sessionPermissions.ts ×5
Frontier kind: Code frontier
unlabeled · c_058bae496e60
50 tests · 23474 LOC · 96 files · introduces 0 tests · 11 LOC · 1 file
Introduces — evidence that enters the hierarchy at this concept
Code
5 ranges 11 lines · 1 files
Tests
0 tests
Contains — complete concept membership
Neighbourhood graph
The orange circle is the focus. Violet and green circles are every ancestor and descendant, broader and narrower, at any distance; blue squares and pink diamonds are the introduced files and exact introduced tests of every visible concept, not only the focus's. Arrows point from broader to narrower concepts and bridge only concepts omitted from this view. Undirected links show source or test introduction. Concept and file size follows LOC; exact test nodes use test-count units.
Introduced files, introduced tests, and structurally relevant concept specialization
In the embedded map, ordinary wheel input scrolls the page; use the visible controls to zoom and drag to pan. Open the full-screen map for canvas navigation: wheel pans, Ctrl/Command plus wheel zooms, and arrow keys pan when this region is focused. On touch screens, open the full-screen map to pan or pinch. If JavaScript or WebGL is unavailable, use the native relationship evidence on this page.
Graph controls are ready.
Interactive rendering requires JavaScript and WebGL. Use the native relationship evidence on this page while the interactive map is unavailable.
JavaScript is disabled; use the native relationship evidence on this page to explore the same evidence.
Native relationship evidence
Every exact file and test below is linked only from the concept that introduces it.
sessionPermissions.ts ×5 Introduced files:
agentSideEffects.test|title=AgentSideEffects edit auto-approve blocks writes to package.json|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects edit auto-approve auto-approves writes to regular source files|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects edit auto-approve blocks writes to .lock files|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects edit auto-approve blocks writes to .env files|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects edit auto-approve blocks writes to .git directory|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects session config auto-approve does NOT auto-approve when autoApprove is default|occurrence=1 Introduced tests:
agentSideEffects.ts ×2 Introduced files:
Introduced tests:
agentSideEffects.test|title=AgentSideEffects subagent sessions reads inside parent working directory are auto-approved for tools in subagent sessions|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects tool_ready dispatches progress actions to advance tool call state tool_ready for an additional chat is emitted on that chat channel|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects session permissions ChatToolCallConfirmed with allow-session adds tool to session permissions|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects session permissions subagent tool calls inherit parent session permissions|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects tool_ready dispatches progress actions to advance tool call state pending_confirmation for a tool inside a subagent routes to the subagent session|occurrence=1 Introduced tests:
sessionPermissions.ts ×4 Introduced files:
toolCallConfirmed routes confirmation to correct agent via _toolCallAgents|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects read auto-approve auto-approves reads inside working directory|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects read auto-approve does not auto-approve reads outside working directory|occurrence=1 Introduced tests:
agentSideEffects.ts ×1 Introduced files:
Introduced tests:
agentSideEffects.test|title=AgentSideEffects subagent sessions session-level autoApprove on the parent is inherited by tools in subagent sessions|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects session permissions tool_ready action includes confirmation options when confirmation is needed|occurrence=1 Introduced tests:
agentSideEffects.ts ×3 Introduced files:
agentSideEffects.test|title=AgentSideEffects tool_ready dispatches progress actions to advance tool call state tool_ready for a permission-gated tool dispatches ChatToolCallReady and advances state to PendingConfirmation|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects tool_ready dispatches progress actions to advance tool call state tool_ready for a non-permission tool dispatches ChatToolCallReady and advances state from Streaming to Running|occurrence=1 Introduced tests:
