Function updateNetworkAllowed

pkg/cli/codemod_mcp_network.go:289–362

updateNetworkAllowed updates the existing top-level network.allowed configuration

(lines []string, domains []string)

// updateNetworkAllowed updates the existing top-level network.allowed configuration
func updateNetworkAllowed(lines []string, domains []string) []string {
	var result []string
	var inNetworkBlock bool
	var networkIndent string
	var inAllowedBlock bool
	var allowedIndent string
	var replacedAllowed bool

	for _, line := range lines {
		trimmedLine := strings.TrimSpace(line)

		// Track if we're in network block
		if strings.HasPrefix(trimmedLine, "network:") {
			inNetworkBlock = true
			networkIndent = getIndentation(line)
			result = append(result, line)
			continue
		}

		// Check if we've left network block
		if inNetworkBlock && len(trimmedLine) > 0 && !strings.HasPrefix(trimmedLine, "#") {
			if hasExitedBlock(line, networkIndent) {
				inNetworkBlock = false
				inAllowedBlock = false
			}
		}

		// Track if we're in allowed block within network
		if inNetworkBlock && strings.HasPrefix(trimmedLine, "allowed:") {
			inAllowedBlock = true
			allowedIndent = getIndentation(line)
			replacedAllowed = true
			// Replace the allowed block
			result = append(result, line)
			for _, domain := range domains {
				result = append(result, fmt.Sprintf("%s  - %s", allowedIndent, domain))
			}
			continue
		}

		// Skip existing allowed array items
		if inAllowedBlock {
			currentIndent := getIndentation(line)

			// Empty lines - skip
			if trimmedLine == "" {
				continue
			}

			// Comments at deeper indentation - skip
			if strings.HasPrefix(trimmedLine, "#") && len(currentIndent) > len(allowedIndent) {
				continue
			}

			// Array items (lines starting with -)
			if strings.HasPrefix(trimmedLine, "-") && len(currentIndent) > len(allowedIndent) {
				continue
			}