Function isWorkspaceTrustedForSharedExecution

src/node/services/utils/workspaceTrust.ts:6–19

(
  metadata: WorkspaceMetadata,
  projectsConfig: ProjectsConfig["projects"]
)

import { stripTrailingSlashes } from "@/node/utils/pathUtils";

export function isWorkspaceTrustedForSharedExecution(
  metadata: WorkspaceMetadata,
  projectsConfig: ProjectsConfig["projects"]
): boolean {
  if (!isMultiProject(metadata)) {
    return projectsConfig.get(stripTrailingSlashes(metadata.projectPath))?.trusted ?? false;
  }

  // Multi-project workspaces share a single runtime/container, so one untrusted repo must disable
  // trusted behavior for the whole execution environment.
  return getProjects(metadata).every(
    (project) => projectsConfig.get(stripTrailingSlashes(project.projectPath))?.trusted ?? false
  );
}