agentSideEffects.ts ×2 Introduced files:
Introduced tests:
agentSideEffects.test|title=AgentSideEffects session permissions subsequent tool_ready for same tool is auto-approved after allow-session permission|occurrence=1 Introduced tests:
sessionPermissions.ts ×2 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
agentSideEffects.test|title=AgentSideEffects session config auto-approve respects mid-session config change via SessionConfigChanged|occurrence=1 Introduced tests:
agentSideEffects.test|title=AgentSideEffects session config auto-approve auto-approves all writes when autoApprove is set to bypass|occurrence=1, agentSideEffects.test|title=AgentSideEffects session config auto-approve auto-approves shell commands when autoApprove is set to bypass|occurrence=1 Introduced tests:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.ts ×3 Introduced files:
agentSideEffects.ts ×1 Introduced files:
agentSideEffects.ts ×1 Introduced files:
agentSideEffects.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
agentSideEffects.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
agentSideEffects.ts ×2 Introduced files:
agentSideEffects.ts ×1 Introduced files:
agentSideEffects.ts ×1 Introduced files:
agentSideEffects.ts ×1 Introduced files:
agentSideEffects.ts ×4 Introduced files:
agentSideEffects.ts ×3 Introduced files:
agentSideEffects.ts ×5 Introduced files:
sessionPermissions.test|title=SessionPermissionManager requires confirmation for files that can register lifecycle hooks|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager auto-approves when a symlink stays inside the working directory|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager requires confirmation for protected files inside the working directory|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager auto-approves a normal file inside the working directory|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager requires confirmation when a symlink redirects outside the working directory|occurrence=1 Introduced tests:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×5 Introduced files:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.test|title=SessionPermissionManager respects forwarded terminal auto-approve allow rules in default permission mode|occurrence=1 Introduced tests:
sessionPermissions.ts ×2 Introduced files:
Introduced tests:
sessionPermissions.test|title=SessionPermissionManager uses forwarded terminal auto-approve rules as the source of truth over fallback defaults|occurrence=1 Introduced tests:
sessionPermissions.ts ×2 Introduced files:
sessionPermissions.ts ×3 Introduced files:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.test|title=SessionPermissionManager auto-approves reads when the working directory is itself symlinked|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager auto-approves a read through a symlink that stays inside the working directory|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager auto-approves reads inside but requires confirmation outside the working directory|occurrence=1 Introduced tests:
sessionPermissions.test|title=SessionPermissionManager requires confirmation when only the real read path is inside the working directory|occurrence=1, sessionPermissions.test|title=SessionPermissionManager requires confirmation when a symlinked read ancestor redirects outside the working directory|occurrence=1 Introduced tests:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×3 Introduced files:
sessionPermissions.test|title=SessionPermissionManager auto-approves shell commands in default permission mode when terminal auto-approve is enabled|occurrence=1 Introduced tests:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×2 Introduced files:
sessionPermissions.test|title=SessionPermissionManager does not affect session bypass permission mode when terminal auto-approve is disabled|occurrence=1 Introduced tests:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.ts ×2 Introduced files:
sessionPermissions.ts ×3 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×2 Introduced files:
Introduced tests:
sessionPermissions.ts ×1 Introduced files:
Introduced tests:
sessionPermissions.ts ×3 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×7 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×4 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×7 Introduced files:
sessionPermissions.test|title=SessionPermissionManager auto-approves any write when session bypass is enabled|occurrence=1 Introduced tests:
sessionPermissions.ts ×2 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×6 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
