Method forkProject

backend/src/project/project.service.ts:543–605

* Fork an existing project to create a copy for the current user * @param userId The user ID making the request * @param projectId The project ID to fork * @returns The chat associated with the newly created project

(userId: string, projectId: string)

    try {
      const sandbox = await sandboxHandle(newProjectId);
      const remoteZip = '/tmp/codefox-fork.zip';
      await sandbox.writeFiles([
        { path: remoteZip, content: new Uint8Array(fs.readFileSync(zipPath)) },
      ]);
      const unpack = await sandbox.runCommand({
        cmd: 'python3',
        args: ['-m', 'zipfile', '-e', remoteZip, SANDBOX_ROOT],
        timeoutMs: 5 * 60 * 1000,
      });
      if (unpack.exitCode !== 0) {
        throw new Error(
          `Unpacking the fork failed: ${(await unpack.stderr()).slice(-300)}`,
        );
      }
      return newProjectId;
    } finally {
      fs.promises
        .unlink(zipPath)
        .catch((error) =>
          this.logger.warn(`Could not remove ${zipPath}: ${error}`),
        );
    }
  }

  /**
   * Your own project, copied. Same machinery as a fork — it already copies
   * files, mints a new share id and starts private — minus the "not yours"
   * rule, which is the only thing that ever stopped you.
   *
   * ponytail: a flag on forkProject, not a second copy of it. The two differ
   * by one guard and one label.
   */
  async duplicateProject(userId: string, projectId: string): Promise<Chat> {
    return this.forkProject(userId, projectId, true);
  }

  async forkProject(
    userId: string,
    projectId: string,
    mine = false,
  ): Promise<Chat> {
    try {
      this.logger.debug(`User ${userId} forking project ${projectId}`);

      // Get the source project
      const sourceProject = await this.getProjectById(projectId);

      // Check if the project is public or owned by the requesting user
      if (!sourceProject.isPublic && sourceProject.userId !== userId) {
        throw new ForbiddenException(
          'Cannot fork a private project you do not own',
        );
      }

      // Forking someone else's is the public action; copying your own is
      // `duplicateProject`, which sets `mine`. Without the distinction the
      // fork button on the wall would offer a no-op on your own card.