includes(normalizedPath)) {
+            list.push(normalizedPath);
+        }
+        const merged = { ...config, trustedFolders: list };
+        try {
+            await this.atomicWrite(filePath, this.serialize(split.header, merged));
+        }
+        catch {
+            return { ok: false };
+        }
+        return { ok: await this.entryPresent(filePath, normalizedPath) };
+    }
+    async entryPresent(filePath, normalizedPath) {
+        try {
+            const raw = await (0, promises_1.readFile)(filePath, 'utf-8');
+            const parsed = JSON.parse(this.splitJsonc(raw).body);
+            const list = parsed?.trustedFolders;
+            return Array.isArray(list) && list.includes(normalizedPath);
+        }
+        catch {
+            return false;
+        }
+    }
+    splitJsonc(raw) {
+        const lines = raw.split('\n');
+        let i = 0;
+        while (i < lines.length) {
+            const trimmed = lines[i].trim();
+            if (trimmed === '' || trimmed.startsWith('//')) {
+                i++;
+                continue;
+            }
+            break;
+        }
+        if (i === 0) {
+            return { header: '', body: raw };
+        }
+        return { header: lines.slice(0, i).join('\n'), body: lines.slice(i).join('\n') };
+    }
+    serialize(header, value) {
+        const json = JSON.stringify(value, null, 2) + '\n';
+        return header ? `${header}\n${json}` : json;
+    }
+    async atomicWrite(filePath, content) {
+        const tmpPath = `${filePath}.tmp.${(0, crypto_1.randomBytes)(8).toString('hex')}`;
+        try {
+            await (0, promises_1.writeFile)(tmpPath, content, { mode: 0o600 });
+            await (0, promises_1.rename)(tmpPath, filePath);
+        }
+        catch (err) {
+            try {
+                await (0, promises_1.unlink)(tmpPath);
+            }
+            catch { }
+            throw err;
+        }
+    }
+    async normalizePath(projectPath) {
+        const resolved = (0, path_1.resolve)((0, path_1.normalize)(projectPath));
+        try {
+            return await (0, promises_1.realpath)(resolved);
+        }
+        catch {
+            return resolved.endsWith('/') ? resolved.slice(0, -1) : resolved;
+        }
+    }
+};
+exports.CopilotTrustedFoldersService = CopilotTrustedFoldersService;
+exports.CopilotTrustedFoldersService = CopilotTrustedFoldersService = __decorate([
+    (0, common_1.Injectable)()
+], CopilotTrustedFoldersService);
+//# sourceMappingURL=copilot-trusted-folders.service.js.map