sessionPermissions.ts ×1 Introduced files:
agentConfigurationService.ts ×2 Introduced files:
sessionPermissions.ts ×26 Introduced files:
agentConfigurationService.ts ×5 Introduced files:
agentHostStateManager.ts ×1 Introduced files:
agentHostStateManager.ts ×3 Introduced files:
agentHostStateManager.ts ×1 Introduced files:
agentHostStateManager.ts ×2 Introduced files:
sessionState.ts ×1 Introduced files:
agentHostStateManager.ts ×3 Introduced files:
agentHostStateManager.ts ×1 Introduced files:
agentHostStateManager.ts ×4 Introduced files:
sessionState.ts ×1 Introduced files:
agentHostStateManager.ts ×60 Introduced files:
agentHostSchema.ts ×5 Introduced files:
agentConfigurationService.ts ×16 Introduced files:
commandAutoApprover.ts ×4 Introduced files:
agentCustomizationSettings.ts ×7 Introduced files:
appNodeModules.ts ×1 Introduced files:
appNodeModules.ts ×1 Introduced files:
commandAutoApprover.ts ×14 Introduced files:
appNodeModules.ts ×3 Introduced files:
log.ts ×1 Introduced files:
log.ts ×72 Introduced files:
buffer.test|title=Buffer Performance issue with VSBuffer#slice #76076|occurrence=1 Introduced tests:
glob.ts ×24 Introduced files:
async.ts ×1 Introduced files:
async.ts ×3 Introduced files:
async.ts ×1 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×3 Introduced files:
async.ts ×202 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×2 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×2 Introduced files:
contextkey.ts ×2 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×1 Introduced files:
contextkey.ts ×201 Introduced files:
sessionState.ts ×2 Introduced files:
agentService.ts ×15 Introduced files:
annotationsUri.ts ×3 Introduced files:
sessionState.ts ×2 Introduced files:
network.ts ×1 Introduced files:
network.ts ×3 Introduced files:
sessionReducers.ts ×1 Introduced files:
hash.ts ×17 Introduced files:
labels.ts ×12 Introduced files:
network.ts ×1 Introduced files:
network.ts ×2 Introduced files:
sessionState.ts ×1 Introduced files:
sessionState.ts ×1 Introduced files:
resources.ts ×23 Introduced files:
network.ts ×20 Introduced files:
strings.test|title=Strings trimWhitespace|occurrence=1 Introduced tests:
extpath.ts ×17 Introduced files:
instantiation.ts ×1 Introduced files:
strings.ts ×101 Introduced files:
reducer.ts ×14 Introduced files:
changesetUri.ts ×16 Introduced files:
sessionActions.ts ×6 Introduced files:
event.ts ×1 Introduced files:
sessionState.ts ×1 Introduced files:
sessionState.ts ×3 Introduced files:
sessionState.ts ×57 Introduced files:
event.ts ×2 Introduced files:
cancellation.test|title=CancellationToken None|occurrence=1 Introduced tests:
event.ts ×3 Introduced files:
event.ts ×8 Introduced files:
event.ts ×3 Introduced files:
lifecycle.ts ×1 Introduced files:
cancellation.ts ×18 Introduced files:
lifecycle.ts ×2 Introduced files:
lifecycle.test|title=Lifecycle dispose disposable array|occurrence=1, lifecycle.test|title=Lifecycle Action bar has broken accessibility #100273|occurrence=1 Introduced tests:
event.ts ×3 Introduced files:
event.ts ×1 Introduced files:
lifecycle.ts ×3 Introduced files:
event.ts ×4 Introduced files:
event.ts ×2 Introduced files:
lifecycle.ts ×2 Introduced files:
event.ts ×2 Introduced files:
event.ts ×93 Introduced files:
agentHostSchema.test|title=agentHostSchema validateOrDefault uses defaults when input is undefined|occurrence=1 Introduced tests:
buffer.ts ×1 Introduced files:
agentHostSchema.ts ×1 Introduced files:
buffer.ts ×4 Introduced files:
sandboxConfigSchema.ts ×1 Introduced files:
agentHostSchema.ts ×3 Introduced files:
agentHostSchema.test|title=agentHostSchema createSchema toProtocol emits a JSON-Schema-compatible object|occurrence=1, agentHostSchema.test|title=agentHostSchema platformSessionSchema exposes approval choices in picker order with current copy|occurrence=1 Introduced tests:
buffer.ts ×2 Introduced files:
copilotCliConfig.ts ×2 Introduced files:
agentHostSchema.ts ×1 Introduced files:
agentHostSchema.ts ×21 Introduced files:
buffer.ts ×1 Introduced files:
buffer.ts ×42 Introduced files:
scanner.ts ×13 Introduced files:
uri.ts ×3 Introduced files:
scanner.ts ×3 Introduced files:
scanner.ts ×1 Introduced files:
scanner.ts ×1 Introduced files:
scanner.ts ×1 Introduced files:
scanner.ts ×1 Introduced files:
scanner.ts ×1 Introduced files:
scanner.ts ×36 Introduced files:
uri.test|title=URI VSCode URI module's driveLetterPath regex is incorrect, #32961|occurrence=1 Introduced tests:
uri.ts ×2 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×14 Introduced files:
path.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×6 Introduced files:
