1
>
/*---------------------------------------------------------------------------------------------
commandAutoApprover.ts
2
>
* Copyright (c) Microsoft Corporation. All rights reserved.
3
>
* Licensed under the MIT License. See License.txt in the project root for license information.
4
>
*--------------------------------------------------------------------------------------------*/
5
>
6
>
import type { Language, Parser, Query, QueryCapture } from '@vscode/tree-sitter-wasm';
7
>
import * as fs from 'fs';
8
>
import { Disposable, toDisposable } from '../../../base/common/lifecycle.js';
9
>
import { FileAccess } from '../../../base/common/network.js';
10
>
import { escapeRegExpCharacters, regExpLeadsToEndlessLoop } from '../../../base/common/strings.js';
11
>
import { URI } from '../../../base/common/uri.js';
12
>
import { getAppNodeModulesPath } from './appNodeModules.js';
13
>
import { ILogService } from '../../log/common/log.js';
14
>
import type { AgentHostTerminalAutoApproveRuleValue, AgentHostTerminalAutoApproveRules } from '../common/agentHostSchema.js';
15
>
16
>
/**
17
>
* Redirect destinations that do not result in a write to an arbitrary file
18
>
* on disk: the /dev sinks that discard output (`/dev/null`) or write back to
19
>
* the same terminal (`/dev/stdout`, `/dev/stderr`, `/dev/tty`).
20
>
*/
21
>
const SAFE_REDIRECT_TARGETS: ReadonlySet<string> = new Set([
22
>
'/dev/null',
23
>
'/dev/stdout',
24
>
'/dev/stderr',
25
>
'/dev/tty',
26
>
]);
27
>
28
>
/**
29
>
* Returns true when the given redirection destination is known to be safe:
30
>
* either a known-safe /dev sink or a file-descriptor duplication target
31
>
* like `&1` (used in `2>&1`).
32
>
*/
33
function isSafeRedirectDestination(dest: string): boolean {
34
let cleaned = dest.trim();