path.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×8 Introduced files:
path.ts ×5 Introduced files:
lifecycle.ts ×1 Introduced files:
uri.ts ×3 Introduced files:
uri.ts ×1 Introduced files:
settings.ts ×2 Introduced files:
uri.ts ×3 Introduced files:
configuration.ts ×12 Introduced files:
sessionProtocol.ts ×5 Introduced files:
settings.ts ×1 Introduced files:
languageStatusDedupe.test|title=LanguageStatus - Dedicated Entry Deduplication disposes entries no longer in model|occurrence=1 Introduced tests:
path.ts ×1 Introduced files:
uri.ts ×1 Introduced files:
uri.ts ×3 Introduced files:
uri.ts ×10 Introduced files:
languageStatusDedupe.test|title=LanguageStatus - Dedicated Entry Deduplication mixed unique and duplicate IDs|occurrence=1, languageStatusDedupe.test|title=LanguageStatus - Dedicated Entry Deduplication creates new entry when none exists|occurrence=1, +4 Introduced tests:
sessionConfigKeys.ts ×1 Introduced files:
state.ts ×1 Introduced files:
commands.ts ×1 Introduced files:
uri.ts ×3 Introduced files:
uri.ts ×2 Introduced files:
equals.ts ×14 Introduced files:
map.ts ×1 Introduced files:
uri.ts ×3 Introduced files:
actions.ts ×1 Introduced files:
map.ts ×1 Introduced files:
actions.ts ×1 Introduced files:
map.ts ×1 Introduced files:
state.ts ×1 Introduced files:
state.ts ×1 Introduced files:
state.ts ×1 Introduced files:
uri.test|title=URI URI#file, win-speciale|occurrence=1, charCode.test|title=CharCode has good values|occurrence=1, +2 Introduced tests:
uri.ts ×3 Introduced files:
product.ts ×4 Introduced files:
uri.ts ×2 Introduced files:
utils.ts ×3 Introduced files:
path.ts ×3 Introduced files:
uri.ts ×1 Introduced files:
instantiation.ts ×4 Introduced files:
uri.ts ×9 Introduced files:
telemetry.ts ×3 Introduced files:
nls.ts ×1 Introduced files:
path.ts ×3 Introduced files:
errorMessage.ts ×6 Introduced files:
linkedList.ts ×13 Introduced files:
nls.ts ×6 Introduced files:
objects.ts ×13 Introduced files:
instantiation.ts ×5 Introduced files:
path.ts ×1 Introduced files:
path.ts ×3 Introduced files:
path.ts ×3 Introduced files:
lifecycle.ts ×1 Introduced files:
lifecycle.ts ×2 Introduced files:
lifecycle.ts ×2 Introduced files:
lifecycle.ts ×1 Introduced files:
lifecycle.ts ×1 Introduced files:
lifecycle.ts ×3 Introduced files:
path.ts ×1 Introduced files:
lifecycle.ts ×1 Introduced files:
lifecycle.ts ×4 Introduced files:
path.ts ×6 Introduced files:
lifecycle.ts ×4 Introduced files:
lifecycle.ts ×6 Introduced files:
lifecycle.ts ×2 Introduced files:
lazy.ts ×1 Introduced files:
lifecycle.ts ×1 Introduced files:
lifecycle.ts ×3 Introduced files:
lazy.ts ×3 Introduced files:
lifecycle.ts ×1 Introduced files:
lifecycle.ts ×1 Introduced files:
path.ts ×2 Introduced files:
uint.ts ×2 Introduced files:
iterator.ts ×1 Introduced files:
lifecycle.ts ×1 Introduced files:
map.ts ×97 Introduced files:
Introduced tests
Every collected test enters the hierarchy at exactly one concept.
No tests are introduced at this concept. Its intent tests are introduced by other concepts.
Introduced code
Every collected source range enters the hierarchy at exactly one concept.
1 file ranked by introduced lines: 11 introduced LOC across 5 ranges.
Expand a file to inspect source; the > gutter marks introduced lines.
src/vs/platform/agentHost/node/sessionPermissions.ts 11 introduced LOC · 5 ranges
Open complete file
252
*/
253
async getAutoApproval ( e : IToolApprovalEvent , sessionKey : ProtocolURI ) : Promise < ToolCallConfirmationReason | undefined > {
254
>
const workDir = this . _configService . getEffectiveWorkingDirectory ( sessionKey );
sessionPermissions.ts
255
>
const workingDirectory = workDir ? URI . parse ( workDir ) : undefined ;
256
>
257
>
// 0. Sandbox bypass: a shell command that opted out of the
258
>
// sandbox (`requestSandboxBypass`) escapes the sandbox's
259
>
// containment.
260
>
if ( e . requestSandboxBypass ) {
261
return undefined ;
262
}
278
279
// 4. Read auto-approval
281
if ( await this . _isReadAutoApproved ( URI . file ( e . permissionPath ), workingDirectory )) {
282
this . _logService . trace ( `[SessionPermissionManager] Auto-approving read of ${ e . permissionPath } ` );
287
288
// 5. Write auto-approval
290
if ( await this . _isEditAutoApproved ( URI . file ( e . permissionPath ), workingDirectory )) {
291
this . _logService . trace ( `[SessionPermissionManager] Auto-approving write to ${ e . permissionPath } ` );
296
297
// 6. Shell auto-approval
299
if ( this . _configService . getRootValue ( platformRootSchema , AgentHostTerminalAutoApproveEnabledConfigKey ) === false ) {
300
return undefined ;
315
316
return undefined ;
318
319
/**